Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
File: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json)
Hash identifier: 2HioxvHeUJoTV9r/4vrxC7TbTQXm1J0LfCEMGHvNhmE=
Subject key identifier: BA:3A:47:1C:7A:06:92:DC:17:EA:B2:AB:89:90:1E:BE:B8:19:9E:05
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Certificate issuer: /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial: 019D28BB1E3C641B03590B66DE187BB0A0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
Manifest number: 08DE
Signing time: Thu 26 Mar 2026 06:00:44 +0000
Manifest this update: Thu 26 Mar 2026 06:00:44 +0000
Manifest next update: Fri 27 Mar 2026 06:00:44 +0000
Files and hashes: 1: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: coJ3MNyKqBjw+6Uv6jTY55AAFnh1D9C/ABEid4rLZLM=)
2: hBIKQJotb91PfUz83IlhlDln8Os.roa (hash: FZgPmcaU95wHeFAG7MifAFsuelM+Kr14jElFrFSjrsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1e:3c:64:1b:03:59:0b:66:de:18:7b:b0:a0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Validity
Not Before: Mar 26 06:00:44 2026 GMT
Not After : Mar 27 06:00:44 2026 GMT
Subject: CN=ba3a471c7a0692dc17eab2ab89901ebeb8199e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:43:ba:2b:1d:f7:64:db:e9:d8:18:01:b7:
db:47:07:e7:6f:9e:82:9f:bc:6a:fe:16:ee:81:ae:
69:1c:dc:33:0b:b5:3d:25:4c:35:8b:66:17:e1:70:
f0:34:cd:e0:2c:75:ec:96:81:70:d1:df:bb:10:ee:
7e:1f:a4:ae:af:d1:0f:e8:20:b9:fb:3a:0b:bc:96:
38:b8:d1:e5:ce:36:dc:5f:24:c7:02:79:37:88:7b:
5b:39:1f:9d:cb:b6:05:21:eb:e0:c4:f9:c9:a4:a8:
a6:ec:e0:c7:cb:f7:1e:3b:07:bf:5d:6c:dc:f0:b9:
58:60:ec:47:0d:34:72:b6:57:2b:36:9b:1e:30:76:
5a:b4:2a:d8:bf:c2:ed:0f:97:5c:b0:ec:07:03:7b:
a2:9a:70:36:68:ad:a5:a5:6e:7a:af:f0:04:d6:1d:
97:df:8b:1d:38:8f:b3:50:6c:c5:16:fa:cd:34:da:
53:d4:ea:8b:35:f2:6d:4d:8f:1b:36:a1:3d:d5:50:
64:0b:5d:81:84:66:f4:c0:ba:a3:66:47:98:06:08:
6f:e1:c5:48:57:94:54:3b:a8:30:c9:d1:9d:5a:66:
3a:49:8e:32:25:6f:ca:80:c9:88:51:32:15:d9:dc:
8d:1d:5b:d5:3c:73:b7:05:0d:3d:33:ac:53:3a:01:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3A:47:1C:7A:06:92:DC:17:EA:B2:AB:89:90:1E:BE:B8:19:9E:05
X509v3 Authority Key Identifier:
keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c7:46:56:2d:b1:80:6d:60:4e:0b:0a:73:4a:59:43:dc:b0:
1d:14:83:55:07:a8:0f:0a:66:94:44:e6:6f:d8:b3:b6:f7:5f:
24:73:9c:81:fe:ce:d5:fe:a9:41:f8:dc:e0:22:ff:95:ee:f0:
33:01:54:e0:e3:30:ce:be:20:95:40:d8:aa:57:da:f2:cc:db:
2a:e9:63:cc:f4:d6:33:1c:b5:e9:41:58:4e:4c:cb:b1:5b:f1:
09:a0:c8:76:46:cc:e0:d7:44:92:75:1f:b3:28:04:dd:99:0d:
3c:66:0a:10:23:e5:93:cd:71:35:08:4f:bb:f1:80:2a:26:b9:
f9:70:2e:2f:43:d3:38:d2:47:57:c2:2a:30:e1:ec:41:28:c9:
f5:e1:c4:70:f7:f1:80:1e:4e:48:f8:43:33:4a:33:4a:73:de:
c6:bd:2b:f5:30:38:25:6c:ca:2c:f5:9c:64:73:c6:22:dc:1d:
fd:96:fd:8a:c9:03:f7:c2:74:9b:07:2d:c0:6c:67:6f:63:bd:
bf:fc:3b:c9:ca:4d:1a:b9:a4:b9:79:84:e5:fc:5b:6c:77:32:
d7:6a:76:4b:20:59:67:aa:2e:56:25:b9:8a:53:72:ac:88:48:
95:6a:c9:2b:4a:9e:7a:1f:bf:3c:a6:ea:10:95:d8:4c:4d:0c:
e1:93:86:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oux48ZBsDWQtm3hh7sKDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZGRkNmU3YTFmZWI2ZmI0N2M5YTJmODk5MTg4MjcwOTRk
YmZjMTcwHhcNMjYwMzI2MDYwMDQ0WhcNMjYwMzI3MDYwMDQ0WjAzMTEwLwYDVQQD
EyhiYTNhNDcxYzdhMDY5MmRjMTdlYWIyYWI4OTkwMWViZWI4MTk5ZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15dDuisd92Tb6dgYAbfbRwfnb56C
n7xq/hbuga5pHNwzC7U9JUw1i2YX4XDwNM3gLHXsloFw0d+7EO5+H6Sur9EP6CC5
+zoLvJY4uNHlzjbcXyTHAnk3iHtbOR+dy7YFIevgxPnJpKim7ODHy/ceOwe/XWzc
8LlYYOxHDTRytlcrNpseMHZatCrYv8LtD5dcsOwHA3uimnA2aK2lpW56r/AE1h2X
34sdOI+zUGzFFvrNNNpT1OqLNfJtTY8bNqE91VBkC12BhGb0wLqjZkeYBghv4cVI
V5RUO6gwydGdWmY6SY4yJW/KgMmIUTIV2dyNHVvVPHO3BQ09M6xTOgF+KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLo6Rxx6BpLcF+qyq4mQHr64GZ4FMB8GA1UdIwQY
MBaAFN7d1ueh/rb7R8mi+JkYgnCU2/wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3QzVzU2SC10dnRIeWFMNG1SaUNjSlRiX0JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wYWQ5OWEtMWEwZi00MmUwLWFlN2Qt
ZjA3MTgzNzczYjI2LzEvM3QzVzU2SC10dnRIeWFMNG1SaUNjSlRiX0JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wYWQ5OWEtMWEwZi00MmUwLWFlN2QtZjA3MTgzNzczYjI2
LzEvM3QzVzU2SC10dnRIeWFMNG1SaUNjSlRiX0JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcdGVi2x
gG1gTgsKc0pZQ9ywHRSDVQeoDwpmlETmb9iztvdfJHOcgf7O1f6pQfjc4CL/le7w
MwFU4OMwzr4glUDYqlfa8szbKuljzPTWMxy16UFYTkzLsVvxCaDIdkbM4NdEknUf
sygE3ZkNPGYKECPlk81xNQhPu/GAKia5+XAuL0PTONJHV8IqMOHsQSjJ9eHEcPfx
gB5OSPhDM0ozSnPexr0r9TA4JWzKLPWcZHPGItwd/Zb9iskD98J0mwctwGxnb2O9
v/w7ycpNGrmkuXmE5fxbbHcy12p2SyBZZ6ouViW5ilNyrIhIlWrJK0qeeh+/PKbq
EJXYTE0M4ZOGCA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:25 2026 by rpki-client