Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: ECGxSgxlyXg49Il20ETrW7aa0ctNKiyjdTqdJPVCjno=
Subject key identifier: D8:CC:4C:AD:9C:9E:B3:F4:D4:0F:B7:AF:B4:97:BD:D9:BE:3F:E3:2D
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 019D28BB9F9A274545BF6EE14AD6C9B88E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:17 +0000
Manifest this update: Thu 26 Mar 2026 06:01:17 +0000
Manifest next update: Fri 27 Mar 2026 06:01:17 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: jEkrOQCpxdCPsXkuQtJFoEFJdCtNovE39rk00NVqmUs=)
2: 9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa (hash: 4biyXnO/yjSxTlfFAVtaFC6Bi7sH2DQW0oH896Enc7I=)
3: qsdjnJflN-hqMusJ8mRO3QvIelE.roa (hash: SE6UiCw/dJG6vG+istEe6e9u75qYp7RLjIy5NUM722g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:9f:9a:27:45:45:bf:6e:e1:4a:d6:c9:b8:8e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Mar 26 06:01:17 2026 GMT
Not After : Mar 27 06:01:17 2026 GMT
Subject: CN=d8cc4cad9c9eb3f4d40fb7afb497bdd9be3fe32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:47:c6:44:ea:43:a9:72:19:3c:7e:b1:1f:
42:2e:f9:33:5f:39:1f:96:65:b6:70:5a:3d:61:ba:
b8:64:b3:8e:39:68:07:e7:a2:6b:9d:ba:52:d7:e9:
0f:c2:04:c4:5d:79:4e:08:f7:52:92:4f:d8:8a:01:
df:7a:91:94:bf:5d:ec:40:86:ce:f3:5f:35:81:07:
6f:6f:e5:d2:9f:0b:e4:74:0b:b1:fd:cd:e2:1a:34:
43:ff:ca:e7:10:bd:0e:bd:08:1d:07:90:5f:5c:70:
76:26:30:d5:62:a0:77:58:b7:90:55:3c:0c:9c:96:
b6:1f:c4:22:80:12:5f:e9:38:d1:41:eb:35:1f:c7:
5d:64:9e:f2:e1:e0:80:7f:b1:ef:ac:9f:f6:6c:e5:
fc:a6:41:e8:21:90:7b:68:12:61:fe:c8:33:22:8c:
0d:5c:b1:7f:ee:6d:ef:b0:b0:cb:44:02:56:33:8a:
34:ef:76:8a:30:cf:2c:33:69:1b:6f:df:97:4d:24:
7f:13:2e:25:cd:e6:72:b4:9d:4b:e7:02:17:60:f7:
9e:e3:b4:28:7b:46:11:00:3a:c9:2b:f6:86:f0:ba:
c4:68:e0:96:a8:23:d8:43:26:6b:56:b1:29:4d:8b:
19:d0:62:3f:37:9f:42:bd:4d:62:f1:75:16:2c:79:
a3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CC:4C:AD:9C:9E:B3:F4:D4:0F:B7:AF:B4:97:BD:D9:BE:3F:E3:2D
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:35:8d:5a:40:61:f8:51:09:02:83:77:7a:10:47:59:4e:14:
24:52:11:9f:f6:9c:46:f1:fb:80:76:b4:f4:1a:28:84:bc:a5:
76:e5:a6:a5:4c:c8:24:39:21:2e:43:22:5d:66:6f:c8:32:35:
97:3e:e5:e9:a2:ff:db:83:01:b2:a3:30:21:2a:59:f9:a4:f2:
e4:54:80:ee:13:f0:88:98:b6:5c:59:ca:43:0d:b4:80:50:70:
cc:5f:de:4f:91:0f:17:44:1b:2c:bb:c7:af:de:4f:2f:b0:c2:
54:35:97:1b:f9:a5:f3:45:15:57:a6:0b:f7:e8:d6:52:37:d6:
85:cc:c3:b6:ba:72:04:ed:4b:e1:62:fc:ec:13:d1:b9:d1:b9:
26:7b:a0:86:3b:e2:1f:c6:c5:c6:18:ca:88:7f:77:12:12:20:
57:7c:ac:2d:41:f9:74:49:d0:41:1d:d4:2f:f7:e7:df:0b:03:
4c:07:e5:7f:54:76:25:72:f4:f9:b5:0c:4c:7a:e5:66:53:fe:
3f:bf:66:9e:a7:ea:44:38:fb:70:c6:94:70:1a:d8:12:62:9a:
9a:bc:0c:ca:6e:24:a9:1d:c6:48:79:c8:c6:11:a4:a8:cc:dd:
13:62:2b:cb:1b:87:3b:9b:09:58:29:75:22:0b:ee:2b:9b:87:
3d:e4:ff:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou5+aJ0VFv27hStbJuI4+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWU0YjA0NzFhNjE4NzJjNDA0MTQyZTFmOTBmNTA3NGYw
ZDZmMTUwHhcNMjYwMzI2MDYwMTE3WhcNMjYwMzI3MDYwMTE3WjAzMTEwLwYDVQQD
EyhkOGNjNGNhZDljOWViM2Y0ZDQwZmI3YWZiNDk3YmRkOWJlM2ZlMzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyihHxkTqQ6lyGTx+sR9CLvkzXzkf
lmW2cFo9Ybq4ZLOOOWgH56JrnbpS1+kPwgTEXXlOCPdSkk/YigHfepGUv13sQIbO
8181gQdvb+XSnwvkdAux/c3iGjRD/8rnEL0OvQgdB5BfXHB2JjDVYqB3WLeQVTwM
nJa2H8QigBJf6TjRQes1H8ddZJ7y4eCAf7HvrJ/2bOX8pkHoIZB7aBJh/sgzIowN
XLF/7m3vsLDLRAJWM4o073aKMM8sM2kbb9+XTSR/Ey4lzeZytJ1L5wIXYPee47Qo
e0YRADrJK/aG8LrEaOCWqCPYQyZrVrEpTYsZ0GI/N59CvU1i8XUWLHmj6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjMTK2cnrP01A+3r7SXvdm+P+MtMB8GA1UdIwQY
MBaAFNyuSwRxphhyxAQULh+Q9QdPDW8VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi82N2Y5YTctYTZlOC00MjZlLWJhYzQt
NGI2OGIxNWQzMDFhLzEvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi82N2Y5YTctYTZlOC00MjZlLWJhYzQtNGI2OGIxNWQzMDFh
LzEvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2jWNWkBh
+FEJAoN3ehBHWU4UJFIRn/acRvH7gHa09BoohLylduWmpUzIJDkhLkMiXWZvyDI1
lz7l6aL/24MBsqMwISpZ+aTy5FSA7hPwiJi2XFnKQw20gFBwzF/eT5EPF0QbLLvH
r95PL7DCVDWXG/ml80UVV6YL9+jWUjfWhczDtrpyBO1L4WL87BPRudG5Jnughjvi
H8bFxhjKiH93EhIgV3ysLUH5dEnQQR3UL/fn3wsDTAflf1R2JXL0+bUMTHrlZlP+
P79mnqfqRDj7cMaUcBrYEmKamrwMym4kqR3GSHnIxhGkqMzdE2IryxuHO5sJWCl1
IgvuK5uHPeT/AA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:51:54 2026 by rpki-client