Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json)
Hash identifier: kXSyVa1g2EQ/GDj8UK/OKkEGCCfHEN5WXgovHNt8VSQ=
Subject key identifier: 69:33:BB:82:62:04:85:73:1F:5B:56:01:07:2D:FB:98:7B:FD:4E:9B
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Certificate issuer: /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial: 019D2AA9F9700D1F27634165431D8ACCC648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
Manifest number: 181D
Signing time: Thu 26 Mar 2026 15:01:15 +0000
Manifest this update: Thu 26 Mar 2026 15:01:15 +0000
Manifest next update: Fri 27 Mar 2026 15:01:15 +0000
Files and hashes: 1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: j+qyd1UmKB5Puq68O32w3lEEYCYjpUQPa3QHUijkDfw=)
2: Ul8b11My9gvvpOwu_4T6lfCZjCI.roa (hash: ihknx/rKkWDFephobjW9oz0pq89+mPfWzCnTBwHVamY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:f9:70:0d:1f:27:63:41:65:43:1d:8a:cc:c6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Validity
Not Before: Mar 26 15:01:15 2026 GMT
Not After : Mar 27 15:01:15 2026 GMT
Subject: CN=6933bb82620485731f5b5601072dfb987bfd4e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:30:83:1f:7c:df:de:36:f5:ca:0f:db:ec:
f1:50:6e:ff:63:ed:74:b2:5c:9c:3f:b4:d3:ab:8f:
2c:f1:23:5a:06:18:98:7a:67:8a:06:8b:12:7c:33:
a1:10:2a:53:cb:20:48:9f:85:74:0c:61:1e:d6:00:
cf:0a:49:f6:5b:79:54:b9:2f:69:f7:36:d0:02:67:
6f:59:30:e8:3d:c8:0b:b5:89:52:f1:af:db:f7:5f:
2a:f1:59:3c:bc:59:d7:23:f3:35:7f:fd:df:8b:9e:
ac:83:5a:f3:f4:42:74:16:c9:ee:8b:ac:59:40:a4:
4a:66:11:be:e4:41:67:3e:69:10:e3:58:6f:4a:43:
b0:69:30:15:0f:9f:eb:5f:db:c6:7d:f5:2c:fe:94:
51:85:87:d5:90:1d:c6:06:77:27:5a:3a:c8:98:53:
a1:a5:94:34:0b:cd:7e:3e:d0:4c:0c:14:27:f0:08:
5a:6c:6d:18:21:cd:6b:5d:da:7b:6b:16:bd:bf:d4:
d7:3e:ac:5c:71:2f:bb:ee:1a:74:41:b6:89:f1:40:
11:38:4e:d3:a8:3a:3c:b3:b1:0b:c3:67:8c:16:4c:
22:92:a8:9e:f6:5c:19:b0:1b:3f:44:65:76:c2:35:
39:12:0f:ac:2a:85:ed:0e:3f:fc:99:5a:58:a7:bc:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:33:BB:82:62:04:85:73:1F:5B:56:01:07:2D:FB:98:7B:FD:4E:9B
X509v3 Authority Key Identifier:
keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:87:6a:9d:22:c6:47:f8:ff:5e:33:b1:b7:8f:bd:b2:eb:87:
20:f6:0d:56:88:e3:b6:f8:09:a3:81:47:a1:ea:19:2c:db:85:
39:cd:ae:df:6e:59:b4:8d:9f:a6:83:94:05:97:26:80:41:c8:
35:1c:37:cd:9e:fc:f1:df:19:b2:3c:63:1b:4a:a3:ad:f7:91:
48:ed:e5:39:4c:d7:09:43:de:92:ca:d2:a0:42:29:e0:aa:bd:
6b:c5:5e:29:cc:53:31:93:21:af:30:fa:0e:f5:9f:6f:d9:29:
ed:67:86:0a:ea:ad:9b:41:22:31:95:fe:1e:4b:a3:09:d0:82:
fd:7a:85:1b:1c:b4:e9:54:75:9b:54:69:4d:36:b1:53:90:1e:
d0:bb:2e:ba:ea:c3:ef:6a:58:b5:39:b6:97:09:64:63:d7:5a:
00:8e:55:34:84:86:73:66:ca:85:3d:d9:58:c6:d7:c6:c0:3a:
d4:6e:31:73:16:42:4a:30:64:87:93:60:c7:38:96:fc:d6:ac:
30:97:6c:7b:de:b2:1c:51:48:02:a5:ea:b8:2c:27:07:3b:a3:
18:17:a0:7e:be:50:f0:41:66:87:72:80:49:01:89:97:9b:36:
c3:d0:a6:de:07:85:b9:f0:51:2f:77:cc:db:8c:47:bc:ed:18:
b6:96:1a:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqflwDR8nY0FlQx2KzMZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzZkMmY0M2VjMTdkZmM4MDVjZGIwNWYwMDBhMTU3OTg5
ZWQ0NDgwHhcNMjYwMzI2MTUwMTE1WhcNMjYwMzI3MTUwMTE1WjAzMTEwLwYDVQQD
Eyg2OTMzYmI4MjYyMDQ4NTczMWY1YjU2MDEwNzJkZmI5ODdiZmQ0ZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8Ywgx9839429coP2+zxUG7/Y+10
slycP7TTq48s8SNaBhiYemeKBosSfDOhECpTyyBIn4V0DGEe1gDPCkn2W3lUuS9p
9zbQAmdvWTDoPcgLtYlS8a/b918q8Vk8vFnXI/M1f/3fi56sg1rz9EJ0Fsnui6xZ
QKRKZhG+5EFnPmkQ41hvSkOwaTAVD5/rX9vGffUs/pRRhYfVkB3GBncnWjrImFOh
pZQ0C81+PtBMDBQn8AhabG0YIc1rXdp7axa9v9TXPqxccS+77hp0QbaJ8UAROE7T
qDo8s7ELw2eMFkwikqie9lwZsBs/RGV2wjU5Eg+sKoXtDj/8mVpYp7zwUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkzu4JiBIVzH1tWAQct+5h7/U6bMB8GA1UdIwQY
MBaAFNx20vQ+wX38gFzbBfAAoVeYntRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNjFlNDAtYWMwOS00NzU2LTk0ZWYt
OTNjNjQ1N2NhZjMzLzEvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jNjFlNDAtYWMwOS00NzU2LTk0ZWYtOTNjNjQ1N2NhZjMz
LzEvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYdqnSLG
R/j/XjOxt4+9suuHIPYNVojjtvgJo4FHoeoZLNuFOc2u325ZtI2fpoOUBZcmgEHI
NRw3zZ788d8ZsjxjG0qjrfeRSO3lOUzXCUPeksrSoEIp4Kq9a8VeKcxTMZMhrzD6
DvWfb9kp7WeGCuqtm0EiMZX+HkujCdCC/XqFGxy06VR1m1RpTTaxU5Ae0LsuuurD
72pYtTm2lwlkY9daAI5VNISGc2bKhT3ZWMbXxsA61G4xcxZCSjBkh5NgxziW/Nas
MJdse96yHFFIAqXquCwnBzujGBegfr5Q8EFmh3KASQGJl5s2w9Cm3geFufBRL3fM
24xHvO0YtpYaIg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:22 2026 by rpki-client