Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
File: rV3Hd3t3orNHfGernSbMeqAvOIk.mft (raw, json)
Hash identifier: yoz4U9jZW/CwraBYUn1XwmUdudjnJqvb0Y6G0379CBo=
Subject key identifier: 83:E9:EF:08:51:5D:D9:35:4E:47:BE:97:63:0D:76:FB:EE:ED:F5:DF
Authority key identifier: AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
Certificate issuer: /CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Certificate serial: 019D273B1C829D7BF94D5A2E76569485324C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
Manifest number: 1801
Signing time: Wed 25 Mar 2026 23:01:18 +0000
Manifest this update: Wed 25 Mar 2026 23:01:18 +0000
Manifest next update: Thu 26 Mar 2026 23:01:18 +0000
Files and hashes: 1: rV3Hd3t3orNHfGernSbMeqAvOIk.crl (hash: om6FylfDAHTCE05unH5TqBS8zrnP2pxxi7jvOi2z8DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:1c:82:9d:7b:f9:4d:5a:2e:76:56:94:85:32:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Validity
Not Before: Mar 25 23:01:18 2026 GMT
Not After : Mar 26 23:01:18 2026 GMT
Subject: CN=83e9ef08515dd9354e47be97630d76fbeeedf5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7c:2a:a8:b3:43:ca:34:fc:11:6b:86:40:d8:
af:de:04:bf:18:84:6f:b5:6e:42:dc:42:af:73:ac:
7d:cd:b6:6d:e1:c0:9f:3a:d4:25:45:73:51:17:4e:
70:86:21:f0:2b:c9:c7:6e:50:13:7f:5d:61:42:7e:
28:f8:dc:9c:6e:3c:df:a9:34:e9:40:07:39:f0:91:
80:5a:7b:1f:3e:7f:e8:36:e9:e3:45:c3:b8:9d:36:
8f:ad:e6:be:65:cf:b5:29:6f:1e:f1:3f:a2:79:6d:
34:09:7b:37:1e:6b:4d:45:6a:44:9d:62:85:45:7a:
00:f5:b0:f8:a7:93:4a:e3:96:ae:23:2a:4a:c9:2a:
06:49:92:50:a0:8a:e5:6b:cb:75:4b:6d:16:60:3b:
cb:55:47:82:53:fd:f3:63:9a:8f:4e:42:c8:4b:c3:
2f:de:c1:55:e3:84:08:6c:65:c1:56:23:21:4f:ee:
b2:a5:3b:ba:7e:7e:75:80:0b:44:70:6b:e9:84:40:
19:29:27:42:eb:38:d4:78:f4:6c:50:d7:85:1b:fb:
ed:cd:10:f0:9b:56:67:53:d5:e6:9e:20:f8:a5:91:
c6:b1:e3:6a:f0:cb:7e:5f:d6:64:e3:06:1b:91:75:
ca:95:bd:61:40:ff:d3:00:64:bc:e5:8a:0f:c8:0d:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E9:EF:08:51:5D:D9:35:4E:47:BE:97:63:0D:76:FB:EE:ED:F5:DF
X509v3 Authority Key Identifier:
keyid:AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:dc:ff:c3:ff:a4:a4:32:4d:c7:72:f6:58:3e:6b:ec:81:8b:
0a:08:27:c3:aa:e9:ef:23:9e:e5:83:7d:c5:6e:70:32:71:64:
d1:42:50:6e:f0:3e:f2:c5:be:2b:05:7a:81:8c:85:12:40:8d:
27:6c:65:5c:71:7b:f4:0f:fd:0e:e2:ef:52:78:c6:7e:27:b8:
07:5c:40:64:27:3f:76:1e:7d:6b:da:a8:5f:44:f9:9e:08:90:
2c:ad:cd:89:d8:c5:f5:f1:09:0a:6d:01:63:5f:41:b6:26:f1:
22:60:c9:1b:5a:70:d7:b7:4a:c3:f5:47:51:70:70:f3:3a:e3:
51:bb:11:53:2b:0c:c7:eb:cf:2d:c2:5d:44:83:45:dc:be:b5:
fc:c0:44:5c:41:8e:2f:df:01:c0:bc:6a:6d:e7:44:83:ff:81:
6b:1c:14:3b:6e:44:93:56:eb:54:61:8c:16:0c:c9:5b:de:ac:
9f:37:9f:0a:13:76:62:e4:aa:9b:60:67:9a:c5:76:73:76:e5:
06:54:db:45:6d:cc:00:79:78:ff:b4:bc:41:b6:69:a8:0f:05:
a0:21:d1:3c:dd:59:2d:b2:e9:a1:d9:0b:02:12:f4:3f:1b:ea:
51:00:eb:07:5f:58:7a:1c:4d:67:ab:fe:bf:5a:17:6c:5a:56:
b4:f8:4b:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOxyCnXv5TVoudlaUhTJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWRjNzc3N2I3N2EyYjM0NzdjNjdhYjlkMjZjYzdhYTAy
ZjM4ODkwHhcNMjYwMzI1MjMwMTE4WhcNMjYwMzI2MjMwMTE4WjAzMTEwLwYDVQQD
Eyg4M2U5ZWYwODUxNWRkOTM1NGU0N2JlOTc2MzBkNzZmYmVlZWRmNWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3wqqLNDyjT8EWuGQNiv3gS/GIRv
tW5C3EKvc6x9zbZt4cCfOtQlRXNRF05whiHwK8nHblATf11hQn4o+NycbjzfqTTp
QAc58JGAWnsfPn/oNunjRcO4nTaPrea+Zc+1KW8e8T+ieW00CXs3HmtNRWpEnWKF
RXoA9bD4p5NK45auIypKySoGSZJQoIrla8t1S20WYDvLVUeCU/3zY5qPTkLIS8Mv
3sFV44QIbGXBViMhT+6ypTu6fn51gAtEcGvphEAZKSdC6zjUePRsUNeFG/vtzRDw
m1ZnU9XmniD4pZHGseNq8Mt+X9Zk4wYbkXXKlb1hQP/TAGS85YoPyA0rxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPp7whRXdk1Tke+l2MNdvvu7fXfMB8GA1UdIwQY
MBaAFK1dx3d7d6KzR3xnq50mzHqgLziJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclYzSGQzdDNvck5IZkdlcm5TYk1lcUF2T0lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82NTU4NjgtM2I3OS00NDQ3LWI0NjUt
ZjQwOTQ1OGMwNGQ1LzEvclYzSGQzdDNvck5IZkdlcm5TYk1lcUF2T0lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC82NTU4NjgtM2I3OS00NDQ3LWI0NjUtZjQwOTQ1OGMwNGQ1
LzEvclYzSGQzdDNvck5IZkdlcm5TYk1lcUF2T0lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtz/w/+k
pDJNx3L2WD5r7IGLCggnw6rp7yOe5YN9xW5wMnFk0UJQbvA+8sW+KwV6gYyFEkCN
J2xlXHF79A/9DuLvUnjGfie4B1xAZCc/dh59a9qoX0T5ngiQLK3NidjF9fEJCm0B
Y19BtibxImDJG1pw17dKw/VHUXBw8zrjUbsRUysMx+vPLcJdRINF3L61/MBEXEGO
L98BwLxqbedEg/+BaxwUO25Ek1brVGGMFgzJW96snzefChN2YuSqm2BnmsV2c3bl
BlTbRW3MAHl4/7S8QbZpqA8FoCHRPN1ZLbLpodkLAhL0PxvqUQDrB19YehxNZ6v+
v1oXbFpWtPhL+A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:41 2026 by rpki-client