Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
File: w3Q8id807HcKZZc_EAUUa_sysPI.mft (raw, json)
Hash identifier: 8xPTYjPLiehFI/hmM+gBQLvsMlTMLjEXCkZnD85GR+I=
Subject key identifier: CF:DA:1F:E1:37:69:8D:14:34:20:C8:7F:84:BA:74:ED:FA:B7:4B:06
Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
Certificate issuer: /CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Certificate serial: 019D333F034518B5F5D6FF03A40A4A82A297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
Manifest number: 0F6E
Signing time: Sat 28 Mar 2026 07:01:00 +0000
Manifest this update: Sat 28 Mar 2026 07:01:00 +0000
Manifest next update: Sun 29 Mar 2026 07:01:00 +0000
Files and hashes: 1: w3Q8id807HcKZZc_EAUUa_sysPI.crl (hash: soA0up0Cv06nLMaGBJR4CUeMOignKJu0s7xVCnK97Ac=)
2: wUc3S_D16XdipknJCTPDOkYeAwY.roa (hash: 0ohTvuZNcLXWt6aaBFxx4qj0TlX4E91Ut4sGjwIPaz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:03:45:18:b5:f5:d6:ff:03:a4:0a:4a:82:a2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Validity
Not Before: Mar 28 07:01:00 2026 GMT
Not After : Mar 29 07:01:00 2026 GMT
Subject: CN=cfda1fe137698d143420c87f84ba74edfab74b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:3f:1e:4c:58:11:22:cd:78:7f:ab:dd:16:ab:
44:8b:41:0f:79:a2:6f:e8:a4:5a:44:f4:3b:12:9d:
13:a4:34:55:3e:f4:c4:0c:4b:11:91:9a:60:7f:9e:
55:95:54:fb:59:39:81:8d:e8:e0:fe:76:62:d9:cc:
88:7b:5d:36:29:6d:5b:d6:a0:62:e5:0d:d5:a5:8a:
60:1e:24:de:4c:38:66:62:74:93:67:21:47:f7:aa:
d0:3f:7c:08:bc:15:63:37:06:cd:af:f4:0b:32:7d:
60:a8:23:c9:cb:01:d8:24:c9:a1:b2:31:99:18:6a:
a5:12:25:ba:ca:77:47:05:23:22:2d:99:34:40:60:
12:7d:f2:50:3f:8a:ec:da:47:7b:38:e2:42:a0:b8:
68:fd:01:c2:ed:8f:92:75:1d:b6:cd:7a:e9:c3:ff:
bd:f3:01:3e:4f:7f:da:82:46:32:02:05:9a:41:b0:
ab:33:e2:73:9f:a0:41:4b:5c:6e:47:88:d5:d9:b6:
81:49:63:ef:5a:c9:6f:bc:28:f8:31:87:47:5a:bb:
11:88:d6:9d:f2:6a:83:96:e8:50:11:21:cd:4d:1e:
49:ee:4a:dd:de:99:7e:71:4e:da:b6:fa:10:16:a8:
e5:38:be:ad:a5:68:18:62:32:28:8a:e5:c6:b0:1c:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DA:1F:E1:37:69:8D:14:34:20:C8:7F:84:BA:74:ED:FA:B7:4B:06
X509v3 Authority Key Identifier:
keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8c:e6:3d:38:99:63:d7:8a:f3:a3:ff:82:b1:f2:bd:95:b1:
25:75:32:3f:f1:3d:ec:89:2b:08:11:dc:50:6e:6e:e1:0c:37:
ab:e7:50:cf:1d:aa:16:65:1d:b5:84:ce:2a:5a:f2:ab:66:f5:
10:03:e7:be:75:0d:42:4e:5c:d2:0b:d5:90:e2:2f:c5:cd:05:
8c:1f:bc:c9:4e:f1:86:16:2c:7b:61:c1:08:07:3b:3a:ca:01:
52:d2:47:b3:02:ae:a2:88:22:5a:a7:c5:61:42:d7:50:a7:6a:
b3:4b:1e:90:1f:83:49:0b:7c:1a:2a:d2:ec:16:ff:43:fd:9d:
eb:44:bd:cc:1b:01:cf:0b:e7:d0:1b:27:0c:45:4a:77:cf:ff:
4b:62:63:56:dc:fe:b5:75:14:08:ce:07:53:78:57:d7:c9:af:
32:6e:95:53:59:00:09:4c:eb:33:90:23:90:12:e6:5e:74:d4:
b9:a2:ae:7f:dc:83:b1:39:f1:44:a2:fa:ef:08:5a:0e:0b:7d:
e2:f6:c3:21:9f:64:ea:ef:4e:19:c0:5b:a5:5e:38:6b:8c:02:
8d:2c:42:fb:a0:b3:59:b8:12:ab:6d:f0:93:71:d7:10:0d:f9:
63:99:f9:10:09:a6:5e:f9:94:b3:1b:e2:70:5d:1d:3f:3c:1f:
e2:54:9a:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPwNFGLX11v8DpApKgqKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzQzYzg5ZGYzNGVjNzcwYTY1OTczZjEwMDUxNDZiZmIz
MmIwZjIwHhcNMjYwMzI4MDcwMTAwWhcNMjYwMzI5MDcwMTAwWjAzMTEwLwYDVQQD
EyhjZmRhMWZlMTM3Njk4ZDE0MzQyMGM4N2Y4NGJhNzRlZGZhYjc0YjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+z8eTFgRIs14f6vdFqtEi0EPeaJv
6KRaRPQ7Ep0TpDRVPvTEDEsRkZpgf55VlVT7WTmBjejg/nZi2cyIe102KW1b1qBi
5Q3VpYpgHiTeTDhmYnSTZyFH96rQP3wIvBVjNwbNr/QLMn1gqCPJywHYJMmhsjGZ
GGqlEiW6yndHBSMiLZk0QGASffJQP4rs2kd7OOJCoLho/QHC7Y+SdR22zXrpw/+9
8wE+T3/agkYyAgWaQbCrM+Jzn6BBS1xuR4jV2baBSWPvWslvvCj4MYdHWrsRiNad
8mqDluhQESHNTR5J7krd3pl+cU7atvoQFqjlOL6tpWgYYjIoiuXGsByT6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/aH+E3aY0UNCDIf4S6dO36t0sGMB8GA1UdIwQY
MBaAFMN0PInfNOx3CmWXPxAFFGv7MrDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mOTlkYjQtOTg3ZS00M2IxLWEwY2Et
MjBmMjdlODcwZDAxLzEvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mOTlkYjQtOTg3ZS00M2IxLWEwY2EtMjBmMjdlODcwZDAx
LzEvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiozmPTiZ
Y9eK86P/grHyvZWxJXUyP/E97IkrCBHcUG5u4Qw3q+dQzx2qFmUdtYTOKlryq2b1
EAPnvnUNQk5c0gvVkOIvxc0FjB+8yU7xhhYse2HBCAc7OsoBUtJHswKuoogiWqfF
YULXUKdqs0sekB+DSQt8GirS7Bb/Q/2d60S9zBsBzwvn0BsnDEVKd8//S2JjVtz+
tXUUCM4HU3hX18mvMm6VU1kACUzrM5AjkBLmXnTUuaKuf9yDsTnxRKL67whaDgt9
4vbDIZ9k6u9OGcBbpV44a4wCjSxC+6CzWbgSq23wk3HXEA35Y5n5EAmmXvmUsxvi
cF0dPzwf4lSa1g==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:52 2026 by rpki-client