Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
File: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft (raw, json)
Hash identifier: 4+6G2khlM66/8sTMPAtYZfUiqmq/ZNPIjcPgoLboqbw=
Subject key identifier: 75:95:7F:9F:2E:5D:F9:9A:37:4B:E3:4E:CA:6C:B6:E7:09:B6:F7:0F
Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
Certificate issuer: /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Certificate serial: 019D2515D9E185998309A1D32B7AA7D5AA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
Manifest number: 034F
Signing time: Wed 25 Mar 2026 13:01:21 +0000
Manifest this update: Wed 25 Mar 2026 13:01:21 +0000
Manifest next update: Thu 26 Mar 2026 13:01:21 +0000
Files and hashes: 1: 4NooMbKIS62zW-_aVVah6TCwlOM.asa (hash: vSsF5o3kUCrl02aYIIU2YsLPc8yAUwr3ZTIFQRFIEbY=)
2: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl (hash: wHI2qBii0YnhF+4crXOvD4JrsnXx3XUi+9tU4TIwxLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:15:d9:e1:85:99:83:09:a1:d3:2b:7a:a7:d5:aa:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Validity
Not Before: Mar 25 13:01:21 2026 GMT
Not After : Mar 26 13:01:21 2026 GMT
Subject: CN=75957f9f2e5df99a374be34eca6cb6e709b6f70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:d8:3c:ec:41:24:08:2d:cf:9e:ad:1d:9d:
16:89:f4:27:d4:ff:90:74:55:c8:d6:09:1b:1e:16:
13:d5:89:c2:ce:01:7c:37:cc:c3:da:b8:ca:0a:58:
c3:7f:32:97:3f:63:3e:e5:72:5e:9c:8d:73:9f:b1:
0e:af:8a:68:14:e5:f9:57:01:66:0e:bf:d2:23:c8:
a3:d4:22:4f:3b:3d:02:55:f9:33:d0:fd:30:33:a6:
22:17:13:d2:7f:ac:b4:38:7d:e8:b7:e0:03:d0:76:
1f:62:22:c9:a2:3d:3a:79:69:46:34:8d:4a:a6:a9:
9a:93:8e:61:94:92:e0:df:3f:b6:20:7e:2d:b9:41:
89:8c:bd:e7:56:79:be:bc:19:9d:98:0f:3c:e6:bb:
8b:2a:df:21:b6:44:06:8d:9e:28:0d:c8:f6:3e:c1:
18:2c:ac:38:df:59:d0:e1:fd:d3:2c:5a:c2:f2:cf:
b4:b3:96:0f:37:c7:a2:f3:4c:ef:9a:88:f8:69:b5:
54:22:db:bf:45:ef:70:a8:11:6c:7e:b0:42:58:81:
c3:ba:33:4a:b4:37:f4:05:4c:b9:be:93:aa:c6:1c:
9a:5e:03:40:13:24:52:24:79:48:10:77:25:26:c5:
10:d8:dc:7a:3b:73:f1:f0:c0:c9:d0:3a:06:df:aa:
50:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:95:7F:9F:2E:5D:F9:9A:37:4B:E3:4E:CA:6C:B6:E7:09:B6:F7:0F
X509v3 Authority Key Identifier:
keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ee:79:ee:c0:b7:d2:38:83:59:ae:71:fe:3f:33:82:d4:ef:
85:64:45:dd:55:c6:05:b1:ec:56:f7:19:04:f8:9c:d9:01:0b:
ae:11:ac:69:45:b9:de:a8:6a:74:e5:ab:ca:a6:7d:a9:cd:7d:
cb:72:84:7f:f3:69:6c:4e:22:5a:3e:36:1d:85:39:d2:0f:44:
c6:09:5f:b3:64:8a:45:20:3c:76:ef:36:8a:76:d1:e4:81:b6:
c9:dd:3b:75:2b:02:9b:56:df:a9:7a:79:4f:79:2b:6f:5c:a3:
1d:62:a6:5e:e9:62:31:fd:e3:c0:84:6d:8b:06:c8:43:ec:b4:
bc:ec:08:d4:7a:25:b4:a9:7e:23:83:e0:8e:ec:72:fd:c0:99:
e0:3b:00:83:07:ba:9c:f7:c3:da:d3:a6:80:a2:bc:14:be:3f:
35:1b:8b:43:5d:a7:e4:6c:12:1d:c6:34:a1:85:63:b8:9e:ba:
c0:91:25:70:14:96:fb:15:0c:ab:e8:e9:fa:8e:41:80:3e:9b:
93:21:65:12:a3:56:96:b5:54:f5:97:74:04:cb:ce:54:7e:fb:
6d:3e:0b:08:2b:f2:c6:f6:f1:a9:8a:68:e4:95:70:3b:9a:89:
25:c0:f6:43:48:3c:18:b7:87:cd:bc:88:5a:46:5e:6a:df:c8:
53:b4:d9:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lFdnhhZmDCaHTK3qn1aoXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NzYzMzRkYzZmNzBmNTYzZTk5OGY2MDgwYWQzMjhhYWI3
ZjhkMGUwHhcNMjYwMzI1MTMwMTIxWhcNMjYwMzI2MTMwMTIxWjAzMTEwLwYDVQQD
Eyg3NTk1N2Y5ZjJlNWRmOTlhMzc0YmUzNGVjYTZjYjZlNzA5YjZmNzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/bYPOxBJAgtz56tHZ0WifQn1P+Q
dFXI1gkbHhYT1YnCzgF8N8zD2rjKCljDfzKXP2M+5XJenI1zn7EOr4poFOX5VwFm
Dr/SI8ij1CJPOz0CVfkz0P0wM6YiFxPSf6y0OH3ot+AD0HYfYiLJoj06eWlGNI1K
pqmak45hlJLg3z+2IH4tuUGJjL3nVnm+vBmdmA885ruLKt8htkQGjZ4oDcj2PsEY
LKw431nQ4f3TLFrC8s+0s5YPN8ei80zvmoj4abVUItu/Re9wqBFsfrBCWIHDujNK
tDf0BUy5vpOqxhyaXgNAEyRSJHlIEHclJsUQ2Nx6O3Px8MDJ0DoG36pQswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWVf58uXfmaN0vjTspstucJtvcPMB8GA1UdIwQY
MBaAFAd2M03G9w9WPpmPYICtMoqrf40OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iYzM0YTAtMzIwMy00M2M3LTkxOWQt
ZTRjOGExOGJhNjQ1LzEvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iYzM0YTAtMzIwMy00M2M3LTkxOWQtZTRjOGExOGJhNjQ1
LzEvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVu557sC3
0jiDWa5x/j8zgtTvhWRF3VXGBbHsVvcZBPic2QELrhGsaUW53qhqdOWryqZ9qc19
y3KEf/NpbE4iWj42HYU50g9Exglfs2SKRSA8du82inbR5IG2yd07dSsCm1bfqXp5
T3krb1yjHWKmXuliMf3jwIRtiwbIQ+y0vOwI1HoltKl+I4Pgjuxy/cCZ4DsAgwe6
nPfD2tOmgKK8FL4/NRuLQ12n5GwSHcY0oYVjuJ66wJElcBSW+xUMq+jp+o5BgD6b
kyFlEqNWlrVU9Zd0BMvOVH77bT4LCCvyxvbxqYpo5JVwO5qJJcD2Q0g8GLeHzbyI
WkZeat/IU7TZOw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:41 2026 by rpki-client