Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
File: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft (raw, json)
Hash identifier: 59gSWyR86ywXTvb1T5JkqspXQBdhZoyN6MriUMo+rQk=
Subject key identifier: 60:41:CE:8E:0A:5D:A2:77:FB:F4:56:64:05:D1:61:4F:C2:67:0E:AD
Authority key identifier: DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
Certificate issuer: /CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Certificate serial: 019D270440B46E994C943014E0DC36645DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
Manifest number: 1541
Signing time: Wed 25 Mar 2026 22:01:23 +0000
Manifest this update: Wed 25 Mar 2026 22:01:23 +0000
Manifest next update: Thu 26 Mar 2026 22:01:23 +0000
Files and hashes: 1: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl (hash: 6PeBCIyXo1Fp5Dmxeimpn1RB3GGTTRRJj6WkzigKyj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:40:b4:6e:99:4c:94:30:14:e0:dc:36:64:5d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Validity
Not Before: Mar 25 22:01:23 2026 GMT
Not After : Mar 26 22:01:23 2026 GMT
Subject: CN=6041ce8e0a5da277fbf4566405d1614fc2670ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:b9:bb:43:c0:62:21:58:a6:03:b9:fe:2c:
7b:0e:92:67:e2:a0:d0:cf:2a:f4:00:a2:28:41:fd:
b0:cf:b1:fd:fa:f1:88:d5:64:00:b5:1f:38:79:a8:
9b:12:e8:7f:f1:04:1e:3d:0f:00:5d:db:c4:4a:e9:
62:f8:56:81:2d:c6:a2:18:73:02:17:bf:18:ba:c5:
8a:8e:c1:f1:ee:43:f9:89:a3:97:b3:a3:bc:51:71:
6f:9c:fe:2f:3b:17:ed:21:05:98:1e:46:1f:2e:05:
cc:a2:c5:9b:5b:60:da:10:84:5c:66:a0:f5:72:ed:
73:1d:29:49:c3:e2:30:ac:b9:50:68:65:fc:7b:aa:
38:6e:07:2d:ba:ac:b0:44:f4:94:53:61:1c:c7:01:
1e:32:40:df:2c:f0:00:d6:72:2e:47:ca:1c:bf:ef:
64:3c:16:7a:08:fa:19:68:9e:5b:25:1c:00:bd:87:
ff:86:b7:54:ed:ae:51:90:1e:a7:6c:bb:45:c4:fa:
34:e2:4f:71:44:c9:4e:5e:1d:88:2d:11:97:4a:e1:
b7:8b:26:b6:40:ba:c5:7a:e5:7a:a4:49:04:62:ee:
17:b8:9d:60:79:51:ea:9b:a6:31:c3:a5:23:76:5d:
b3:f2:56:63:3a:c6:18:1f:01:6f:77:7c:08:26:52:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:41:CE:8E:0A:5D:A2:77:FB:F4:56:64:05:D1:61:4F:C2:67:0E:AD
X509v3 Authority Key Identifier:
keyid:DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:41:df:1e:cc:79:2c:bb:50:67:4c:c6:59:da:61:72:56:28:
f3:51:30:aa:fd:ac:ad:f1:4e:76:6e:e9:cd:8a:28:eb:d2:4a:
3f:3d:bd:ad:40:7a:6f:0d:dd:0d:84:e3:51:f2:4e:8e:62:30:
2b:90:00:dd:ba:49:32:99:a7:c5:bf:e1:12:09:75:b1:fb:1c:
01:9d:c8:4e:11:07:7d:22:7a:1c:d4:98:7b:75:c6:3c:06:bb:
ba:4b:85:09:a8:48:bd:57:8c:26:96:37:e5:e2:48:d3:0d:b4:
bd:41:d5:5d:10:61:d8:8a:16:b3:e2:db:33:31:a6:a0:99:3e:
e8:b1:d8:a9:f5:77:1d:2a:0c:72:fb:d5:25:55:2d:97:33:9d:
19:a5:d4:78:a2:48:33:b4:9d:9f:8a:3b:09:b6:53:69:e9:34:
4d:8f:93:aa:ad:68:9c:2e:fc:fc:9c:f7:53:80:6f:b8:a1:75:
e2:4e:aa:cd:d5:f6:e3:41:7b:57:02:b3:eb:fc:f5:03:9d:a9:
45:a1:1d:61:f5:97:68:f2:a1:25:6e:da:47:90:17:e3:04:61:
a8:37:d4:71:55:14:21:18:9b:16:9f:94:2c:44:ca:90:8f:0f:
0f:88:ea:10:ab:7c:f7:ce:c1:8e:f4:e9:60:48:8f:08:50:34:
9f:e0:0b:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBEC0bplMlDAU4Nw2ZF27MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMTE2MTY4Zjc4OWJkZDQwOGU2ZWI5OTYyMmUzZWJjOWE3
MzEwMGEwHhcNMjYwMzI1MjIwMTIzWhcNMjYwMzI2MjIwMTIzWjAzMTEwLwYDVQQD
Eyg2MDQxY2U4ZTBhNWRhMjc3ZmJmNDU2NjQwNWQxNjE0ZmMyNjcwZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPi5u0PAYiFYpgO5/ix7DpJn4qDQ
zyr0AKIoQf2wz7H9+vGI1WQAtR84eaibEuh/8QQePQ8AXdvESuli+FaBLcaiGHMC
F78YusWKjsHx7kP5iaOXs6O8UXFvnP4vOxftIQWYHkYfLgXMosWbW2DaEIRcZqD1
cu1zHSlJw+IwrLlQaGX8e6o4bgctuqywRPSUU2EcxwEeMkDfLPAA1nIuR8ocv+9k
PBZ6CPoZaJ5bJRwAvYf/hrdU7a5RkB6nbLtFxPo04k9xRMlOXh2ILRGXSuG3iya2
QLrFeuV6pEkEYu4XuJ1geVHqm6Yxw6Ujdl2z8lZjOsYYHwFvd3wIJlIV9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBBzo4KXaJ3+/RWZAXRYU/CZw6tMB8GA1UdIwQY
MBaAFN0RYWj3ib3UCObrmWIuPryacxAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1JGaGFQZUp2ZFFJNXV1WllpNC12SnB6RUFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iYjhmNjItNmJiOS00MDc2LTg5MGEt
N2Q0YjAzM2YxMzA3LzEvM1JGaGFQZUp2ZFFJNXV1WllpNC12SnB6RUFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9iYjhmNjItNmJiOS00MDc2LTg5MGEtN2Q0YjAzM2YxMzA3
LzEvM1JGaGFQZUp2ZFFJNXV1WllpNC12SnB6RUFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUHfHsx5
LLtQZ0zGWdphclYo81Ewqv2srfFOdm7pzYoo69JKPz29rUB6bw3dDYTjUfJOjmIw
K5AA3bpJMpmnxb/hEgl1sfscAZ3IThEHfSJ6HNSYe3XGPAa7ukuFCahIvVeMJpY3
5eJI0w20vUHVXRBh2IoWs+LbMzGmoJk+6LHYqfV3HSoMcvvVJVUtlzOdGaXUeKJI
M7Sdn4o7CbZTaek0TY+Tqq1onC78/Jz3U4BvuKF14k6qzdX240F7VwKz6/z1A52p
RaEdYfWXaPKhJW7aR5AX4wRhqDfUcVUUIRibFp+ULETKkI8PD4jqEKt8987BjvTp
YEiPCFA0n+ALvw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:03 2026 by rpki-client