Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier: U7f/Qbm1tAhrXom75FsSZLXCgBbbl+yJiEIY+ZBYs7k=
Subject key identifier: 56:51:99:BC:2B:8C:CC:22:03:18:79:E8:03:3D:DD:40:D9:39:0B:2E
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 019E1CB53622432A155C3018840F23086E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number: 13A1
Signing time: Tue 12 May 2026 15:01:38 +0000
Manifest this update: Tue 12 May 2026 15:01:38 +0000
Manifest next update: Wed 13 May 2026 15:01:38 +0000
Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: HDdbFdq8AsENHXs4QuTJda1BBQ5XwCyaP+TtX//gWc0=)
2: 8LiOuIicwsY8-ml0zZmX3B_CKY0.roa (hash: PGF9mG8gxQZuhtHniYJ4M8QD71XqK/WXHLHoKAZKACI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:36:22:43:2a:15:5c:30:18:84:0f:23:08:6e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: May 12 15:01:38 2026 GMT
Not After : May 13 15:01:38 2026 GMT
Subject: CN=565199bc2b8ccc22031879e8033ddd40d9390b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8d:da:56:cb:c9:4e:78:a7:53:96:9f:45:3b:
7c:84:aa:33:30:d7:bd:35:74:56:7c:f9:10:1a:55:
c6:96:97:18:34:ff:42:eb:a9:f4:8e:6d:73:7b:07:
d7:6c:ce:41:34:30:8c:24:e2:97:5f:c6:b2:18:4c:
38:a2:6a:c2:f6:90:95:66:24:bd:9f:24:66:7e:d5:
c1:7f:60:2a:20:e1:77:8f:6d:4c:4b:22:de:ed:b6:
5f:b5:5c:c2:6c:f5:57:db:db:7b:0c:f0:7c:cc:85:
d0:16:c7:cd:27:73:c9:ff:ed:e6:d3:41:5b:a1:58:
66:2e:2b:57:8a:6e:a5:d6:56:c9:f2:db:aa:61:d5:
5c:5a:86:9c:c1:ae:62:dd:52:12:8b:a8:11:1d:0d:
9c:29:d3:be:83:02:e2:7d:0d:d7:1d:40:9f:98:de:
05:60:d0:39:da:46:c2:ca:e6:ed:b3:4a:93:b1:de:
6b:a3:2b:ac:09:9e:e7:21:03:3b:64:95:42:f4:f5:
67:92:05:8b:cc:53:b5:33:db:a0:c0:71:07:c2:f1:
f4:5f:9c:6a:67:e0:30:2c:e8:53:7f:7d:c0:3b:8c:
f0:59:b9:61:ca:bc:a7:e5:fe:64:51:ad:fc:d0:86:
78:28:e9:e9:6a:11:b2:76:0b:26:dc:8a:04:10:83:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:51:99:BC:2B:8C:CC:22:03:18:79:E8:03:3D:DD:40:D9:39:0B:2E
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c6:b6:4b:ce:c9:67:10:de:d7:fa:07:2c:6d:b2:cf:af:32:
39:04:6e:72:7e:aa:54:bf:9e:9f:67:19:30:c6:6f:40:cc:fb:
b8:59:09:6b:b1:5a:e0:b1:ab:f8:5a:a4:e9:38:76:84:cb:29:
d3:93:cc:c3:74:88:d8:12:21:93:54:ad:68:e5:15:35:67:2a:
4b:05:23:1b:e9:18:b2:b2:7d:99:d5:06:e4:ab:5b:ae:89:2a:
26:fa:a5:0c:4b:b7:1d:f9:a5:81:96:59:4e:11:c2:e8:ee:da:
82:6b:8b:18:54:0f:68:d6:b8:fd:ea:6c:f2:13:d9:eb:9a:79:
29:1f:e8:91:de:a4:8f:17:e9:8b:e1:db:c7:cc:95:9b:99:a5:
7d:e8:d8:de:b6:2c:60:83:87:0d:59:a7:c5:6c:db:31:a3:6d:
6e:16:bc:fc:b3:4f:2d:96:ce:bd:b4:ca:88:cb:e7:be:67:5f:
14:ca:88:81:7b:ad:dd:9c:11:1b:45:84:83:e3:a9:94:22:44:
b3:0c:62:97:40:6d:77:cc:a4:0f:be:5f:79:cc:e2:5f:c7:98:
87:bd:1f:aa:ca:7c:33:75:c8:de:f2:be:0d:36:01:ef:04:98:
2d:52:c9:5f:90:b5:d3:40:7d:0d:67:f4:88:a0:d3:a0:90:e1:
77:1d:ed:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctTYiQyoVXDAYhA8jCG6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTA4MjQ4OWE0MTQwYzBhNzhlMDNkNTBiNmJmZDU0MDJi
MDQ0ZWEwHhcNMjYwNTEyMTUwMTM4WhcNMjYwNTEzMTUwMTM4WjAzMTEwLwYDVQQD
Eyg1NjUxOTliYzJiOGNjYzIyMDMxODc5ZTgwMzNkZGQ0MGQ5MzkwYjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA043aVsvJTninU5afRTt8hKozMNe9
NXRWfPkQGlXGlpcYNP9C66n0jm1zewfXbM5BNDCMJOKXX8ayGEw4omrC9pCVZiS9
nyRmftXBf2AqIOF3j21MSyLe7bZftVzCbPVX29t7DPB8zIXQFsfNJ3PJ/+3m00Fb
oVhmLitXim6l1lbJ8tuqYdVcWoacwa5i3VISi6gRHQ2cKdO+gwLifQ3XHUCfmN4F
YNA52kbCyubts0qTsd5royusCZ7nIQM7ZJVC9PVnkgWLzFO1M9ugwHEHwvH0X5xq
Z+AwLOhTf33AO4zwWblhyryn5f5kUa380IZ4KOnpahGydgsm3IoEEIN6pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZRmbwrjMwiAxh56AM93UDZOQsuMB8GA1UdIwQY
MBaAFNyggkiaQUDAp44D1Qtr/VQCsETqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tDQ1NKcEJRTUNuamdQVkMydjlWQUt3Uk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kYjliYzgtNGIwNi00YmFmLThiYTgt
ZGZjMDU2NTQ1YmU0LzEvM0tDQ1NKcEJRTUNuamdQVkMydjlWQUt3Uk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kYjliYzgtNGIwNi00YmFmLThiYTgtZGZjMDU2NTQ1YmU0
LzEvM0tDQ1NKcEJRTUNuamdQVkMydjlWQUt3Uk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8a2S87J
ZxDe1/oHLG2yz68yOQRucn6qVL+en2cZMMZvQMz7uFkJa7Fa4LGr+Fqk6Th2hMsp
05PMw3SI2BIhk1StaOUVNWcqSwUjG+kYsrJ9mdUG5KtbrokqJvqlDEu3HfmlgZZZ
ThHC6O7agmuLGFQPaNa4/eps8hPZ65p5KR/okd6kjxfpi+Hbx8yVm5mlfejY3rYs
YIOHDVmnxWzbMaNtbha8/LNPLZbOvbTKiMvnvmdfFMqIgXut3ZwRG0WEg+OplCJE
swxil0Btd8ykD75fecziX8eYh70fqsp8M3XI3vK+DTYB7wSYLVLJX5C100B9DWf0
iKDToJDhdx3tNQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:17:16 2026 by rpki-client