Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
File: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json)
Hash identifier: TcvY7HUnycN3srWlxDnKghMie5sMd85H/QyYzOZvOoU=
Subject key identifier: 98:30:7B:D6:09:B1:24:E4:8E:25:56:07:B8:11:45:D5:2D:4F:D1:1A
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial: 019D28BB398A5A839AED78A0258BBE396AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
Manifest number: 13E3
Signing time: Thu 26 Mar 2026 06:00:51 +0000
Manifest this update: Thu 26 Mar 2026 06:00:51 +0000
Manifest next update: Fri 27 Mar 2026 06:00:51 +0000
Files and hashes: 1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: 4zIGfxVSmGTW+TcDLgoRlLXlRyFnZIh6OXpNzzbTMno=)
2: FT--4t0eY_HMytLIaG7T71X7cUo.roa (hash: 095emcTK3nDAck/cjTBbtBo2FJ9TXj6HZHetumiraec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:39:8a:5a:83:9a:ed:78:a0:25:8b:be:39:6a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
Validity
Not Before: Mar 26 06:00:51 2026 GMT
Not After : Mar 27 06:00:51 2026 GMT
Subject: CN=98307bd609b124e48e255607b81145d52d4fd11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ab:ee:e6:78:37:e9:44:bc:fa:c3:3b:b6:a8:
af:ac:96:1a:01:ec:51:2d:ba:2a:6e:87:b1:2c:e2:
6f:de:57:15:94:2d:a2:23:42:e5:3b:3c:ff:72:72:
f5:50:5b:0f:c4:a6:98:20:1c:cc:71:63:24:3e:76:
b5:52:a6:2c:b8:82:b7:8e:9f:b9:08:b6:79:98:61:
84:5f:86:3f:52:c3:df:ae:8c:06:ba:5d:46:c4:ff:
0e:e8:d6:cd:9c:d8:34:d6:e8:e8:b7:2e:03:50:15:
99:88:94:5c:f4:ee:c1:a9:f4:e0:d1:08:b7:cc:d6:
85:34:7f:81:06:5f:05:43:04:e8:e5:91:35:6b:04:
c2:01:6b:14:4a:dc:6f:cb:e6:dc:50:5f:b6:54:39:
46:ed:c2:3a:2d:2a:51:72:bf:84:28:5d:90:fe:36:
0b:6e:d4:1c:da:fb:3e:5e:3a:1f:c5:96:77:1a:2f:
f0:77:44:78:89:32:52:ce:e9:54:cf:f0:73:46:a4:
4f:9e:19:32:6a:1c:d7:41:ee:58:03:2e:e8:ed:ff:
2f:05:15:52:b3:fc:f1:83:c6:9c:a8:7d:30:f9:27:
8d:a2:f2:38:9a:ad:2d:04:86:62:98:c2:9c:31:0b:
49:fe:95:ce:a8:9f:80:a5:a1:f0:34:ab:0f:53:b2:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:30:7B:D6:09:B1:24:E4:8E:25:56:07:B8:11:45:D5:2D:4F:D1:1A
X509v3 Authority Key Identifier:
keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:19:38:d8:2f:19:94:07:09:0d:d7:bb:f3:3b:0c:50:51:fe:
e2:ca:66:e9:25:a9:24:2e:6e:18:e8:dc:c6:9c:83:7c:e2:4b:
2c:10:c2:9b:54:72:4a:c4:20:76:a2:3b:1a:ae:9a:c6:05:02:
7e:24:8d:3b:95:66:d8:dd:ea:26:1a:7a:e5:8b:41:e4:de:30:
b0:0c:ff:0e:83:79:de:ac:86:72:78:51:b2:6f:0c:b6:ac:ce:
fb:45:22:73:37:b7:12:e1:7e:6a:9a:8d:ca:75:34:10:1a:ce:
b4:3b:f4:db:08:b4:6b:60:bd:dc:bf:fa:1c:7e:6f:ca:01:2c:
de:2f:77:a5:01:05:ec:9a:cf:ca:39:3d:cf:2d:ca:0e:45:75:
8c:3e:3d:cc:9a:81:e5:94:70:1e:8e:6c:b8:f7:21:58:cf:9d:
d3:5d:1a:70:d3:17:0f:be:28:23:18:c5:d2:08:0e:55:91:3a:
9a:94:43:b0:bd:3c:b0:86:93:40:8c:0f:e7:5e:d7:10:62:1f:
b7:98:41:3f:cb:26:c9:b2:32:e2:a7:9e:b1:cb:14:27:b1:d5:
67:ff:f4:a1:bd:44:a6:b6:0f:07:4f:83:7d:cb:5c:36:ae:3b:
de:fa:0a:e2:2c:16:05:25:c6:e3:21:a1:7c:e6:1f:5b:a5:5a:
b0:6b:d0:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouzmKWoOa7XigJYu+OWqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmE4Njg2M2M1NTg2NTcwMDYzNGUxMTM1ZTYxN2U0MDc5
YWY4YjkwHhcNMjYwMzI2MDYwMDUxWhcNMjYwMzI3MDYwMDUxWjAzMTEwLwYDVQQD
Eyg5ODMwN2JkNjA5YjEyNGU0OGUyNTU2MDdiODExNDVkNTJkNGZkMTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6vu5ng36US8+sM7tqivrJYaAexR
LboqboexLOJv3lcVlC2iI0LlOzz/cnL1UFsPxKaYIBzMcWMkPna1UqYsuIK3jp+5
CLZ5mGGEX4Y/UsPfrowGul1GxP8O6NbNnNg01ujoty4DUBWZiJRc9O7BqfTg0Qi3
zNaFNH+BBl8FQwTo5ZE1awTCAWsUStxvy+bcUF+2VDlG7cI6LSpRcr+EKF2Q/jYL
btQc2vs+XjofxZZ3Gi/wd0R4iTJSzulUz/BzRqRPnhkyahzXQe5YAy7o7f8vBRVS
s/zxg8acqH0w+SeNovI4mq0tBIZimMKcMQtJ/pXOqJ+ApaHwNKsPU7KGzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgwe9YJsSTkjiVWB7gRRdUtT9EaMB8GA1UdIwQY
MBaAFNz6hoY8VYZXAGNOETXmF+QHmvi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MDc2YTItMjk1Zi00NWVjLWI3Yzgt
YzVjOWM2ODliNzQ1LzEvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83MDc2YTItMjk1Zi00NWVjLWI3YzgtYzVjOWM2ODliNzQ1
LzEvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBk42C8Z
lAcJDde78zsMUFH+4spm6SWpJC5uGOjcxpyDfOJLLBDCm1RySsQgdqI7Gq6axgUC
fiSNO5Vm2N3qJhp65YtB5N4wsAz/DoN53qyGcnhRsm8MtqzO+0Uicze3EuF+apqN
ynU0EBrOtDv02wi0a2C93L/6HH5vygEs3i93pQEF7JrPyjk9zy3KDkV1jD49zJqB
5ZRwHo5suPchWM+d010acNMXD74oIxjF0ggOVZE6mpRDsL08sIaTQIwP517XEGIf
t5hBP8smybIy4qeescsUJ7HVZ//0ob1EprYPB0+DfctcNq473voK4iwWBSXG4yGh
fOYfW6VasGvQsQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:56 2026 by rpki-client