Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json)
Hash identifier: 3v9/EJ10qG14f6rviOfKrd8yi1eT59RmkYEH0kVORGs=
Subject key identifier: A3:6D:9A:22:24:E9:74:B3:4D:37:90:79:7C:79:00:86:CE:39:78:A9
Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Certificate serial: 019CAC4773CA6DC78F17E3CAD49EEA2FFA6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
Manifest number: 09F3
Signing time: Mon 02 Mar 2026 02:01:29 +0000
Manifest this update: Mon 02 Mar 2026 02:01:29 +0000
Manifest next update: Tue 03 Mar 2026 02:01:29 +0000
Files and hashes: 1: HBiP4paC0MlxmT9TqUdXSCFpVek.roa (hash: 5/zIGY+6xQLGjEfA2psYBflaTdU36mi9/74Ob0mM/kg=)
2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: WFMS3xs3XKwebAdxHev110Gh0iCMugrYB1/EqlDrM9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:73:ca:6d:c7:8f:17:e3:ca:d4:9e:ea:2f:fa:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Validity
Not Before: Mar 2 02:01:29 2026 GMT
Not After : Mar 3 02:01:29 2026 GMT
Subject: CN=a36d9a2224e974b34d3790797c790086ce3978a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:19:91:65:96:0a:99:93:21:77:80:d6:c9:
88:9d:26:9b:cf:c0:bb:f0:15:cd:aa:5c:ad:a6:d2:
a6:ea:3a:a9:d3:3d:33:60:2e:97:59:7f:c2:c5:77:
3b:fe:20:df:a3:43:49:d7:41:65:20:56:14:6b:47:
ea:42:14:b6:89:aa:41:cd:8f:55:e6:e1:0a:ca:94:
a5:7b:0c:d1:95:0b:d5:b4:e1:22:d3:29:f3:fa:03:
ff:47:da:af:0a:f3:25:78:bb:3c:81:a5:65:ea:a5:
3e:60:97:f9:d3:4f:24:ae:66:cd:e5:6e:23:54:4e:
c4:98:d8:f2:c4:75:a5:95:ae:ba:c4:1f:c6:23:1b:
4f:11:a4:5d:70:4a:b9:79:af:c8:d3:ff:43:87:c6:
b8:93:f0:f6:3e:69:83:68:fd:24:cc:53:51:7b:02:
31:b9:d7:02:e2:6b:04:c6:60:da:bb:e1:bb:03:54:
7d:41:77:92:94:43:f8:ef:8c:82:5e:cf:da:8e:00:
f9:05:2b:1d:5c:4f:4f:6e:1c:50:fe:53:79:f3:96:
23:6d:74:c4:8e:85:e0:f4:9a:a5:68:4a:56:95:2f:
63:80:9d:80:70:81:2d:81:a5:1b:79:b4:cb:01:9a:
1f:b8:25:d6:ef:49:f5:7c:8a:34:e8:1a:4c:81:ba:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6D:9A:22:24:E9:74:B3:4D:37:90:79:7C:79:00:86:CE:39:78:A9
X509v3 Authority Key Identifier:
keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8f:31:77:d3:4a:00:be:a7:41:9d:88:4c:e0:8c:22:81:6b:
59:86:0b:96:fa:42:98:7d:aa:c6:59:5d:82:66:7a:89:25:95:
c8:d5:27:6a:7b:2f:01:27:96:fc:73:83:53:fb:7e:8a:b2:71:
2c:60:6c:be:4b:65:bb:fc:13:d2:e1:65:6f:2b:d9:81:c0:11:
58:cc:d2:27:48:f5:15:ce:fc:ff:a9:6a:70:f4:c3:c8:e2:f5:
3e:d2:25:4f:ff:5e:d9:59:f5:ed:d3:c3:6b:1e:33:04:55:c6:
5d:81:01:6d:37:f0:af:b6:25:16:68:76:67:a2:02:48:8b:74:
8d:71:ee:66:3a:da:bb:df:04:0b:94:0c:fa:96:cc:01:00:8a:
d3:85:6e:35:4b:f0:eb:b9:af:dd:cf:7b:72:66:2a:aa:c1:ba:
3f:47:4f:01:4b:c6:a2:9c:50:a1:2b:fb:d3:1d:69:cd:c1:80:
70:5b:81:6c:02:6d:b1:40:3f:b3:d3:3a:d5:d5:b1:85:12:59:
92:5c:6d:5f:f3:71:86:f4:65:e6:e1:65:5f:4c:90:f9:06:35:
d2:af:29:78:56:00:4c:c7:ed:2c:a9:9b:ff:ea:17:9b:41:c3:
d5:6f:72:2a:7c:d9:50:94:41:b5:c0:6d:fd:c4:15:90:37:b7:
6d:83:89:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR3PKbcePF+PK1J7qL/pqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YWQyYWJiNzNkZjk2YmNiMWIxZDFiOGQ5OWQzNWY1Yjlm
ZDk4MjgwHhcNMjYwMzAyMDIwMTI5WhcNMjYwMzAzMDIwMTI5WjAzMTEwLwYDVQQD
EyhhMzZkOWEyMjI0ZTk3NGIzNGQzNzkwNzk3Yzc5MDA4NmNlMzk3OGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyoZkWWWCpmTIXeA1smInSabz8C7
8BXNqlytptKm6jqp0z0zYC6XWX/CxXc7/iDfo0NJ10FlIFYUa0fqQhS2iapBzY9V
5uEKypSlewzRlQvVtOEi0ynz+gP/R9qvCvMleLs8gaVl6qU+YJf5008krmbN5W4j
VE7EmNjyxHWlla66xB/GIxtPEaRdcEq5ea/I0/9Dh8a4k/D2PmmDaP0kzFNRewIx
udcC4msExmDau+G7A1R9QXeSlEP474yCXs/ajgD5BSsdXE9PbhxQ/lN585YjbXTE
joXg9JqlaEpWlS9jgJ2AcIEtgaUbebTLAZofuCXW70n1fIo06BpMgboX9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNtmiIk6XSzTTeQeXx5AIbOOXipMB8GA1UdIwQY
MBaAFHatKrtz35a8sbHRuNmdNfW5/ZgoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1Zjgt
MzcwYjNhODdiZjk4LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1ZjgtMzcwYjNhODdiZjk4
LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoo8xd9NK
AL6nQZ2ITOCMIoFrWYYLlvpCmH2qxlldgmZ6iSWVyNUnansvASeW/HODU/t+irJx
LGBsvktlu/wT0uFlbyvZgcARWMzSJ0j1Fc78/6lqcPTDyOL1PtIlT/9e2Vn17dPD
ax4zBFXGXYEBbTfwr7YlFmh2Z6ICSIt0jXHuZjrau98EC5QM+pbMAQCK04VuNUvw
67mv3c97cmYqqsG6P0dPAUvGopxQoSv70x1pzcGAcFuBbAJtsUA/s9M61dWxhRJZ
klxtX/NxhvRl5uFlX0yQ+QY10q8peFYATMftLKmb/+oXm0HD1W9yKnzZUJRBtcBt
/cQVkDe3bYOJTg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:38 2026 by rpki-client