Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
File: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft (raw, json)
Hash identifier: wwEMg3LanKzM0bzdQd5CC55PA7LwJ6+OECv0q2zOKIE=
Subject key identifier: 8E:2C:76:66:8B:96:AA:57:E6:60:A7:47:BE:46:12:D6:F5:4E:D1:02
Authority key identifier: A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
Certificate issuer: /CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Certificate serial: 019D2884CE342B8A165D15B3D3139F77D7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
Manifest number: 0F3F
Signing time: Thu 26 Mar 2026 05:01:25 +0000
Manifest this update: Thu 26 Mar 2026 05:01:25 +0000
Manifest next update: Fri 27 Mar 2026 05:01:25 +0000
Files and hashes: 1: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl (hash: /1aXlRpX3CtqC/kvoSB8GJS83ERuTfAi1ytHqBJ8OsA=)
2: vFPz2EZZAEU2N3SgGFxaDNU5jHs.roa (hash: EuLVLB/JUDTlNe7Sgb1DpN69/WpO8B+6KWA2ZGoI7bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:ce:34:2b:8a:16:5d:15:b3:d3:13:9f:77:d7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Validity
Not Before: Mar 26 05:01:25 2026 GMT
Not After : Mar 27 05:01:25 2026 GMT
Subject: CN=8e2c76668b96aa57e660a747be4612d6f54ed102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4d:bb:6e:71:52:0d:78:25:d9:8d:47:28:ec:
b8:c2:ac:fa:fc:1c:9b:f4:73:41:d1:2d:32:f1:1f:
58:78:70:af:ae:5d:c0:d0:27:ad:61:30:e8:87:38:
a6:f4:fc:e2:51:1c:fc:28:02:57:bb:51:32:88:76:
fd:92:7f:bd:a2:82:52:c1:20:99:3c:3f:f3:53:76:
30:1f:f1:06:e6:8b:f6:82:16:a7:80:ba:e4:5d:9a:
ff:a4:7b:b8:b3:a8:46:7e:b7:6d:7c:4a:66:f5:7c:
c6:7d:f0:a8:1f:fd:55:a6:c0:62:56:58:b3:2b:2d:
fb:54:86:18:c7:4d:49:48:62:cb:2a:82:9c:a9:8c:
5d:0b:fc:58:fd:94:9d:73:0c:86:e2:5a:c2:6e:82:
7a:62:aa:56:2e:b7:e4:0b:3c:a6:68:dc:05:fe:80:
d6:62:8a:3f:89:b5:7d:3f:9e:2c:8a:e5:8c:7e:6a:
43:f4:d4:bd:1f:92:87:16:9a:ee:b1:73:55:70:31:
7f:bb:c9:4d:e7:b6:34:01:00:8b:e3:b9:4a:27:c7:
ee:d3:b7:1a:33:40:85:39:ec:43:cc:b5:f7:5c:9a:
6c:03:3a:ef:f5:08:1a:c8:30:f7:c8:03:bc:05:95:
9c:1f:bc:ba:96:84:5d:96:93:9f:e7:f5:18:02:b0:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2C:76:66:8B:96:AA:57:E6:60:A7:47:BE:46:12:D6:F5:4E:D1:02
X509v3 Authority Key Identifier:
keyid:A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e7:27:5f:e1:0a:70:d9:1e:5e:f2:1e:6b:86:1f:5d:c2:5d:
61:ca:c2:cd:51:70:31:14:04:b6:90:f8:03:05:40:2e:79:7f:
a5:7a:c5:cb:b9:ae:22:f6:0f:b8:7e:53:2f:dc:f3:12:6e:2f:
0c:17:3c:ea:7e:af:fc:e5:4d:26:c3:29:50:dc:70:ab:0d:00:
8d:5b:0d:8d:cb:8a:95:1d:5c:cb:14:d2:df:0f:1d:8a:c0:53:
ad:98:96:8c:57:ec:d3:29:b1:0c:b0:61:f5:4e:a9:e7:99:cc:
fa:fa:40:fe:a0:7c:dc:9e:8e:aa:50:b2:11:da:25:68:8e:2a:
a3:ca:42:16:32:23:1c:06:79:1b:7c:91:83:03:6c:84:13:d1:
dc:15:94:db:25:14:64:74:17:a9:c9:2b:25:46:44:ff:91:1f:
36:c9:3e:0b:1b:43:cc:68:8b:b0:71:22:15:30:ee:93:81:04:
7a:a8:98:d9:30:d5:18:ca:3a:48:48:7a:10:92:e9:a6:1b:ca:
3c:b2:83:9f:55:97:43:47:d8:df:c0:60:f0:11:b4:94:61:19:
04:44:4c:09:2f:7c:00:d4:17:f9:73:e4:4c:cf:68:d1:c3:ef:
ef:de:f8:f9:28:46:39:d8:5d:80:0f:cc:2c:76:7e:b4:08:03:
c0:7d:26:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohM40K4oWXRWz0xOfd9fXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NzMyNWU0OTVjYjAxNTAyMDNiNzlmMjQ2ZjRjZDRjMGZl
YzI0ZmYwHhcNMjYwMzI2MDUwMTI1WhcNMjYwMzI3MDUwMTI1WjAzMTEwLwYDVQQD
Eyg4ZTJjNzY2NjhiOTZhYTU3ZTY2MGE3NDdiZTQ2MTJkNmY1NGVkMTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl027bnFSDXgl2Y1HKOy4wqz6/Byb
9HNB0S0y8R9YeHCvrl3A0CetYTDohzim9PziURz8KAJXu1EyiHb9kn+9ooJSwSCZ
PD/zU3YwH/EG5ov2ghangLrkXZr/pHu4s6hGfrdtfEpm9XzGffCoH/1VpsBiVliz
Ky37VIYYx01JSGLLKoKcqYxdC/xY/ZSdcwyG4lrCboJ6YqpWLrfkCzymaNwF/oDW
Yoo/ibV9P54siuWMfmpD9NS9H5KHFprusXNVcDF/u8lN57Y0AQCL47lKJ8fu07ca
M0CFOexDzLX3XJpsAzrv9QgayDD3yAO8BZWcH7y6loRdlpOf5/UYArCUDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4sdmaLlqpX5mCnR75GEtb1TtECMB8GA1UdIwQY
MBaAFKdzJeSVywFQIDt58kb0zUwP7CT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iZjg0MTEtNjk2MC00Y2VmLTkxZjkt
MTNiNmE2ZDcxYTQxLzEvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9iZjg0MTEtNjk2MC00Y2VmLTkxZjktMTNiNmE2ZDcxYTQx
LzEvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOcnX+EK
cNkeXvIea4YfXcJdYcrCzVFwMRQEtpD4AwVALnl/pXrFy7muIvYPuH5TL9zzEm4v
DBc86n6v/OVNJsMpUNxwqw0AjVsNjcuKlR1cyxTS3w8disBTrZiWjFfs0ymxDLBh
9U6p55nM+vpA/qB83J6OqlCyEdolaI4qo8pCFjIjHAZ5G3yRgwNshBPR3BWU2yUU
ZHQXqckrJUZE/5EfNsk+CxtDzGiLsHEiFTDuk4EEeqiY2TDVGMo6SEh6EJLpphvK
PLKDn1WXQ0fY38Bg8BG0lGEZBERMCS98ANQX+XPkTM9o0cPv7974+ShGOdhdgA/M
LHZ+tAgDwH0muA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:09:41 2026 by rpki-client