Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: wtSAkYGcyMm3U7w/7uvURPEm3gvqwtXusIDEy8GnkTM=
Subject key identifier: 31:9D:35:4E:83:CA:38:36:94:70:5B:5C:95:C7:63:16:AE:B4:C4:89
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 019D277272913578E7BEB3753C59C68D6BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 15C9
Signing time: Thu 26 Mar 2026 00:01:44 +0000
Manifest this update: Thu 26 Mar 2026 00:01:44 +0000
Manifest next update: Fri 27 Mar 2026 00:01:44 +0000
Files and hashes: 1: 0_VDRwikWTvRQIQsMp3aqjlVQuQ.roa (hash: X74/QCu3+W4NQQ4c/uIC5xYm7kaBm7r/kGt68bnJBmk=)
2: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: UnWVcYEXA43lQGcO7e0+0MoBpCE+iVLfnAiDgj8pXeY=)
3: EuhZP1AZU_rcBrUtpebBNKpZGDs.roa (hash: 4fJyMfdftWEjgJj30JHbQU1JK+JRhaZwjIp1NhaWeFg=)
4: EvJXEnC7zFUYWLsUXhzwJeb526c.roa (hash: 2yJuq+SaVzl7mv1pagqpW7rfh/6PNh11sR0zDQ+hDZo=)
5: JMtxM_e2f4IyQOe7ag83ATmrnwo.roa (hash: rSI4U1a3IADB916oOPX87Zu4Y5DYpWavrDRX8n8/D+w=)
6: WuAI-H8NlswYvvMAMOlcviEzotw.roa (hash: B7KPgvRjador4ZwI7bCeT1UxGcCpNUqTQunKcDn/m+I=)
7: jZ3FO_mV9WrcoKTLceS8pJGW3yc.roa (hash: jtA00NOXzw+v3t4avm6wslZ9lfOfAkUHsLwcYHyN6g8=)
8: k9aptvqWA05x4uvgA-vKuzilVzU.roa (hash: BJ061QuQOWlxavQBE+4vNFSfiTJRQL5oGm4+Ibheqps=)
9: uY0sFNMzlqwBju7zNYnP8ksOTWE.roa (hash: SVkZbh6uHodPSzQYZV8KL/YnQleGlnDyzyp+5VJFwZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:72:91:35:78:e7:be:b3:75:3c:59:c6:8d:6b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Mar 26 00:01:44 2026 GMT
Not After : Mar 27 00:01:44 2026 GMT
Subject: CN=319d354e83ca383694705b5c95c76316aeb4c489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:53:98:dd:1b:88:e0:80:b2:d7:ed:e8:ab:
10:bb:2f:7c:4a:12:6b:a9:c9:b4:a2:ef:ee:0c:99:
b7:6a:3a:78:7b:ca:77:af:f0:30:2e:50:50:08:88:
90:74:c4:58:ae:ab:67:d5:db:80:f6:03:ee:5d:82:
5b:01:fd:8e:9b:0e:96:11:69:01:97:c7:86:e9:96:
24:3c:a9:08:bc:76:db:04:3e:8c:2e:7e:60:40:c0:
7b:de:00:1d:91:05:44:a0:d7:7c:f3:75:18:d8:14:
e3:64:ab:ee:8c:09:e4:33:12:62:4f:80:0b:17:1d:
a6:cf:17:15:cd:c4:f6:ea:3e:e5:4d:6c:6f:48:91:
8e:77:02:e3:ef:a5:fa:42:4b:43:ab:41:36:58:79:
cf:81:2d:2f:89:80:18:3d:3b:ca:66:e0:0c:c8:92:
d9:09:b9:7e:c5:70:94:ef:ba:bf:38:06:01:fa:c5:
cc:c3:7b:d7:a4:18:cd:ff:dd:6a:a5:3b:97:e8:94:
9b:05:2b:27:b0:fa:07:f7:79:bf:1c:16:28:4b:e4:
a9:a6:8c:60:95:aa:65:81:96:33:c4:4f:48:2f:dc:
c7:50:3c:fd:16:c9:15:af:2f:ba:f6:d1:a0:0c:19:
aa:80:17:9f:17:b3:94:2e:9b:e8:6b:1e:37:ce:98:
be:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9D:35:4E:83:CA:38:36:94:70:5B:5C:95:C7:63:16:AE:B4:C4:89
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:43:6f:2d:9b:26:ef:07:15:db:2b:52:15:d1:f5:33:a3:9e:
2c:2a:c5:fd:06:d5:90:af:60:d2:da:3e:53:47:8a:1d:b8:fa:
2f:a6:e3:db:ea:3c:f7:45:5e:48:37:ae:4f:01:13:79:b1:0a:
95:0c:90:71:51:42:39:48:99:76:a8:0d:e5:d8:46:1d:8e:4e:
f2:c9:09:5f:c4:fc:52:88:49:e1:b3:dc:63:d3:50:5b:60:d6:
c6:64:79:65:f1:5b:e4:fd:b5:f2:2f:b8:fc:6d:cd:c9:f8:24:
2e:eb:b4:13:75:bf:1b:92:97:8a:68:70:51:c5:1f:05:6c:66:
b9:c7:5d:9d:fc:c0:2f:39:b4:fa:79:0c:85:e3:fa:53:94:41:
00:02:18:16:1a:31:43:1a:c5:24:71:28:b5:37:12:53:1a:14:
96:75:45:88:37:32:69:7b:2e:c1:0b:b3:42:7c:00:48:30:a7:
a5:41:d3:22:96:59:ab:00:cd:11:2d:44:7a:0e:23:b3:83:a9:
77:7a:5e:2f:c4:99:98:b8:9d:03:0c:b8:37:54:2e:46:7b:f3:
0a:a4:c1:51:46:09:59:41:ef:7e:61:7e:20:1f:34:16:c5:5d:
e8:98:ed:c4:0c:89:f1:0b:07:6b:95:7b:bb:3a:c5:1c:98:48:
e7:64:4b:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncnKRNXjnvrN1PFnGjWvdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTRiYjY5NDUzZjEzOWE2MDAyOWUyMmRiMGZiMzQyNGE5
MDZjZWUwHhcNMjYwMzI2MDAwMTQ0WhcNMjYwMzI3MDAwMTQ0WjAzMTEwLwYDVQQD
EygzMTlkMzU0ZTgzY2EzODM2OTQ3MDViNWM5NWM3NjMxNmFlYjRjNDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfRTmN0biOCAstft6KsQuy98ShJr
qcm0ou/uDJm3ajp4e8p3r/AwLlBQCIiQdMRYrqtn1duA9gPuXYJbAf2Omw6WEWkB
l8eG6ZYkPKkIvHbbBD6MLn5gQMB73gAdkQVEoNd883UY2BTjZKvujAnkMxJiT4AL
Fx2mzxcVzcT26j7lTWxvSJGOdwLj76X6QktDq0E2WHnPgS0viYAYPTvKZuAMyJLZ
Cbl+xXCU77q/OAYB+sXMw3vXpBjN/91qpTuX6JSbBSsnsPoH93m/HBYoS+Sppoxg
laplgZYzxE9IL9zHUDz9FskVry+69tGgDBmqgBefF7OULpvoax43zpi+lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGdNU6Dyjg2lHBbXJXHYxautMSJMB8GA1UdIwQY
MBaAFNyUu2lFPxOaYAKeItsPs0JKkGzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGIt
MDkwYzQ2ZTlmMmVkLzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGItMDkwYzQ2ZTlmMmVk
LzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkNvLZsm
7wcV2ytSFdH1M6OeLCrF/QbVkK9g0to+U0eKHbj6L6bj2+o890VeSDeuTwETebEK
lQyQcVFCOUiZdqgN5dhGHY5O8skJX8T8UohJ4bPcY9NQW2DWxmR5ZfFb5P218i+4
/G3NyfgkLuu0E3W/G5KXimhwUcUfBWxmucddnfzALzm0+nkMheP6U5RBAAIYFhox
QxrFJHEotTcSUxoUlnVFiDcyaXsuwQuzQnwASDCnpUHTIpZZqwDNES1Eeg4js4Op
d3peL8SZmLidAwy4N1QuRnvzCqTBUUYJWUHvfmF+IB80FsVd6JjtxAyJ8QsHa5V7
uzrFHJhI52RLxA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:02 2026 by rpki-client