Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: 6A5WuCV0rWur5PE6CyFoT9Y5XECxlqrVl2T5QwXLJ/c=
Subject key identifier: C8:E4:DE:88:9E:F6:6A:DE:A7:87:EB:F1:0D:AD:BD:6B:C5:B9:D8:A5
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 019D284DDC3A67DA5CB232CCD7CDDF4A3639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 1694
Signing time: Thu 26 Mar 2026 04:01:24 +0000
Manifest this update: Thu 26 Mar 2026 04:01:24 +0000
Manifest next update: Fri 27 Mar 2026 04:01:24 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: 2WW5Pa6Z4vnj16MTDZZ6iV7LvuDnlKMktwXjGgOgUes=)
2: itoTic7G_-G7jco2XW4Z1NEcbCw.roa (hash: +uznw2maAhBkp9yoIBUiVjV+pSA2CpeiVnSVCi83O3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:dc:3a:67:da:5c:b2:32:cc:d7:cd:df:4a:36:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Mar 26 04:01:24 2026 GMT
Not After : Mar 27 04:01:24 2026 GMT
Subject: CN=c8e4de889ef66adea787ebf10dadbd6bc5b9d8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:01:6c:7b:da:bf:77:2e:71:11:bd:84:84:
18:df:b0:d0:ef:7b:71:ed:d1:ea:5a:71:98:6c:54:
75:13:82:42:ea:ca:c2:a5:5e:1c:fb:74:06:7e:31:
4a:69:ff:87:c9:19:5d:3b:06:e2:8f:50:d9:79:82:
f3:93:8a:c3:83:bf:ce:c6:17:c7:04:83:0e:90:35:
6b:a9:43:ba:6e:12:23:4c:9f:69:8e:80:80:49:d3:
c7:e4:75:30:0c:4c:bd:01:7f:39:3b:55:8b:b4:ff:
cb:0a:2a:6c:05:74:fd:0f:ee:d6:6a:b2:32:74:06:
d3:97:ca:b0:4c:24:60:89:74:42:3f:be:82:48:ec:
60:34:31:a0:8c:42:01:5d:1b:83:ed:52:77:ff:8d:
2c:9f:32:62:ad:33:6b:20:5b:33:44:72:7f:38:df:
44:57:38:1b:27:17:c0:c8:5c:1d:71:a9:67:9a:3a:
ce:48:5e:85:91:ba:b3:49:85:d0:fc:87:4a:43:e4:
65:a6:1a:fd:fa:41:c8:5a:10:b1:00:d7:fe:2a:e2:
d0:f0:e5:30:19:01:87:0f:68:5d:d2:fa:f0:a1:30:
36:8c:c1:7c:97:72:76:38:ab:76:72:34:1a:2d:c9:
87:4b:55:9c:6e:19:0b:55:80:a8:bc:19:08:7d:28:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E4:DE:88:9E:F6:6A:DE:A7:87:EB:F1:0D:AD:BD:6B:C5:B9:D8:A5
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ac:aa:8f:97:aa:d2:df:c7:04:40:53:ad:41:dd:26:12:29:
2e:84:1c:a3:57:e4:1c:18:71:6d:19:8e:30:83:a2:f6:33:be:
08:11:1b:14:2b:8a:fa:4f:b8:1b:11:50:a2:9d:d8:7f:c4:d1:
23:a2:dd:1b:9d:f4:42:37:1e:59:38:31:0b:f8:e3:ba:e8:e6:
ee:76:03:37:cf:87:03:9f:05:ce:e3:3b:88:3d:ae:91:e7:04:
15:18:7a:8f:90:3d:4b:d2:ce:dc:3f:8e:ba:8d:87:72:a1:c2:
77:f7:7c:8b:68:a4:91:ee:bc:16:0b:41:02:34:7a:8c:c9:8e:
fd:da:bc:bb:63:99:6c:6b:68:e4:a3:ee:75:5f:a6:d8:cb:d7:
2f:ec:bf:d0:c7:d8:7a:23:59:0e:22:1d:f4:a0:61:71:4d:0e:
01:8a:01:58:ce:f1:f2:55:72:dd:a7:78:57:20:08:ca:ea:05:
48:47:ff:43:8f:f1:f5:c2:37:d7:29:ed:bb:39:15:35:97:72:
58:35:9c:8e:8c:e3:b4:10:a1:53:a3:dd:e5:94:71:e1:ab:95:
5c:63:3a:71:4a:18:ae:85:51:56:fb:d8:73:b4:75:e2:62:ef:
9f:72:62:6a:44:03:38:5f:6c:94:4f:3f:81:d7:5f:0b:14:7b:
86:05:12:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTdw6Z9pcsjLM183fSjY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWYxOWFkZmE2OTQ1NTg5YmMyZDEwMDE1NGU1YTU4YzQ0
OThhMTQwHhcNMjYwMzI2MDQwMTI0WhcNMjYwMzI3MDQwMTI0WjAzMTEwLwYDVQQD
EyhjOGU0ZGU4ODllZjY2YWRlYTc4N2ViZjEwZGFkYmQ2YmM1YjlkOGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr68BbHvav3cucRG9hIQY37DQ73tx
7dHqWnGYbFR1E4JC6srCpV4c+3QGfjFKaf+HyRldOwbij1DZeYLzk4rDg7/OxhfH
BIMOkDVrqUO6bhIjTJ9pjoCASdPH5HUwDEy9AX85O1WLtP/LCipsBXT9D+7WarIy
dAbTl8qwTCRgiXRCP76CSOxgNDGgjEIBXRuD7VJ3/40snzJirTNrIFszRHJ/ON9E
VzgbJxfAyFwdcalnmjrOSF6FkbqzSYXQ/IdKQ+Rlphr9+kHIWhCxANf+KuLQ8OUw
GQGHD2hd0vrwoTA2jMF8l3J2OKt2cjQaLcmHS1WcbhkLVYCovBkIfShE9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjk3oie9mrep4fr8Q2tvWvFudilMB8GA1UdIwQY
MBaAFNzvGa36aUVYm8LRABVOWljESYoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQt
MjFkZWFkMGM1ZTljLzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQtMjFkZWFkMGM1ZTlj
LzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6yqj5eq
0t/HBEBTrUHdJhIpLoQco1fkHBhxbRmOMIOi9jO+CBEbFCuK+k+4GxFQop3Yf8TR
I6LdG530QjceWTgxC/jjuujm7nYDN8+HA58FzuM7iD2ukecEFRh6j5A9S9LO3D+O
uo2HcqHCd/d8i2ikke68FgtBAjR6jMmO/dq8u2OZbGto5KPudV+m2MvXL+y/0MfY
eiNZDiId9KBhcU0OAYoBWM7x8lVy3ad4VyAIyuoFSEf/Q4/x9cI31yntuzkVNZdy
WDWcjozjtBChU6Pd5ZRx4auVXGM6cUoYroVRVvvYc7R14mLvn3JiakQDOF9slE8/
gddfCxR7hgUSqA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:59 2026 by rpki-client