Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: ln89XZohsZymUD+o6ON4uB6dXFo5m01mTzjAZ8/DAeo=
Subject key identifier: CD:DA:9B:6C:2C:98:64:42:36:C9:AA:80:EB:17:6E:1C:58:9C:0B:5E
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 019D27E067E935580FD8E555DCB32928DCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 02:01:51 +0000
Manifest this update: Thu 26 Mar 2026 02:01:51 +0000
Manifest next update: Fri 27 Mar 2026 02:01:51 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: ADNtPOuat+elT7KTf7M8XbTjKkl8ALtBKPOG35v/YPs=)
2: w3_eDrVHUYCcKtbza7c41NLDYIM.roa (hash: IPJ09SAjboh4Vep0OkCZipCIUFqGArpEx9t2oIDtFc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:67:e9:35:58:0f:d8:e5:55:dc:b3:29:28:dc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Mar 26 02:01:51 2026 GMT
Not After : Mar 27 02:01:51 2026 GMT
Subject: CN=cdda9b6c2c98644236c9aa80eb176e1c589c0b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:1e:ad:b9:e6:d6:9a:53:5f:16:7a:f6:80:
03:fb:3d:7f:81:ab:52:c6:9b:4b:40:90:97:2b:a8:
04:ac:b1:79:23:85:dd:d6:59:0d:9f:e6:8c:ac:29:
2b:1b:2e:55:c4:74:73:f0:d4:a6:0d:50:7a:38:f8:
0d:45:fb:1a:3e:d9:3d:e0:18:ab:26:56:8e:84:b5:
f7:8f:ba:3c:4f:db:91:ea:30:18:cd:04:1e:65:07:
c3:b8:c3:9f:c3:f7:bd:6a:e4:a2:ab:6c:26:a1:2c:
ca:2a:0b:ad:99:e9:8d:11:e3:81:98:9a:96:2c:fc:
a2:ff:25:b9:f9:c0:6b:f5:ee:66:dd:ef:a3:8f:1f:
0d:a8:9a:3c:db:d9:51:0f:78:9d:98:56:5b:bd:a9:
7b:6d:7e:a9:f2:2b:34:d8:73:54:47:fa:0a:21:a7:
1f:2f:ba:7e:57:10:8a:06:be:3b:da:c1:63:89:b8:
56:6d:1e:f9:04:8e:d9:d8:da:9f:30:38:9e:5c:f2:
b2:92:6f:1d:ac:9c:9d:ad:1f:83:1e:23:91:31:f3:
dd:84:38:99:91:c3:0e:9b:16:96:80:64:37:4c:77:
c5:9d:02:14:af:b5:35:1b:fe:01:9e:bf:dc:57:1c:
0c:9a:c1:3e:64:bb:c9:fd:d9:a1:d4:ac:a1:ef:8a:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DA:9B:6C:2C:98:64:42:36:C9:AA:80:EB:17:6E:1C:58:9C:0B:5E
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e4:24:c3:1b:9d:c5:72:ca:d3:23:28:8b:6a:f2:96:13:f5:
2a:86:99:b2:d4:f7:09:c7:7f:49:52:40:fa:84:59:7b:82:89:
24:e6:7a:fa:9c:e6:80:c8:bd:dd:ea:06:6b:b5:9e:2c:4a:9d:
3d:45:14:ad:2f:97:23:1d:06:59:9c:b2:b5:a5:78:a7:23:8f:
5d:90:de:93:56:df:68:fd:88:21:bc:45:c8:27:61:fc:70:11:
7f:93:85:17:c1:5e:ac:9a:20:d5:17:02:ce:c0:1b:db:f8:8f:
c5:82:e4:a3:31:44:27:69:bc:b3:0d:e8:f8:c4:6f:96:9d:f0:
96:41:99:6f:47:b7:5a:91:c9:d5:b4:e4:8a:36:17:60:ce:6d:
bd:6f:30:4a:2d:8f:98:98:d3:60:66:75:9a:17:d9:32:5d:c9:
e3:62:52:f9:13:09:4f:b2:48:24:6b:5b:69:27:62:9a:31:65:
e7:35:40:29:a4:c6:44:fd:e1:ad:3a:30:9d:e1:fa:52:a5:31:
f4:62:94:b9:60:cb:ac:00:3e:49:ce:b4:ea:a6:9b:89:d3:ab:
e0:60:13:6e:f1:71:92:21:20:5b:ee:d1:fc:e5:e4:70:c3:f9:
79:36:10:fe:45:88:d3:24:e6:d0:43:4c:b0:7b:79:ff:be:f2:
0b:98:3c:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4GfpNVgP2OVV3LMpKNzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTVlYzE3NWY2ZWU3YTFmYzFmODlhZGY3NTRiYjJhMDg2
MjU3OGEwHhcNMjYwMzI2MDIwMTUxWhcNMjYwMzI3MDIwMTUxWjAzMTEwLwYDVQQD
EyhjZGRhOWI2YzJjOTg2NDQyMzZjOWFhODBlYjE3NmUxYzU4OWMwYjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Wcerbnm1ppTXxZ69oAD+z1/gatS
xptLQJCXK6gErLF5I4Xd1lkNn+aMrCkrGy5VxHRz8NSmDVB6OPgNRfsaPtk94Bir
JlaOhLX3j7o8T9uR6jAYzQQeZQfDuMOfw/e9auSiq2wmoSzKKgutmemNEeOBmJqW
LPyi/yW5+cBr9e5m3e+jjx8NqJo829lRD3idmFZbval7bX6p8is02HNUR/oKIacf
L7p+VxCKBr472sFjibhWbR75BI7Z2NqfMDieXPKykm8drJydrR+DHiORMfPdhDiZ
kcMOmxaWgGQ3THfFnQIUr7U1G/4Bnr/cVxwMmsE+ZLvJ/dmh1Kyh74pCJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3am2wsmGRCNsmqgOsXbhxYnAteMB8GA1UdIwQY
MBaAFN1V7Bdfbueh/B+JrfdUuyoIYleKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80MGQ0MDctMWVhYy00MzgxLThmYTYt
NDZjMmNjMjgwMmYxLzEvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80MGQ0MDctMWVhYy00MzgxLThmYTYtNDZjMmNjMjgwMmYx
LzEvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+Qkwxud
xXLK0yMoi2rylhP1KoaZstT3Ccd/SVJA+oRZe4KJJOZ6+pzmgMi93eoGa7WeLEqd
PUUUrS+XIx0GWZyytaV4pyOPXZDek1bfaP2IIbxFyCdh/HARf5OFF8FerJog1RcC
zsAb2/iPxYLkozFEJ2m8sw3o+MRvlp3wlkGZb0e3WpHJ1bTkijYXYM5tvW8wSi2P
mJjTYGZ1mhfZMl3J42JS+RMJT7JIJGtbaSdimjFl5zVAKaTGRP3hrTowneH6UqUx
9GKUuWDLrAA+Sc606qabidOr4GATbvFxkiEgW+7R/OXkcMP5eTYQ/kWI0yTm0ENM
sHt5/77yC5g8wg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:24 2026 by rpki-client