Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: VmfbgsT81tm7/67BV9Bs4g8AER4XDd8q33ndSluKvu4=
Subject key identifier: A1:C4:C3:50:9F:7D:06:15:3A:D4:AB:A5:15:C4:F3:5C:AA:C9:77:9F
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 019D27DF64B1DC1507C81A22E96BBE1EE764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 13BA
Signing time: Thu 26 Mar 2026 02:00:44 +0000
Manifest this update: Thu 26 Mar 2026 02:00:44 +0000
Manifest next update: Fri 27 Mar 2026 02:00:44 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: rZhqZ4CRz9EAEZOSPQoFtcfuTXZ0Ba/jHKFlhh4o5Mk=)
2: S_e75AZV3-MMHLgXTcVLGq4T6uc.roa (hash: AVmxa5KmaRL9M9i0sdO8A9BbJeQGosTTukip4Q42nu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:64:b1:dc:15:07:c8:1a:22:e9:6b:be:1e:e7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Mar 26 02:00:44 2026 GMT
Not After : Mar 27 02:00:44 2026 GMT
Subject: CN=a1c4c3509f7d06153ad4aba515c4f35caac9779f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:09:c5:45:0b:c8:48:ff:e3:25:c5:5d:46:
f1:cf:e3:bc:23:22:5f:d3:29:33:c1:14:c1:9f:b6:
38:55:19:0d:4d:d4:ca:df:9a:49:e7:36:6b:26:0c:
2e:2e:ef:5d:4d:25:23:41:e5:47:fd:a0:10:c9:cf:
0b:bf:4e:5c:0b:cf:2d:a7:99:46:4c:83:dc:1d:0c:
c0:9e:97:f2:ca:de:4a:c8:06:82:09:bc:cf:35:ef:
a8:b6:e6:6f:25:61:f0:ad:76:1f:2e:a6:12:54:71:
37:40:ca:34:f9:b6:7a:90:f6:6e:dd:5e:c1:19:0c:
cf:8a:53:49:50:df:d8:dc:ff:f4:78:56:9c:62:64:
8b:ae:ca:f1:e2:af:fc:90:b5:81:98:83:c3:33:34:
44:94:3b:ac:71:44:fd:9e:62:21:7f:1d:81:63:a8:
ad:ad:1e:6a:49:ff:dc:b2:0f:9c:fe:c4:f7:a2:18:
e5:a1:f9:57:f9:31:7c:da:c8:2e:39:98:f8:9c:33:
5d:1a:7d:30:7c:9c:01:52:0e:d9:66:2b:49:7d:09:
5c:b2:ef:55:89:4b:d4:8e:f3:d5:27:33:51:e0:c1:
cc:bf:8f:0d:a9:15:32:dd:3d:eb:a1:2a:a6:01:c6:
76:03:95:60:d2:e4:c4:1a:c7:33:36:64:7a:c0:b1:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C4:C3:50:9F:7D:06:15:3A:D4:AB:A5:15:C4:F3:5C:AA:C9:77:9F
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e8:ad:65:e2:93:0f:86:2b:50:89:3b:dc:ae:59:98:ca:e6:
17:28:5e:69:0f:7a:97:a9:da:a9:77:7b:fe:4d:4b:f2:7f:f7:
1c:7e:2b:7b:31:08:1b:d3:7b:93:f6:70:40:d5:20:67:9b:a5:
d8:71:8b:dc:77:12:e7:e7:14:95:0f:a9:b0:07:dc:49:59:e3:
e2:17:0c:b3:56:18:f6:e3:73:e2:89:a9:5e:2e:b3:7a:d3:a1:
43:39:97:d7:46:cc:9d:8e:f6:ce:b9:4f:b3:bf:06:bd:89:2f:
2a:88:c5:c6:0f:33:b5:e1:be:2f:33:35:28:e0:d8:58:a8:43:
f8:4f:06:4e:53:39:f8:64:93:3a:dd:d1:a7:f1:de:41:5c:cf:
99:09:49:8f:9f:02:3d:c8:37:20:f9:a3:cd:dd:69:11:b8:73:
ef:da:0e:f5:26:7c:c0:45:02:5d:44:d2:1a:6f:b7:e4:60:5d:
22:52:0f:03:d9:4c:e3:9f:9d:28:c8:76:f5:5d:b9:c2:93:5a:
c3:4d:df:d9:82:f3:54:c5:80:89:cb:47:65:20:5b:f2:af:fc:
4e:7a:86:f4:61:d3:56:2a:57:ef:0c:88:2f:24:7a:79:5d:76:
70:2f:70:8c:39:80:71:b2:d6:33:60:35:dc:0b:b9:41:74:69:
67:6f:5f:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n32Sx3BUHyBoi6Wu+HudkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTU0NzJlYmUxMmI0YjU3MGY4MjcxNDM4NzkxN2VjYjRj
NGRlNTMwHhcNMjYwMzI2MDIwMDQ0WhcNMjYwMzI3MDIwMDQ0WjAzMTEwLwYDVQQD
EyhhMWM0YzM1MDlmN2QwNjE1M2FkNGFiYTUxNWM0ZjM1Y2FhYzk3NzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAIJxUULyEj/4yXFXUbxz+O8IyJf
0ykzwRTBn7Y4VRkNTdTK35pJ5zZrJgwuLu9dTSUjQeVH/aAQyc8Lv05cC88tp5lG
TIPcHQzAnpfyyt5KyAaCCbzPNe+otuZvJWHwrXYfLqYSVHE3QMo0+bZ6kPZu3V7B
GQzPilNJUN/Y3P/0eFacYmSLrsrx4q/8kLWBmIPDMzRElDuscUT9nmIhfx2BY6it
rR5qSf/csg+c/sT3ohjloflX+TF82sguOZj4nDNdGn0wfJwBUg7ZZitJfQlcsu9V
iUvUjvPVJzNR4MHMv48NqRUy3T3roSqmAcZ2A5Vg0uTEGsczNmR6wLEpKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHEw1CffQYVOtSrpRXE81yqyXefMB8GA1UdIwQY
MBaAFNzlRy6+ErS1cPgnFDh5F+y0xN5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjkt
OWYwNWYxMzVkY2Y5LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjktOWYwNWYxMzVkY2Y5
LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuitZeKT
D4YrUIk73K5ZmMrmFyheaQ96l6naqXd7/k1L8n/3HH4rezEIG9N7k/ZwQNUgZ5ul
2HGL3HcS5+cUlQ+psAfcSVnj4hcMs1YY9uNz4ompXi6zetOhQzmX10bMnY72zrlP
s78GvYkvKojFxg8zteG+LzM1KODYWKhD+E8GTlM5+GSTOt3Rp/HeQVzPmQlJj58C
Pcg3IPmjzd1pEbhz79oO9SZ8wEUCXUTSGm+35GBdIlIPA9lM45+dKMh29V25wpNa
w03f2YLzVMWAictHZSBb8q/8TnqG9GHTVipX7wyILyR6eV12cC9wjDmAcbLWM2A1
3Au5QXRpZ29fgw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:13 2026 by rpki-client