Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
File: 3L-wBIqNpVb9nT3xB3QC-EP11wM.mft (raw, json)
Hash identifier: UwzKyY3vLOUw1TcZ4lBbOxCJeOQS9RmnpojSbaVU+AU=
Subject key identifier: 27:83:AE:D7:38:01:47:AD:3D:C9:4D:7A:9A:A3:DB:47:5B:F3:96:65
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 019D273ABE8DA2BE5BAA9BA452F2D68E9068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:00:54 +0000
Manifest this update: Wed 25 Mar 2026 23:00:54 +0000
Manifest next update: Thu 26 Mar 2026 23:00:54 +0000
Files and hashes: 1: 3L-wBIqNpVb9nT3xB3QC-EP11wM.crl (hash: Ds6hkw++cSsCM3YTil31JgiUfJoEBGKLAt/aYPZ2JWE=)
2: diKa-1w5ElMvlcPYjK3PRVqYmi4.roa (hash: ZihAuU6a+sRKBgVaTd6H1m0T3csQ2DHl/3OILvkWxBE=)
3: j0K5a5Z0hTedR5qChUo6JzL_b6Q.roa (hash: /ijeXiA6vOxG/JGy8aSyn4OKLrNeshDbn0KxzTiZZAM=)
4: wU3iW5s2Ju-Cxxy3PZUMfWT9ScI.roa (hash: KlkmKudvSISHMidCA5kmAHX0SSabbFTuv3ZobbBf/XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:be:8d:a2:be:5b:aa:9b:a4:52:f2:d6:8e:90:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Mar 25 23:00:54 2026 GMT
Not After : Mar 26 23:00:54 2026 GMT
Subject: CN=2783aed7380147ad3dc94d7a9aa3db475bf39665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:56:16:ad:33:4d:ce:ae:d3:f5:00:97:b5:
64:17:29:ac:2a:55:fb:b2:a8:36:97:df:15:27:00:
91:45:29:4f:1c:f5:c4:00:f5:33:b5:e9:23:46:c1:
eb:33:2a:00:32:b3:87:d2:34:41:a4:70:03:ec:7f:
90:f6:4b:21:51:1e:8a:d2:96:82:63:ae:7c:85:06:
0a:5d:8e:30:79:a0:ad:b4:7c:81:58:86:ad:4e:dd:
0f:49:90:2e:42:6f:71:90:f7:ff:f3:61:ee:8c:a1:
67:3e:bb:4e:82:16:97:d7:02:de:4a:ba:c5:63:fe:
74:b7:4f:cc:d9:72:65:5b:12:57:d2:24:29:7c:cd:
89:f7:9c:ba:86:7c:a8:66:6f:d5:4a:5e:fa:dc:dc:
14:66:55:1c:29:02:db:02:24:ce:94:70:65:62:69:
52:91:7b:ac:3f:c3:da:7a:1f:ad:ce:31:e0:5a:6b:
ae:3d:4f:6a:b7:96:c4:50:8e:c9:86:ce:e2:08:3c:
f3:8f:34:4e:73:0c:d6:57:30:03:18:db:1a:84:31:
0a:b0:20:f0:ca:26:ac:ba:ca:4f:35:57:54:c5:1c:
dd:20:02:08:0f:0f:7d:e7:ea:81:bc:b1:c5:94:47:
44:dd:d6:c7:90:e1:57:9d:cf:8b:80:bf:9d:97:a2:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:83:AE:D7:38:01:47:AD:3D:C9:4D:7A:9A:A3:DB:47:5B:F3:96:65
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:13:43:1e:5a:9b:01:4f:9f:e5:27:ed:36:82:a2:ba:d8:e1:
3c:7b:50:7f:a9:7d:cd:b4:10:cc:35:01:84:d9:16:61:4a:64:
f3:93:0a:88:a7:60:a0:2e:1c:f0:67:2b:15:20:85:91:6b:be:
b4:4d:f4:47:c8:84:29:62:0b:c0:ed:bc:65:97:7a:cd:f8:99:
fc:a3:53:1c:80:d1:85:6d:5a:9d:7e:cb:7e:cb:0d:67:be:34:
cf:8c:5b:dd:fe:f5:bc:8d:e0:bc:83:43:de:7e:49:4d:e9:0a:
5c:b8:f7:fd:25:c5:19:66:1d:c8:27:23:d6:18:ee:af:f9:82:
05:db:da:74:41:5e:a4:41:1b:7f:d0:30:6e:26:e7:ac:7c:a4:
2b:1c:4e:08:3b:29:13:08:78:40:4a:f9:e9:85:55:07:67:f0:
69:8e:65:cd:b5:87:4b:4f:57:46:e8:a6:e5:41:56:25:b5:87:
47:f8:ce:52:3d:7b:1c:54:f0:b8:3b:eb:55:04:41:3e:fd:36:
91:10:93:e4:be:ab:e4:1e:fd:b9:ba:90:06:e6:2b:63:41:71:
d7:5a:35:94:19:db:41:23:76:3f:da:61:ef:d9:5c:b6:fa:15:
d1:22:dc:b5:1f:da:17:3b:7c:96:d2:b2:f3:36:85:ca:ea:87:
f7:84:b8:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOr6Nor5bqpukUvLWjpBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYmZiMDA0OGE4ZGE1NTZmZDlkM2RmMTA3NzQwMmY4NDNm
NWQ3MDMwHhcNMjYwMzI1MjMwMDU0WhcNMjYwMzI2MjMwMDU0WjAzMTEwLwYDVQQD
EygyNzgzYWVkNzM4MDE0N2FkM2RjOTRkN2E5YWEzZGI0NzViZjM5NjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzdWFq0zTc6u0/UAl7VkFymsKlX7
sqg2l98VJwCRRSlPHPXEAPUztekjRsHrMyoAMrOH0jRBpHAD7H+Q9kshUR6K0paC
Y658hQYKXY4weaCttHyBWIatTt0PSZAuQm9xkPf/82HujKFnPrtOghaX1wLeSrrF
Y/50t0/M2XJlWxJX0iQpfM2J95y6hnyoZm/VSl763NwUZlUcKQLbAiTOlHBlYmlS
kXusP8Paeh+tzjHgWmuuPU9qt5bEUI7Jhs7iCDzzjzROcwzWVzADGNsahDEKsCDw
yiasuspPNVdUxRzdIAIIDw995+qBvLHFlEdE3dbHkOFXnc+LgL+dl6LF9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeDrtc4AUetPclNepqj20db85ZlMB8GA1UdIwQY
MBaAFNy/sASKjaVW/Z098Qd0AvhD9dcDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kY2I3MGQtNzk0Ny00NTY5LWJjODQt
ZTA2MGI0ZmNiY2NiLzEvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kY2I3MGQtNzk0Ny00NTY5LWJjODQtZTA2MGI0ZmNiY2Ni
LzEvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhNDHlqb
AU+f5SftNoKiutjhPHtQf6l9zbQQzDUBhNkWYUpk85MKiKdgoC4c8GcrFSCFkWu+
tE30R8iEKWILwO28ZZd6zfiZ/KNTHIDRhW1anX7LfssNZ740z4xb3f71vI3gvIND
3n5JTekKXLj3/SXFGWYdyCcj1hjur/mCBdvadEFepEEbf9AwbibnrHykKxxOCDsp
Ewh4QEr56YVVB2fwaY5lzbWHS09XRuim5UFWJbWHR/jOUj17HFTwuDvrVQRBPv02
kRCT5L6r5B79ubqQBuYrY0Fx11o1lBnbQSN2P9ph79lctvoV0SLctR/aFzt8ltKy
8zaFyuqH94S4vA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:39 2026 by rpki-client