Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: YF/xvDDYO1bFNcAWDk40Tucie4iRL/iEYTvXudaxFtA=
Subject key identifier: 59:1D:6B:9B:70:AA:52:9A:8E:8C:1D:B3:84:F3:A0:DC:DF:83:A7:B9
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 019D27E02519C85A5AA5CB176859DCF51B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 123B
Signing time: Thu 26 Mar 2026 02:01:34 +0000
Manifest this update: Thu 26 Mar 2026 02:01:34 +0000
Manifest next update: Fri 27 Mar 2026 02:01:34 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: 9yI46VGQiPKh3Z/zpt2zu2ccq525NE1PKzgaZfhzAm8=)
2: m8pcNIGfAGz5wiEeCJ9aji1_KSY.roa (hash: SgAuRkWCSoQK2KWjI4kALGTvsxbiGO3Jz/Xs4XRVN3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:25:19:c8:5a:5a:a5:cb:17:68:59:dc:f5:1b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Mar 26 02:01:34 2026 GMT
Not After : Mar 27 02:01:34 2026 GMT
Subject: CN=591d6b9b70aa529a8e8c1db384f3a0dcdf83a7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:af:30:c8:d9:51:0f:bb:31:e4:3c:d5:e0:
4b:a9:12:87:14:29:d5:e5:f6:00:81:ab:e2:94:d3:
64:d2:ab:30:56:20:c4:d2:c3:a3:46:74:09:5a:bd:
34:45:6a:17:e3:4a:22:50:b1:44:70:76:cf:e1:25:
da:69:5d:e5:2f:63:fc:55:9a:e0:15:04:ba:b3:de:
3a:92:dd:6e:7f:74:07:14:d3:d6:e7:46:41:fe:22:
ad:23:15:f3:ed:7c:e5:d7:9b:57:f9:d5:b9:fd:da:
f1:96:0a:66:2a:a3:1e:72:a8:94:a9:4b:38:33:a5:
d7:36:fb:95:8e:18:64:fc:3a:99:cc:78:15:4c:04:
06:25:84:56:17:c8:d3:35:38:ce:fd:f2:e5:ba:a5:
4b:c6:01:2c:e0:58:d7:aa:69:d5:1a:d8:fe:14:30:
29:dc:d3:1d:17:44:e6:f7:0f:e9:5e:22:55:5e:5f:
7c:b1:92:b0:23:60:18:24:94:12:ed:d1:3f:fa:ee:
ad:25:84:66:fa:33:98:24:7f:22:c1:35:c1:96:ab:
36:ae:89:c9:0f:bf:fc:96:39:62:55:db:81:3f:7b:
40:a6:53:93:3e:d6:6b:11:aa:0a:f1:ce:c3:86:b2:
b4:2e:7f:75:ec:ef:22:5a:66:0c:25:2b:67:ab:75:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1D:6B:9B:70:AA:52:9A:8E:8C:1D:B3:84:F3:A0:DC:DF:83:A7:B9
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8e:51:f4:07:a6:66:bc:01:e9:4f:93:35:5c:98:94:c4:ef:
3a:99:80:f3:a5:00:ec:2d:b7:e8:b7:19:9d:7a:79:73:8e:b3:
a0:21:f5:4d:cb:d4:47:97:75:95:52:c2:50:b0:f6:6d:52:9b:
47:87:17:96:09:e3:83:a0:a7:87:77:fe:34:b8:b5:d9:10:7b:
41:c2:4c:c9:56:be:de:75:ba:d6:0b:f8:2d:1d:fd:11:14:21:
5a:7d:19:dd:17:66:b1:84:fe:ef:86:5d:d7:d9:e9:08:4f:f4:
79:2c:e1:c0:53:e4:45:28:af:bc:1c:f7:da:11:2c:ea:24:df:
92:ed:e7:ca:6e:d9:a8:3e:8f:40:4c:7d:53:ec:f4:54:86:61:
f5:91:f1:ca:44:cd:75:42:f8:5e:5d:b9:7d:50:be:f5:1d:5c:
29:11:b4:d2:28:59:53:aa:cf:49:52:1d:35:ae:81:99:36:a4:
ab:e6:d7:48:98:bc:af:1d:19:f7:e4:04:5e:76:a7:b4:cc:fc:
67:3e:39:75:97:3a:5d:17:44:68:82:c4:a5:18:9d:23:04:59:
6c:37:ea:13:b2:35:db:c6:5b:b5:fd:b4:e6:39:50:a8:ee:5d:
6e:d8:ea:d7:8b:38:39:25:04:13:61:cf:42:6a:60:f3:a1:f7:
42:38:10:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4CUZyFpapcsXaFnc9RtOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZWM1Yzk0NWQwMzUzNWQ5NjczMDk1MTEwNTQ2YjFjOThl
NjE4NjAwHhcNMjYwMzI2MDIwMTM0WhcNMjYwMzI3MDIwMTM0WjAzMTEwLwYDVQQD
Eyg1OTFkNmI5YjcwYWE1MjlhOGU4YzFkYjM4NGYzYTBkY2RmODNhN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQqvMMjZUQ+7MeQ81eBLqRKHFCnV
5fYAgavilNNk0qswViDE0sOjRnQJWr00RWoX40oiULFEcHbP4SXaaV3lL2P8VZrg
FQS6s946kt1uf3QHFNPW50ZB/iKtIxXz7Xzl15tX+dW5/drxlgpmKqMecqiUqUs4
M6XXNvuVjhhk/DqZzHgVTAQGJYRWF8jTNTjO/fLluqVLxgEs4FjXqmnVGtj+FDAp
3NMdF0Tm9w/pXiJVXl98sZKwI2AYJJQS7dE/+u6tJYRm+jOYJH8iwTXBlqs2ronJ
D7/8ljliVduBP3tAplOTPtZrEaoK8c7DhrK0Ln917O8iWmYMJStnq3VbCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkda5twqlKajowds4TzoNzfg6e5MB8GA1UdIwQY
MBaAFN/sXJRdA1NdlnMJURBUaxyY5hhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYt
ZGRkZGVmMjQxMjE2LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYtZGRkZGVmMjQxMjE2
LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaI5R9Aem
ZrwB6U+TNVyYlMTvOpmA86UA7C236LcZnXp5c46zoCH1TcvUR5d1lVLCULD2bVKb
R4cXlgnjg6Cnh3f+NLi12RB7QcJMyVa+3nW61gv4LR39ERQhWn0Z3RdmsYT+74Zd
19npCE/0eSzhwFPkRSivvBz32hEs6iTfku3nym7ZqD6PQEx9U+z0VIZh9ZHxykTN
dUL4Xl25fVC+9R1cKRG00ihZU6rPSVIdNa6BmTakq+bXSJi8rx0Z9+QEXnantMz8
Zz45dZc6XRdEaILEpRidIwRZbDfqE7I128Zbtf205jlQqO5dbtjq14s4OSUEE2HP
Qmpg86H3QjgQcg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:49 2026 by rpki-client