Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
File: 3KLzDk5paSsbT-zrrpH9VgS97JM.mft (raw, json)
Hash identifier: 54plbJSQoUyfX7bWuPVrZ1TkQzV0zRVoSm2tH9IlfIU=
Subject key identifier: A6:0F:7E:4C:D3:17:5A:46:F7:A2:2B:1A:79:81:0C:2E:18:E6:A3:16
Authority key identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
Certificate issuer: /CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Certificate serial: 019E1BD8FD09B63DE499433C39441074D6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
Manifest number: 08BE
Signing time: Tue 12 May 2026 11:01:05 +0000
Manifest this update: Tue 12 May 2026 11:01:05 +0000
Manifest next update: Wed 13 May 2026 11:01:05 +0000
Files and hashes: 1: 3KLzDk5paSsbT-zrrpH9VgS97JM.crl (hash: kMsEz2gErI6hiSrJ6/hoJso6ONXBoOVmzWP5fdkDo+0=)
2: xSDhChXyrgpPczPrq9N_lmr5FEw.roa (hash: f8x2Ffld+Joqpjyz5VMQ9d3wfsE4pU4+FNaMK65q5CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:fd:09:b6:3d:e4:99:43:3c:39:44:10:74:d6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Validity
Not Before: May 12 11:01:05 2026 GMT
Not After : May 13 11:01:05 2026 GMT
Subject: CN=a60f7e4cd3175a46f7a22b1a79810c2e18e6a316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:ed:e4:b9:f2:2a:e6:46:f6:44:50:96:8c:
18:18:55:2d:cf:78:b4:af:ee:56:ba:e5:2c:3a:9f:
63:6e:dc:b7:5d:9c:dd:b7:e9:b7:12:40:3f:fc:5e:
ef:39:7e:c3:4b:02:ef:40:db:e9:23:ba:64:2e:b1:
ad:1d:7c:e5:a2:79:4f:ba:78:28:f1:17:42:2f:04:
f9:f3:73:39:0d:6c:04:f7:18:ee:1c:7a:a1:10:4a:
0d:11:af:95:78:db:35:f9:ea:17:58:54:3d:b9:a9:
de:da:56:8c:fb:ff:14:e2:11:c8:a6:60:65:f3:b9:
3f:fe:93:01:09:0e:e5:58:41:9c:c0:b8:9b:64:53:
02:e2:6e:d6:d9:88:79:7f:35:ee:84:57:5d:a5:96:
19:e6:3f:02:c6:77:35:61:1c:f1:b4:f3:61:22:af:
f2:b6:81:77:39:01:81:c9:aa:73:be:4d:a2:9c:dd:
65:2f:d6:7d:68:0e:4f:9d:5d:f9:54:87:8c:f4:54:
f5:9a:64:57:83:07:28:b4:e8:c9:d2:29:bf:b2:88:
07:b6:41:60:9c:43:51:65:8d:31:be:e9:8e:5a:0f:
de:33:9c:e9:13:85:36:d4:9a:09:2e:f5:f1:04:51:
53:d3:69:aa:21:c3:22:4f:ab:13:c6:55:d7:eb:96:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0F:7E:4C:D3:17:5A:46:F7:A2:2B:1A:79:81:0C:2E:18:E6:A3:16
X509v3 Authority Key Identifier:
keyid:DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b7:aa:ed:1c:c6:31:19:9f:f4:12:58:06:a9:8f:dd:1c:8c:
90:2d:80:e1:0b:09:61:d5:bb:0a:b1:d0:6c:66:d3:de:e1:47:
df:66:02:8e:14:6c:c6:14:16:1d:1e:ad:24:23:3e:19:c7:b5:
8e:a3:71:93:db:51:10:8b:e7:90:f0:4e:7e:36:82:6a:e0:2d:
66:77:ef:46:2a:e5:7e:5d:ca:a2:f4:a8:bf:ee:1d:c0:7d:b9:
8b:ae:32:a3:47:3e:ff:a2:ae:dc:cd:40:aa:3a:18:6e:f1:a2:
26:0e:e2:8a:c3:71:18:54:e7:2a:d7:76:97:4c:d3:aa:2c:ce:
bd:56:4e:59:ee:71:91:c1:d6:60:8d:63:6e:34:03:01:ff:e6:
70:b9:76:c3:fe:63:9d:33:ef:4a:32:42:f0:33:3e:21:f5:6b:
90:b9:71:13:f1:92:d7:9b:9e:f7:28:32:d2:b1:77:68:5c:cb:
99:7a:43:7f:bf:d7:b3:3f:22:93:e9:59:7c:34:d1:b0:9a:28:
8e:de:b6:5e:13:a0:24:65:c3:dc:d0:4b:fb:ab:98:35:6c:5a:
01:31:b3:74:3d:7d:33:99:37:3d:57:47:e6:58:ce:0a:1b:ca:
9f:50:cb:75:f1:18:d8:d1:2c:4e:a2:e0:82:b5:40:3e:18:bd:
2d:61:c5:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2P0Jtj3kmUM8OUQQdNa5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTJmMzBlNGU2OTY5MmIxYjRmZWNlYmFlOTFmZDU2MDRi
ZGVjOTMwHhcNMjYwNTEyMTEwMTA1WhcNMjYwNTEzMTEwMTA1WjAzMTEwLwYDVQQD
EyhhNjBmN2U0Y2QzMTc1YTQ2ZjdhMjJiMWE3OTgxMGMyZTE4ZTZhMzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqHt5LnyKuZG9kRQlowYGFUtz3i0
r+5WuuUsOp9jbty3XZzdt+m3EkA//F7vOX7DSwLvQNvpI7pkLrGtHXzlonlPungo
8RdCLwT583M5DWwE9xjuHHqhEEoNEa+VeNs1+eoXWFQ9uane2laM+/8U4hHIpmBl
87k//pMBCQ7lWEGcwLibZFMC4m7W2Yh5fzXuhFddpZYZ5j8Cxnc1YRzxtPNhIq/y
toF3OQGByapzvk2inN1lL9Z9aA5PnV35VIeM9FT1mmRXgwcotOjJ0im/sogHtkFg
nENRZY0xvumOWg/eM5zpE4U21JoJLvXxBFFT02mqIcMiT6sTxlXX65YJpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYPfkzTF1pG96IrGnmBDC4Y5qMWMB8GA1UdIwQY
MBaAFNyi8w5OaWkrG0/s666R/VYEveyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tMekRrNXBhU3NiVC16cnJwSDlWZ1M5N0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wMzY1NDktNDVkMC00NTY1LTgyOGYt
ZWIzZTc4NWQ5MDk3LzEvM0tMekRrNXBhU3NiVC16cnJwSDlWZ1M5N0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wMzY1NDktNDVkMC00NTY1LTgyOGYtZWIzZTc4NWQ5MDk3
LzEvM0tMekRrNXBhU3NiVC16cnJwSDlWZ1M5N0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLeq7RzG
MRmf9BJYBqmP3RyMkC2A4QsJYdW7CrHQbGbT3uFH32YCjhRsxhQWHR6tJCM+Gce1
jqNxk9tREIvnkPBOfjaCauAtZnfvRirlfl3KovSov+4dwH25i64yo0c+/6Ku3M1A
qjoYbvGiJg7iisNxGFTnKtd2l0zTqizOvVZOWe5xkcHWYI1jbjQDAf/mcLl2w/5j
nTPvSjJC8DM+IfVrkLlxE/GS15ue9ygy0rF3aFzLmXpDf7/Xsz8ik+lZfDTRsJoo
jt62XhOgJGXD3NBL+6uYNWxaATGzdD19M5k3PVdH5ljOChvKn1DLdfEY2NEsTqLg
grVAPhi9LWHFFw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:33:55 2026 by rpki-client