Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: txkqqbzFHp3FO3MStXD3ZjI09vLaf1bXchtsC7HCtkw=
Subject key identifier: 3D:8F:95:3C:C9:C5:C5:63:D0:4D:F9:97:62:36:E8:9A:E4:1E:35:E5
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 019D25BADCA2B900CF32E5FD0913E80BE367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 0F1A
Signing time: Wed 25 Mar 2026 16:01:36 +0000
Manifest this update: Wed 25 Mar 2026 16:01:36 +0000
Manifest next update: Thu 26 Mar 2026 16:01:36 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: J/Ze399WMoB1oQVqeNL0SQ3dUcwldWZ80gTNr0M3Cwo=)
2: QFEuDeeu4X6RvqTM-9j-vL-jCec.roa (hash: enIY13X+DtKSJonUyur86EMN51RX0wJhm2ZaFev3lAE=)
3: lGfy-skAnLgxdiq51q1vJk9OXZg.roa (hash: 905M+SG71AWuwma3AVwJNMrg+VeownsgNGw18kPIIEs=)
4: shwWHH59CwEK5l3nYzgvrpyDADs.roa (hash: Xxgj4+MGImPO/BRjCoJfEL8QyT6UC4SQ9MovxKsATjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:dc:a2:b9:00:cf:32:e5:fd:09:13:e8:0b:e3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Mar 25 16:01:36 2026 GMT
Not After : Mar 26 16:01:36 2026 GMT
Subject: CN=3d8f953cc9c5c563d04df9976236e89ae41e35e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f3:26:62:6e:10:3f:55:74:aa:34:7f:40:aa:
db:81:68:6c:34:d8:fc:82:83:33:b4:f3:d9:c9:cb:
ab:3b:2c:35:26:bc:6e:50:44:68:c0:55:36:94:66:
c5:55:1c:e9:c3:e4:f9:5f:c5:fe:0b:8b:fe:ee:5e:
57:40:6c:c0:55:81:a5:d4:30:0d:b7:c3:14:af:68:
1a:a6:d6:5d:6c:5f:ef:cd:f5:07:3a:32:27:64:eb:
89:1b:22:f2:c9:4a:d7:96:79:e6:7a:f8:d3:98:b3:
8f:44:71:6a:e3:a7:11:09:bf:22:8d:c5:53:a2:6b:
08:b4:cc:f2:0c:79:71:c5:e8:6e:cc:36:50:0b:21:
ca:b9:42:fc:b2:79:42:47:e7:46:dc:79:8b:f3:53:
4f:1e:a2:75:60:de:c1:cb:da:84:be:1d:2b:5f:d3:
75:c0:a5:82:b4:80:f9:b5:7c:96:9e:91:c9:1d:9c:
f2:0c:ec:75:89:ab:60:b3:f0:09:e0:e3:72:7e:fc:
ed:ae:58:32:e6:39:ec:9c:74:d3:2c:1b:32:ef:cd:
1d:b9:90:1e:60:83:5a:53:c4:13:d4:99:8c:04:8a:
56:3f:ed:6b:87:9b:83:6b:e6:c6:63:22:e0:94:f5:
15:27:d0:3f:11:61:aa:54:24:c2:27:2e:b3:5a:6b:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8F:95:3C:C9:C5:C5:63:D0:4D:F9:97:62:36:E8:9A:E4:1E:35:E5
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:98:fc:3d:92:06:0e:39:70:90:af:a7:76:16:81:5b:d3:a0:
f1:64:7f:ad:a1:58:e9:d7:c0:2d:9e:6e:a2:a5:3b:ed:b4:77:
77:b9:26:49:94:f8:da:c3:ca:fe:ad:35:f8:9a:84:8b:a5:cc:
8b:65:60:0d:90:3b:a9:f4:c9:d3:49:b1:31:ca:51:d5:29:d3:
da:92:9c:e5:33:d2:a7:d9:9d:31:fe:55:46:bb:8f:44:d7:23:
ad:79:11:6e:03:d9:d9:05:07:29:83:f5:b4:a3:d8:36:0f:c0:
47:22:08:08:a6:38:b3:10:d3:06:16:32:f4:f0:9e:f6:b2:b9:
5c:6a:48:4e:aa:71:7d:ce:20:0b:47:dc:80:2a:a0:53:59:f3:
66:77:12:22:ef:4e:8a:e0:f4:1f:aa:9b:8c:f5:d5:49:3d:ac:
fb:55:d2:69:ab:ad:9a:91:1f:aa:4f:8d:30:1d:59:04:19:8d:
24:c8:83:d3:7a:36:a0:43:58:e4:a2:a2:b4:a3:76:80:28:22:
0e:aa:22:bf:d7:e7:29:24:cf:ef:b7:6e:13:d8:03:39:a3:71:
41:48:66:92:f2:99:e5:13:12:47:3c:c2:08:d6:90:d3:ee:8c:
de:79:ac:4b:4b:5d:50:29:77:f2:66:2e:d0:97:17:05:b8:dc:
b5:c7:c9:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lutyiuQDPMuX9CRPoC+NnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYjcxNDcxMzczYmIwNjAzYzM1NmVlZGVkNGI5MTgyOTJi
NWJlZWUwHhcNMjYwMzI1MTYwMTM2WhcNMjYwMzI2MTYwMTM2WjAzMTEwLwYDVQQD
EygzZDhmOTUzY2M5YzVjNTYzZDA0ZGY5OTc2MjM2ZTg5YWU0MWUzNWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PMmYm4QP1V0qjR/QKrbgWhsNNj8
goMztPPZycurOyw1JrxuUERowFU2lGbFVRzpw+T5X8X+C4v+7l5XQGzAVYGl1DAN
t8MUr2gaptZdbF/vzfUHOjInZOuJGyLyyUrXlnnmevjTmLOPRHFq46cRCb8ijcVT
omsItMzyDHlxxehuzDZQCyHKuUL8snlCR+dG3HmL81NPHqJ1YN7By9qEvh0rX9N1
wKWCtID5tXyWnpHJHZzyDOx1iatgs/AJ4ONyfvztrlgy5jnsnHTTLBsy780duZAe
YINaU8QT1JmMBIpWP+1rh5uDa+bGYyLglPUVJ9A/EWGqVCTCJy6zWmusRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2PlTzJxcVj0E35l2I26JrkHjXlMB8GA1UdIwQY
MBaAFN23FHE3O7BgPDVu7e1LkYKStb7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgt
NjIxMmFjNDljYTNiLzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgtNjIxMmFjNDljYTNi
LzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZj8PZIG
DjlwkK+ndhaBW9Og8WR/raFY6dfALZ5uoqU77bR3d7kmSZT42sPK/q01+JqEi6XM
i2VgDZA7qfTJ00mxMcpR1SnT2pKc5TPSp9mdMf5VRruPRNcjrXkRbgPZ2QUHKYP1
tKPYNg/ARyIICKY4sxDTBhYy9PCe9rK5XGpITqpxfc4gC0fcgCqgU1nzZncSIu9O
iuD0H6qbjPXVST2s+1XSaautmpEfqk+NMB1ZBBmNJMiD03o2oENY5KKitKN2gCgi
Dqoiv9fnKSTP77duE9gDOaNxQUhmkvKZ5RMSRzzCCNaQ0+6M3nmsS0tdUCl38mYu
0JcXBbjctcfJ2g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:12 2026 by rpki-client