Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: tGs4Hxt+kwVcCRYWZugomb8vuoTA5M57TX7kOAHWUW0=
Subject key identifier: C7:DA:DF:6F:12:AF:DC:E8:F5:BF:7A:BC:93:89:65:81:32:D6:76:77
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 019CAB34430FB00ED86115C3665186E08AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:54 +0000
Manifest this update: Sun 01 Mar 2026 21:00:54 +0000
Manifest next update: Mon 02 Mar 2026 21:00:54 +0000
Files and hashes: 1: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: 6n+pngzEXwBoMVXy+09OM2rA3h4tsHhhREzgY4pJ0K4=)
2: 7DFhLxfNsNdBG7misMM2Gd6pq98.roa (hash: 91BxkeL//UY4lGamLg4LH3uIYXXl6dNvyu0iOuqwroo=)
3: kOLGFIQ68N0t89GXfLW_l-tuaZs.roa (hash: JEbR7GHzj1yo7N6pB32D4eZu3GhxlqvfkdXGhcPXMmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:43:0f:b0:0e:d8:61:15:c3:66:51:86:e0:8a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Mar 1 21:00:54 2026 GMT
Not After : Mar 2 21:00:54 2026 GMT
Subject: CN=c7dadf6f12afdce8f5bf7abc9389658132d67677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:ef:41:19:ee:a2:a0:84:41:95:95:3f:93:
eb:fc:57:92:18:28:7a:e4:73:ae:6e:67:91:ba:f1:
eb:cd:b3:9d:64:82:e4:c0:90:f2:75:0b:b0:aa:e6:
e9:2d:9b:9f:18:48:a8:af:f9:15:04:01:27:6b:72:
d0:2a:64:1e:ff:ca:ca:a0:55:41:b9:fb:fc:9b:d4:
cc:84:99:9c:40:fa:e1:62:77:36:79:f9:00:6f:fa:
b5:e4:5a:a5:5d:b3:67:d5:8b:23:78:29:71:70:40:
61:48:18:95:f8:fa:8a:c9:0b:1b:0e:c9:6b:75:83:
e3:a5:f4:c2:b4:a0:1e:24:5f:a9:36:e0:2f:a1:d2:
75:0a:64:01:c7:18:75:e9:55:5f:43:9c:f8:a5:e8:
b3:08:d6:97:de:1e:2e:92:82:62:f0:7a:63:45:24:
c4:8d:2a:3c:5e:3b:a5:9b:98:88:c2:5e:f3:57:5b:
66:2a:c0:5c:86:30:fa:00:2e:62:07:cb:50:24:f8:
b7:a5:0f:33:45:d8:d0:78:31:5c:70:94:04:58:ca:
d0:68:cb:b2:c9:8b:d3:c1:90:d5:05:04:ac:35:99:
f3:1a:c6:00:3c:6f:bb:56:41:4d:0e:e8:fc:7a:c6:
0b:88:c2:11:a5:9d:71:73:dc:95:50:89:1a:37:db:
a7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:DF:6F:12:AF:DC:E8:F5:BF:7A:BC:93:89:65:81:32:D6:76:77
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d7:58:4f:98:5b:91:9e:87:b9:75:8d:a4:af:86:da:34:4f:
b4:ee:30:05:8e:1f:24:aa:5e:bc:ce:47:eb:9e:76:69:60:86:
66:cc:f4:0b:84:ad:51:64:b1:90:96:dd:b5:58:f4:7b:04:5d:
1b:3e:02:f1:7a:5e:8b:ea:bb:2f:5a:1c:4c:b2:04:ea:e9:a5:
9b:7f:b5:22:b7:d4:cd:0a:1d:4d:ec:3e:1a:3f:31:75:8f:31:
df:ce:da:7b:40:ad:45:26:19:4f:a4:75:39:b7:3d:63:1c:61:
9d:af:6c:f4:40:f0:fd:b5:fb:74:34:b7:11:bc:c4:5d:a8:e9:
5a:56:88:13:4d:15:fb:d5:86:68:2b:0e:db:4b:e6:d8:de:ac:
a2:b8:61:92:b3:ca:d6:d0:7c:d0:87:fd:4b:09:5c:d2:6e:f4:
ca:59:c2:6e:9b:41:61:5e:0b:7d:d2:00:fc:5c:2c:dc:52:d2:
e3:70:19:6b:89:2c:9b:89:f8:e6:23:6d:29:24:d7:be:71:9f:
04:32:e5:06:14:1b:b8:cd:71:75:c9:34:bd:dc:48:81:b1:98:
d9:01:f2:05:e9:f9:20:37:bf:d6:c2:6b:d7:ba:93:eb:7f:76:
fd:e5:f2:cd:6b:cb:7d:1d:9c:1c:36:eb:1c:01:3f:3a:79:39:
55:89:71:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNEMPsA7YYRXDZlGG4Iq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjUxNjY5MmM2MzgyYjNmODNkYWU5OTFmZDg5ZGQxYjBj
ZWY1NzkwHhcNMjYwMzAxMjEwMDU0WhcNMjYwMzAyMjEwMDU0WjAzMTEwLwYDVQQD
EyhjN2RhZGY2ZjEyYWZkY2U4ZjViZjdhYmM5Mzg5NjU4MTMyZDY3Njc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZPvQRnuoqCEQZWVP5Pr/FeSGCh6
5HOubmeRuvHrzbOdZILkwJDydQuwqubpLZufGEior/kVBAEna3LQKmQe/8rKoFVB
ufv8m9TMhJmcQPrhYnc2efkAb/q15FqlXbNn1YsjeClxcEBhSBiV+PqKyQsbDslr
dYPjpfTCtKAeJF+pNuAvodJ1CmQBxxh16VVfQ5z4peizCNaX3h4ukoJi8HpjRSTE
jSo8Xjulm5iIwl7zV1tmKsBchjD6AC5iB8tQJPi3pQ8zRdjQeDFccJQEWMrQaMuy
yYvTwZDVBQSsNZnzGsYAPG+7VkFNDuj8esYLiMIRpZ1xc9yVUIkaN9unAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfa328Sr9zo9b96vJOJZYEy1nZ3MB8GA1UdIwQY
MBaAFNxlFmksY4Kz+D2umR/YndGwzvV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jZDlmZDMtYTNlZS00ZWM1LThjNTQt
MmYzODNlODVlYmMwLzEvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9jZDlmZDMtYTNlZS00ZWM1LThjNTQtMmYzODNlODVlYmMw
LzEvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtdYT5hb
kZ6HuXWNpK+G2jRPtO4wBY4fJKpevM5H6552aWCGZsz0C4StUWSxkJbdtVj0ewRd
Gz4C8Xpei+q7L1ocTLIE6umlm3+1IrfUzQodTew+Gj8xdY8x387ae0CtRSYZT6R1
Obc9Yxxhna9s9EDw/bX7dDS3EbzEXajpWlaIE00V+9WGaCsO20vm2N6sorhhkrPK
1tB80If9Swlc0m70ylnCbptBYV4LfdIA/Fws3FLS43AZa4ksm4n45iNtKSTXvnGf
BDLlBhQbuM1xdck0vdxIgbGY2QHyBen5IDe/1sJr17qT6392/eXyzWvLfR2cHDbr
HAE/Onk5VYlxCg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:36 2026 by rpki-client