Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier: qIzsTla7n7Bv9uDUoHH5da+xUpwcHKNjnaUpwc++soc=
Subject key identifier: 2D:F9:A2:A4:0F:64:58:0A:9B:4D:F0:76:40:36:3E:D2:A4:6E:DE:1B
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 019E1CB4F42F4F3360792193E61E303F7D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number: 1787
Signing time: Tue 12 May 2026 15:01:21 +0000
Manifest this update: Tue 12 May 2026 15:01:21 +0000
Manifest next update: Wed 13 May 2026 15:01:21 +0000
Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: VLUlRexy4eTp22MXW5TyKtyEUfZReFKhf/INEerz3FQ=)
2: aZCXcydPk-76cgt6cZKKvGpKk5A.roa (hash: gewDOlWApHrr+Yml3oxtgkzNGGb0SqqLcvSrquabjoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:f4:2f:4f:33:60:79:21:93:e6:1e:30:3f:7d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: May 12 15:01:21 2026 GMT
Not After : May 13 15:01:21 2026 GMT
Subject: CN=2df9a2a40f64580a9b4df07640363ed2a46ede1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5f:28:ef:b2:2b:5c:5d:fd:bf:27:23:33:75:
6b:a4:7c:09:b4:b9:0a:06:2e:e4:6e:5a:c6:48:4d:
3e:3b:28:e0:d6:08:b3:10:c5:4d:8a:d7:c2:fb:4c:
34:c3:e4:d9:a8:6f:57:1e:2f:f5:1e:f4:2c:0d:8d:
03:7a:bb:ff:d0:3b:8b:14:90:a1:81:95:0d:bc:4b:
39:0f:44:65:e0:59:3a:e5:b9:99:3f:43:69:7b:0a:
f9:da:69:bb:7f:31:61:b8:cd:f0:09:47:8a:db:99:
27:5d:c9:53:63:5a:81:b0:61:f0:ca:3b:6b:f4:bd:
8f:6d:ae:04:d7:93:ff:d7:c0:12:44:a6:f6:7f:a3:
df:3e:01:75:36:e1:ec:27:f8:6e:e1:09:79:93:4d:
b9:12:95:0a:21:a8:3d:6e:9c:4f:b3:bf:4b:51:6f:
7c:c4:cc:50:77:90:36:26:1d:e8:bc:f9:36:9c:33:
c7:d8:99:68:e5:98:5d:63:16:97:61:1a:9e:76:33:
d5:3c:9e:9b:6c:91:72:8c:f1:14:fe:11:b6:10:7d:
78:c5:84:fb:9e:53:b0:40:41:6e:7e:dc:7e:88:ea:
e4:37:a4:09:b7:c0:d6:16:f0:a9:36:fd:8d:7e:4f:
e2:eb:4d:84:f9:9e:d3:35:6f:09:26:64:2e:c1:64:
b1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F9:A2:A4:0F:64:58:0A:9B:4D:F0:76:40:36:3E:D2:A4:6E:DE:1B
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:30:35:82:bb:86:2a:a5:95:c1:81:af:98:c6:60:90:59:65:
3b:46:86:fd:dc:00:25:67:fe:a3:37:33:3e:1f:c5:14:62:e0:
a6:a3:33:3d:a2:69:ae:da:58:73:6d:59:35:af:ba:d3:96:6b:
b9:79:e4:4b:35:7c:a2:eb:2b:8f:4f:3b:18:22:5d:78:8b:f1:
41:eb:92:46:6e:89:44:a2:6c:03:a4:97:3a:09:15:c1:a2:42:
93:df:8b:a6:3b:b4:c8:fc:4c:7a:f3:3b:a3:5b:0f:fd:2f:a4:
da:bd:51:59:03:f0:b2:60:53:32:cf:67:e6:51:01:92:1a:96:
6b:31:ad:6f:1d:f6:48:a2:8a:0a:2d:2c:67:b4:6f:f1:21:ca:
d7:d5:94:4c:31:20:16:d6:17:88:db:99:ba:9e:a8:85:b4:4c:
84:7a:df:d1:4d:0f:82:22:fe:58:e3:50:cb:1b:37:d3:a8:c0:
f6:e0:06:1a:e0:b6:1f:8b:f8:76:d2:83:bb:92:f1:ef:9a:e1:
a4:ab:89:4d:17:1b:b5:f9:8e:92:f3:27:32:4a:db:eb:83:53:
63:81:e1:f8:09:7e:8e:cf:87:bd:d8:73:b0:0a:f8:18:4a:29:
73:4d:52:f4:30:55:1b:32:53:8b:23:0d:3f:f7:5a:38:ac:37:
b8:cd:24:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctPQvTzNgeSGT5h4wP30zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMjljMzcwNDYwYmVjNzUzMDEwZmM3ZTY4MzY1YzU3NzBi
ZjQ1ZTQwHhcNMjYwNTEyMTUwMTIxWhcNMjYwNTEzMTUwMTIxWjAzMTEwLwYDVQQD
EygyZGY5YTJhNDBmNjQ1ODBhOWI0ZGYwNzY0MDM2M2VkMmE0NmVkZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA118o77IrXF39vycjM3VrpHwJtLkK
Bi7kblrGSE0+Oyjg1gizEMVNitfC+0w0w+TZqG9XHi/1HvQsDY0Derv/0DuLFJCh
gZUNvEs5D0Rl4Fk65bmZP0Npewr52mm7fzFhuM3wCUeK25knXclTY1qBsGHwyjtr
9L2Pba4E15P/18ASRKb2f6PfPgF1NuHsJ/hu4Ql5k025EpUKIag9bpxPs79LUW98
xMxQd5A2Jh3ovPk2nDPH2Jlo5ZhdYxaXYRqedjPVPJ6bbJFyjPEU/hG2EH14xYT7
nlOwQEFuftx+iOrkN6QJt8DWFvCpNv2Nfk/i602E+Z7TNW8JJmQuwWSxHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC35oqQPZFgKm03wdkA2PtKkbt4bMB8GA1UdIwQY
MBaAFN0pw3BGC+x1MBD8fmg2XFdwv0XkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iMzAxOWMtNjZjZi00Zjk4LWE4NTYt
MTM0YzQ3Yjk0OTEzLzEvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iMzAxOWMtNjZjZi00Zjk4LWE4NTYtMTM0YzQ3Yjk0OTEz
LzEvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTA1gruG
KqWVwYGvmMZgkFllO0aG/dwAJWf+ozczPh/FFGLgpqMzPaJprtpYc21ZNa+605Zr
uXnkSzV8ousrj087GCJdeIvxQeuSRm6JRKJsA6SXOgkVwaJCk9+Lpju0yPxMevM7
o1sP/S+k2r1RWQPwsmBTMs9n5lEBkhqWazGtbx32SKKKCi0sZ7Rv8SHK19WUTDEg
FtYXiNuZup6ohbRMhHrf0U0PgiL+WONQyxs306jA9uAGGuC2H4v4dtKDu5Lx75rh
pKuJTRcbtfmOkvMnMkrb64NTY4Hh+Al+js+HvdhzsAr4GEopc01S9DBVGzJTiyMN
P/daOKw3uM0khQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:25:28 2026 by rpki-client