Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
File: 3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft (raw, json)
Hash identifier: YljwBbRoOZklcoHfajnLglIIvmEjG1aewvdpD/79Ntc=
Subject key identifier: 99:7D:FE:31:4C:4C:E2:52:EC:6D:58:FA:EB:EC:AD:A6:09:6E:F6:64
Authority key identifier: DC:1F:52:90:76:F4:51:ED:9E:0B:22:2C:CE:35:DB:C9:7C:BD:C5:1B
Certificate issuer: /CN=dc1f529076f451ed9e0b222cce35dbc97cbdc51b
Certificate serial: 019D329AD622518FEC928A5C89C88D1E693F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
Manifest number: FF
Signing time: Sat 28 Mar 2026 04:01:41 +0000
Manifest this update: Sat 28 Mar 2026 04:01:41 +0000
Manifest next update: Sun 29 Mar 2026 04:01:41 +0000
Files and hashes: 1: 3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl (hash: wzI0/jgG5rNQFtPO5grzzSdmkP3nIdu9iyGz+vZ8cIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:d6:22:51:8f:ec:92:8a:5c:89:c8:8d:1e:69:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1f529076f451ed9e0b222cce35dbc97cbdc51b
Validity
Not Before: Mar 28 04:01:41 2026 GMT
Not After : Mar 29 04:01:41 2026 GMT
Subject: CN=997dfe314c4ce252ec6d58faebecada6096ef664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:93:e8:bd:3c:d1:7f:1d:3b:bf:08:c7:6a:
aa:b3:41:dc:15:fb:04:2a:fb:da:24:70:41:f3:97:
22:59:9d:7c:41:92:f0:4a:28:07:ec:28:6d:27:03:
9c:40:15:dc:75:19:fa:5a:0e:7f:82:d6:33:41:8d:
46:bf:87:4a:51:89:b0:ff:a9:0f:a7:32:d4:ce:c4:
9b:c4:57:f6:aa:ac:e0:e5:13:df:6b:fc:4e:e9:d0:
9b:2f:b4:d3:b2:0a:31:2f:a5:29:97:12:02:d6:50:
d2:4e:60:5b:75:a9:1c:fd:bd:71:9f:39:2d:a7:82:
15:6e:e6:23:09:c3:52:e7:8e:6a:b6:4e:da:ce:30:
39:7b:3f:8b:93:12:f0:dc:12:25:16:e5:d3:49:cf:
88:4a:d4:aa:e6:20:41:8d:59:dd:5c:f0:aa:8d:b1:
b8:cc:be:d7:7a:00:4b:62:88:df:3b:4d:b1:d7:50:
e2:16:62:59:d2:1f:40:75:b5:4f:38:50:69:64:1d:
2e:3c:21:93:db:16:c0:75:a5:67:e2:d6:01:79:c2:
ee:eb:e5:06:d4:8e:7d:53:35:9a:bf:1f:f8:1a:31:
01:05:c0:68:5d:56:44:3e:d6:7d:4d:5a:bb:ba:a7:
91:3f:4d:72:9d:f5:d7:df:f3:0a:45:29:55:1f:d6:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:FE:31:4C:4C:E2:52:EC:6D:58:FA:EB:EC:AD:A6:09:6E:F6:64
X509v3 Authority Key Identifier:
keyid:DC:1F:52:90:76:F4:51:ED:9E:0B:22:2C:CE:35:DB:C9:7C:BD:C5:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:90:94:c3:8a:56:15:aa:52:36:ee:32:78:8d:96:2d:4e:50:
58:11:42:1b:72:ef:5c:a3:b1:37:2a:85:6d:e4:51:98:56:94:
27:32:8a:e8:05:59:33:59:17:92:ea:5e:2e:bf:43:c8:a3:59:
95:ea:13:a1:72:7f:3b:53:8e:fd:6e:31:35:ac:21:07:31:b8:
54:3b:f3:76:12:78:ff:45:8f:a4:7a:4d:c3:f5:b4:2d:71:8a:
c5:25:ff:e8:96:d9:d8:9b:23:7b:18:a2:45:35:66:cf:fa:f8:
0c:14:dd:fe:a8:a7:ad:bb:ec:6b:17:df:92:89:5d:1f:4d:d1:
2b:ab:04:0c:dd:2d:36:d0:d6:4b:00:66:e2:54:e0:1d:1b:05:
fa:f5:2c:4e:45:1c:3d:d1:4c:5c:b5:65:35:6b:5f:93:6d:f0:
48:0c:95:f2:2e:07:5e:9b:b7:52:cf:1d:7a:e0:21:e4:4a:f2:
ca:81:80:25:3e:cd:78:ad:76:c5:0d:ac:d5:4f:58:99:ea:ee:
60:83:0d:22:16:79:6c:57:b4:71:2a:1c:9a:03:7a:e8:50:e6:
8a:53:ac:7b:e8:ef:9e:cc:21:8c:87:7e:3f:22:06:21:1a:a4:
f0:6f:a8:ad:55:e8:60:a2:af:a3:a2:a3:e5:0c:cc:f1:d7:d5:
7a:df:02:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ymtYiUY/skopciciNHmk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMWY1MjkwNzZmNDUxZWQ5ZTBiMjIyY2NlMzVkYmM5N2Ni
ZGM1MWIwHhcNMjYwMzI4MDQwMTQxWhcNMjYwMzI5MDQwMTQxWjAzMTEwLwYDVQQD
Eyg5OTdkZmUzMTRjNGNlMjUyZWM2ZDU4ZmFlYmVjYWRhNjA5NmVmNjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjiT6L080X8dO78Ix2qqs0HcFfsE
KvvaJHBB85ciWZ18QZLwSigH7ChtJwOcQBXcdRn6Wg5/gtYzQY1Gv4dKUYmw/6kP
pzLUzsSbxFf2qqzg5RPfa/xO6dCbL7TTsgoxL6UplxIC1lDSTmBbdakc/b1xnzkt
p4IVbuYjCcNS545qtk7azjA5ez+LkxLw3BIlFuXTSc+IStSq5iBBjVndXPCqjbG4
zL7XegBLYojfO02x11DiFmJZ0h9AdbVPOFBpZB0uPCGT2xbAdaVn4tYBecLu6+UG
1I59UzWavx/4GjEBBcBoXVZEPtZ9TVq7uqeRP01ynfXX3/MKRSlVH9a+9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJl9/jFMTOJS7G1Y+uvsraYJbvZkMB8GA1UdIwQY
MBaAFNwfUpB29FHtngsiLM4128l8vcUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0I5U2tIYjBVZTJlQ3lJc3pqWGJ5WHk5eFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iMmNmMTctOWQyNy00NzdhLTg1N2It
MmJlYmJmMTBkZDJiLzEvM0I5U2tIYjBVZTJlQ3lJc3pqWGJ5WHk5eFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iMmNmMTctOWQyNy00NzdhLTg1N2ItMmJlYmJmMTBkZDJi
LzEvM0I5U2tIYjBVZTJlQ3lJc3pqWGJ5WHk5eFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJCUw4pW
FapSNu4yeI2WLU5QWBFCG3LvXKOxNyqFbeRRmFaUJzKK6AVZM1kXkupeLr9DyKNZ
leoToXJ/O1OO/W4xNawhBzG4VDvzdhJ4/0WPpHpNw/W0LXGKxSX/6JbZ2Jsjexii
RTVmz/r4DBTd/qinrbvsaxffkoldH03RK6sEDN0tNtDWSwBm4lTgHRsF+vUsTkUc
PdFMXLVlNWtfk23wSAyV8i4HXpu3Us8deuAh5EryyoGAJT7NeK12xQ2s1U9Ymeru
YIMNIhZ5bFe0cSocmgN66FDmilOse+jvnswhjId+PyIGIRqk8G+orVXoYKKvo6Kj
5QzM8dfVet8Chg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:59 2026 by rpki-client