Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
File: 3IScc2nn5SxwUdIdunKYMIvpxCg.mft (raw, json)
Hash identifier: U0cuBRj3PlMQJhEJoo5FBl0c2mLj2VJa14U9E8Fky5I=
Subject key identifier: 8B:12:93:F6:50:49:38:AD:1E:A8:75:2F:D8:82:D7:24:EC:85:59:5B
Authority key identifier: DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
Certificate issuer: /CN=dc849c7369e7e52c7051d21dba7298308be9c428
Certificate serial: 019D28849C9C984189B500178EEFF877D931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 05:01:12 +0000
Manifest this update: Thu 26 Mar 2026 05:01:12 +0000
Manifest next update: Fri 27 Mar 2026 05:01:12 +0000
Files and hashes: 1: 3IScc2nn5SxwUdIdunKYMIvpxCg.crl (hash: p6Glwz1ZGwPjCYhrv6ULmVi41iJS9pmN2/wyqQyqknU=)
2: EVEUejBUxMAFSM5mcutAdBHE7R0.roa (hash: qHDy6GnHP2/o9uXwJYd4YuP8Cxkyp2quR/Jtu60lrfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:9c:9c:98:41:89:b5:00:17:8e:ef:f8:77:d9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc849c7369e7e52c7051d21dba7298308be9c428
Validity
Not Before: Mar 26 05:01:12 2026 GMT
Not After : Mar 27 05:01:12 2026 GMT
Subject: CN=8b1293f6504938ad1ea8752fd882d724ec85595b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:c0:65:97:cc:8e:6a:b3:17:f0:82:a1:ce:
e4:e9:b4:2d:68:e0:87:f1:fe:47:a4:62:3e:fc:ac:
1b:92:3b:a6:c1:db:a3:9f:11:3c:ba:50:cc:47:3a:
8b:18:91:10:5c:2c:59:36:43:bd:d7:11:c9:64:7f:
b0:b8:24:6a:62:44:06:8b:c0:e7:18:30:33:b1:e6:
eb:b6:44:ee:ab:92:8a:ce:a7:7c:13:7a:10:4b:10:
e1:50:2d:11:18:3c:6f:fd:f5:8f:c4:62:fc:83:33:
95:5b:81:3b:0b:e2:0d:43:2c:98:24:f7:74:93:a7:
10:55:1d:f5:36:0d:ff:e1:63:be:5d:c0:b3:64:f9:
3e:c2:99:f9:50:28:a8:92:63:cc:2e:8e:83:d8:c7:
70:88:9e:27:f5:08:fc:ae:08:04:ef:4e:3d:3c:69:
17:83:17:4a:a6:f3:2f:0e:24:61:86:9e:39:a8:75:
97:c5:b4:bd:d5:13:7a:64:2a:86:69:98:bb:e5:70:
6e:ee:2f:fc:9b:e5:e4:c0:16:8e:4a:30:45:b9:0f:
8c:8d:87:62:05:e8:19:a3:8f:37:55:18:ca:d8:8e:
19:96:44:b5:f9:c3:6b:ad:39:db:02:2c:60:7a:f4:
d4:3c:83:cd:45:17:e6:23:fc:29:a2:c5:c8:6a:62:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:12:93:F6:50:49:38:AD:1E:A8:75:2F:D8:82:D7:24:EC:85:59:5B
X509v3 Authority Key Identifier:
keyid:DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6c:0e:39:b8:40:86:24:4f:20:98:fe:fa:57:26:11:c1:37:
cd:f5:26:c9:96:0b:95:89:5f:6f:8b:3f:bc:34:f4:ce:8a:8f:
b7:93:07:b4:a9:4f:58:04:8f:1e:9d:d4:22:f2:e3:68:c9:40:
5e:69:c1:d9:1f:3f:c1:d2:fc:72:b9:09:4b:ca:d0:4b:92:b1:
19:19:fe:36:22:e5:f4:51:04:bf:dd:eb:46:3b:a6:60:5f:96:
14:eb:56:43:2a:8e:e0:2d:0a:49:01:b4:43:d0:f4:50:87:b4:
26:a7:6c:3b:5f:43:4e:16:8a:37:d8:ad:50:c7:1f:74:9c:58:
83:5d:56:4b:0e:85:47:2f:b2:60:49:bc:ed:f7:53:45:9d:2b:
e4:ca:de:21:0d:fc:ec:b0:d9:fe:c4:79:61:e8:d4:18:b0:9f:
8c:db:5f:ea:ae:82:b9:82:8f:1a:1d:dc:04:6b:b5:61:7f:da:
9f:5d:01:6d:d6:01:0b:1e:3a:c9:42:53:29:aa:f1:2b:d7:fd:
4e:84:56:0a:ed:04:55:c0:45:d4:97:e2:81:3b:8d:1d:bd:56:
92:e7:51:ca:9b:2c:04:05:56:8b:a4:08:13:14:d1:d1:db:69:
d7:c6:85:1c:a0:b8:c2:75:ab:41:52:14:79:43:1a:7e:36:f5:
6c:03:a9:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohJycmEGJtQAXju/4d9kxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODQ5YzczNjllN2U1MmM3MDUxZDIxZGJhNzI5ODMwOGJl
OWM0MjgwHhcNMjYwMzI2MDUwMTEyWhcNMjYwMzI3MDUwMTEyWjAzMTEwLwYDVQQD
Eyg4YjEyOTNmNjUwNDkzOGFkMWVhODc1MmZkODgyZDcyNGVjODU1OTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tvAZZfMjmqzF/CCoc7k6bQtaOCH
8f5HpGI+/KwbkjumwdujnxE8ulDMRzqLGJEQXCxZNkO91xHJZH+wuCRqYkQGi8Dn
GDAzsebrtkTuq5KKzqd8E3oQSxDhUC0RGDxv/fWPxGL8gzOVW4E7C+INQyyYJPd0
k6cQVR31Ng3/4WO+XcCzZPk+wpn5UCiokmPMLo6D2MdwiJ4n9Qj8rggE7049PGkX
gxdKpvMvDiRhhp45qHWXxbS91RN6ZCqGaZi75XBu7i/8m+XkwBaOSjBFuQ+MjYdi
BegZo483VRjK2I4ZlkS1+cNrrTnbAixgevTUPIPNRRfmI/wposXIamJB9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsSk/ZQSTitHqh1L9iC1yTshVlbMB8GA1UdIwQY
MBaAFNyEnHNp5+UscFHSHbpymDCL6cQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYmU4Y2YtMDdlYy00N2NiLThmNjMt
ZDNhMDZkMWY1YjRiLzEvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xYmU4Y2YtMDdlYy00N2NiLThmNjMtZDNhMDZkMWY1YjRi
LzEvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWwOObhA
hiRPIJj++lcmEcE3zfUmyZYLlYlfb4s/vDT0zoqPt5MHtKlPWASPHp3UIvLjaMlA
XmnB2R8/wdL8crkJS8rQS5KxGRn+NiLl9FEEv93rRjumYF+WFOtWQyqO4C0KSQG0
Q9D0UIe0JqdsO19DThaKN9itUMcfdJxYg11WSw6FRy+yYEm87fdTRZ0r5MreIQ38
7LDZ/sR5YejUGLCfjNtf6q6CuYKPGh3cBGu1YX/an10BbdYBCx46yUJTKarxK9f9
ToRWCu0EVcBF1JfigTuNHb1WkudRypssBAVWi6QIExTR0dtp18aFHKC4wnWrQVIU
eUMafjb1bAOp/A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:08 2026 by rpki-client