Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier: s7PTNXLzyAvKzoyPbHU7RNHgfKZkoFXtX7j0JQQqFQs=
Subject key identifier: FD:3D:2D:9D:C5:E6:A7:E7:97:CA:68:3D:68:F0:1E:14:06:B1:A3:9B
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial: 019D2B4E635E076E510AFD6F83005173E5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number: 068D
Signing time: Thu 26 Mar 2026 18:00:50 +0000
Manifest this update: Thu 26 Mar 2026 18:00:50 +0000
Manifest next update: Fri 27 Mar 2026 18:00:50 +0000
Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: h9kk5pRyZ+ITWZHTXaXely5EwYovOuAAiy0RyiwzWoQ=)
2: WoN0CrYvueqPk1KqmXJffVK7ib4.roa (hash: 4FA6Dc/pCbAQFuPtL5vNxbuQK2/hlz7MGBa9RY6awaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:63:5e:07:6e:51:0a:fd:6f:83:00:51:73:e5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Validity
Not Before: Mar 26 18:00:50 2026 GMT
Not After : Mar 27 18:00:50 2026 GMT
Subject: CN=fd3d2d9dc5e6a7e797ca683d68f01e1406b1a39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:67:3b:0c:6f:23:fd:7b:bc:3c:05:52:41:93:
94:9e:28:71:44:b9:1e:ca:39:8d:43:d2:62:24:27:
34:b4:bc:ac:22:5b:66:48:f2:11:f3:49:71:e0:45:
6f:42:ea:50:98:ed:51:d1:43:4f:c8:4b:cc:34:10:
0a:23:b5:77:13:86:e0:4a:25:00:a0:9d:85:09:bc:
c7:02:22:f2:d6:66:c7:2d:bb:7f:1a:79:76:a2:69:
65:5a:d2:55:26:aa:bc:c7:d8:88:59:69:dc:83:7d:
cb:ce:03:59:1b:20:55:07:b4:4f:b8:cc:dd:e2:75:
0d:38:ac:56:60:e7:77:df:14:16:ea:6b:f2:d9:59:
d0:20:3a:cd:42:3c:50:01:89:32:22:14:d7:31:4c:
95:7e:f1:f1:24:7a:63:d3:bd:96:fd:f9:11:ee:6a:
e1:83:15:0f:22:1f:19:a8:78:eb:8f:cd:89:c4:20:
2d:f7:89:cc:91:db:04:46:93:e1:1d:a4:3a:26:c3:
e0:06:45:01:e2:b4:d8:62:3b:eb:10:5d:18:1d:6c:
e6:a8:b8:f2:18:2f:9f:29:31:5b:a2:99:02:93:dc:
70:b8:82:17:12:8e:13:ec:2a:11:4d:0c:6d:01:aa:
b3:ab:a6:f1:67:75:e2:76:35:2c:9d:b4:2a:66:2b:
8c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3D:2D:9D:C5:E6:A7:E7:97:CA:68:3D:68:F0:1E:14:06:B1:A3:9B
X509v3 Authority Key Identifier:
keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:54:2b:c6:ca:45:1b:af:65:14:e0:37:77:30:7f:0d:1d:8f:
1f:e3:e4:4f:04:c0:d2:d5:5d:62:fd:01:84:ee:e7:6c:ff:4d:
c9:13:9f:8b:6d:6b:af:23:85:ec:53:af:da:66:b8:a4:ab:90:
f7:fe:99:c7:a2:cd:3f:3b:6d:f3:93:ce:33:b4:e3:16:ca:19:
22:4e:ec:04:2d:7d:ec:ff:8f:89:c5:cb:8b:ef:9c:61:e0:f7:
1e:46:44:f1:29:79:6e:09:4f:ba:76:cc:ba:0b:b6:0c:b3:1a:
ce:df:e9:af:a7:1c:ef:db:2d:42:01:09:cb:c8:53:00:ce:2c:
08:e8:7f:9c:be:5b:3b:96:9c:ad:63:ff:37:b4:fc:9d:ab:50:
f2:6a:97:2b:05:d6:e8:f4:17:d8:94:ad:f2:b2:d3:01:8a:2c:
86:bd:bf:58:79:e2:60:6a:fe:a8:ee:2d:b6:3d:b4:87:83:fb:
63:64:21:9e:af:78:00:d9:9d:54:41:8c:a8:d5:aa:76:3b:8b:
1d:d6:b8:3f:0a:f9:f6:f2:f7:40:cb:db:b2:ec:43:40:db:fe:
0e:11:3c:ba:bf:1a:df:d8:d0:07:78:b1:16:bb:08:72:04:ac:
fb:85:f1:78:36:1f:0a:5e:53:dc:64:be:9e:77:35:bc:a7:7f:
9c:6b:88:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTmNeB25RCv1vgwBRc+XKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGY5MGE5M2RjOTQyNzg1NTY0NDkwM2NiNzBjMWY3NGI5
MzE3ODYwHhcNMjYwMzI2MTgwMDUwWhcNMjYwMzI3MTgwMDUwWjAzMTEwLwYDVQQD
EyhmZDNkMmQ5ZGM1ZTZhN2U3OTdjYTY4M2Q2OGYwMWUxNDA2YjFhMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Wc7DG8j/Xu8PAVSQZOUnihxRLke
yjmNQ9JiJCc0tLysIltmSPIR80lx4EVvQupQmO1R0UNPyEvMNBAKI7V3E4bgSiUA
oJ2FCbzHAiLy1mbHLbt/Gnl2omllWtJVJqq8x9iIWWncg33LzgNZGyBVB7RPuMzd
4nUNOKxWYOd33xQW6mvy2VnQIDrNQjxQAYkyIhTXMUyVfvHxJHpj072W/fkR7mrh
gxUPIh8ZqHjrj82JxCAt94nMkdsERpPhHaQ6JsPgBkUB4rTYYjvrEF0YHWzmqLjy
GC+fKTFbopkCk9xwuIIXEo4T7CoRTQxtAaqzq6bxZ3XidjUsnbQqZiuMbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP09LZ3F5qfnl8poPWjwHhQGsaObMB8GA1UdIwQY
MBaAFNxPkKk9yUJ4VWRJA8twwfdLkxeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUt
NjMxNzdmYjE5YWJlLzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUtNjMxNzdmYjE5YWJl
LzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFQrxspF
G69lFOA3dzB/DR2PH+PkTwTA0tVdYv0BhO7nbP9NyROfi21rryOF7FOv2ma4pKuQ
9/6Zx6LNPztt85POM7TjFsoZIk7sBC197P+PicXLi++cYeD3HkZE8Sl5bglPunbM
ugu2DLMazt/pr6cc79stQgEJy8hTAM4sCOh/nL5bO5acrWP/N7T8natQ8mqXKwXW
6PQX2JSt8rLTAYoshr2/WHniYGr+qO4ttj20h4P7Y2Qhnq94ANmdVEGMqNWqdjuL
Hda4Pwr59vL3QMvbsuxDQNv+DhE8ur8a39jQB3ixFrsIcgSs+4XxeDYfCl5T3GS+
nnc1vKd/nGuIHQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:08:12 2026 by rpki-client