Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
File: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft (raw, json)
Hash identifier: POneiXgvJTkjq0jafUcUjlKNDPxLdHRJ+CoUvDvc3Fs=
Subject key identifier: 64:72:AA:10:1F:70:F2:6D:70:A4:8E:D7:13:25:54:70:0B:5E:E2:98
Authority key identifier: DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
Certificate issuer: /CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Certificate serial: 019CADFE92E3056276EB616202AB00030F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
Manifest number: 07B4
Signing time: Mon 02 Mar 2026 10:01:07 +0000
Manifest this update: Mon 02 Mar 2026 10:01:07 +0000
Manifest next update: Tue 03 Mar 2026 10:01:07 +0000
Files and hashes: 1: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl (hash: aU1WaEw3pNlbakw14yZz6gNYawpcCCkvoVhd06QDvsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:92:e3:05:62:76:eb:61:62:02:ab:00:03:0f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Validity
Not Before: Mar 2 10:01:07 2026 GMT
Not After : Mar 3 10:01:07 2026 GMT
Subject: CN=6472aa101f70f26d70a48ed7132554700b5ee298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:43:33:97:b1:b5:99:d9:38:04:7d:b9:2a:
6e:80:67:dd:6e:d2:bc:ad:59:f0:c5:4c:69:28:7f:
01:4a:5b:4d:f1:70:da:e8:00:01:95:ad:95:c9:75:
cf:8d:e1:f0:76:f9:73:0d:ac:e6:4e:c0:20:49:30:
e1:80:f4:82:b0:1b:d9:56:14:d3:3c:a0:80:59:c9:
ea:d3:65:6f:88:7c:32:01:d1:60:3b:9b:6c:be:16:
9e:e2:af:fd:d8:ad:e9:ae:d7:d3:79:41:02:cd:d4:
ef:ba:dc:f6:86:08:a4:d5:c1:9b:b1:ea:2c:c2:32:
f0:a6:42:c4:7b:12:f4:1f:1e:4c:98:4f:71:b3:ae:
c8:f3:2b:bb:2a:4d:4e:46:60:29:4e:00:a8:4d:7b:
b5:c9:8b:21:b5:30:8f:ae:17:2c:bd:88:d7:74:03:
44:c3:58:28:43:18:dc:11:a8:f5:c5:7f:2a:69:83:
d0:4e:74:d0:db:38:05:dd:b0:b4:ba:54:63:0f:81:
57:a7:d7:2f:20:8c:eb:4c:84:ba:37:d8:56:bc:50:
70:bd:22:a4:b4:f8:d3:da:d1:92:ea:96:15:97:4c:
7b:23:4e:cc:00:0f:74:9d:c2:16:07:1d:63:d0:72:
38:27:45:dd:fc:7b:39:d4:bb:24:44:3c:91:63:9d:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:72:AA:10:1F:70:F2:6D:70:A4:8E:D7:13:25:54:70:0B:5E:E2:98
X509v3 Authority Key Identifier:
keyid:DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:91:0d:af:b7:13:f2:21:30:bc:3b:3e:bd:60:a3:14:61:04:
92:01:10:d3:96:e6:5d:e2:ed:b4:a6:15:67:bc:30:27:eb:1d:
52:a0:a3:65:01:c0:15:e2:57:da:e0:12:75:5b:9e:3b:ec:11:
40:31:31:f3:b5:90:5b:c8:f0:06:0c:ea:2f:fe:d9:3f:07:71:
33:6d:c7:a4:f2:7e:a7:5f:fa:21:1e:ac:90:80:ad:05:7e:f8:
6a:16:69:8d:f8:64:17:63:52:21:72:02:7b:19:71:17:d2:3f:
0e:c3:e7:a0:e3:b2:c1:c8:7e:ba:3a:71:fb:08:9b:8d:d3:e0:
d0:ef:4a:c9:42:3d:7d:98:ed:cc:0e:49:a3:af:b1:4e:dd:fc:
f3:55:74:b7:af:c1:30:19:c4:75:16:73:3d:d5:c8:b0:4b:f6:
06:5d:02:7b:b6:2e:af:f7:cc:27:c1:09:ce:bb:9f:94:84:7d:
ac:a3:a7:02:0f:0b:30:54:10:85:9c:a9:53:a4:f5:4b:89:4a:
05:e9:3b:0a:72:d5:57:83:14:ab:6f:e8:ad:f8:fc:32:3c:ab:
6a:37:70:6d:29:27:74:d3:bc:f8:f6:f8:8a:dc:26:6f:69:04:
32:ec:3c:7e:2d:16:78:ce:31:a8:75:26:51:46:3f:e7:c4:de:
9c:94:70:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/pLjBWJ262FiAqsAAw9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMzk5ZTQ5NDE4OWY2OTFhNWVkNjRmM2JlM2E2YTNiNTAy
MjUwOTEwHhcNMjYwMzAyMTAwMTA3WhcNMjYwMzAzMTAwMTA3WjAzMTEwLwYDVQQD
Eyg2NDcyYWExMDFmNzBmMjZkNzBhNDhlZDcxMzI1NTQ3MDBiNWVlMjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2RDM5extZnZOAR9uSpugGfdbtK8
rVnwxUxpKH8BSltN8XDa6AABla2VyXXPjeHwdvlzDazmTsAgSTDhgPSCsBvZVhTT
PKCAWcnq02VviHwyAdFgO5tsvhae4q/92K3prtfTeUECzdTvutz2hgik1cGbseos
wjLwpkLEexL0Hx5MmE9xs67I8yu7Kk1ORmApTgCoTXu1yYshtTCPrhcsvYjXdANE
w1goQxjcEaj1xX8qaYPQTnTQ2zgF3bC0ulRjD4FXp9cvIIzrTIS6N9hWvFBwvSKk
tPjT2tGS6pYVl0x7I07MAA90ncIWBx1j0HI4J0Xd/Hs51LskRDyRY53BmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRyqhAfcPJtcKSO1xMlVHALXuKYMB8GA1UdIwQY
MBaAFN05nklBifaRpe1k8746ajtQIlCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1RtZVNVR0o5cEdsN1dUenZqcHFPMUFpVUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yN2JhNjgtZjE3OC00OTkxLTk2YTct
NDQyYTAzYjdmMDg0LzEvM1RtZVNVR0o5cEdsN1dUenZqcHFPMUFpVUpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yN2JhNjgtZjE3OC00OTkxLTk2YTctNDQyYTAzYjdmMDg0
LzEvM1RtZVNVR0o5cEdsN1dUenZqcHFPMUFpVUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5ENr7cT
8iEwvDs+vWCjFGEEkgEQ05bmXeLttKYVZ7wwJ+sdUqCjZQHAFeJX2uASdVueO+wR
QDEx87WQW8jwBgzqL/7ZPwdxM23HpPJ+p1/6IR6skICtBX74ahZpjfhkF2NSIXIC
exlxF9I/DsPnoOOywch+ujpx+wibjdPg0O9KyUI9fZjtzA5Jo6+xTt3881V0t6/B
MBnEdRZzPdXIsEv2Bl0Ce7Yur/fMJ8EJzruflIR9rKOnAg8LMFQQhZypU6T1S4lK
Bek7CnLVV4MUq2/orfj8MjyrajdwbSkndNO8+Pb4itwmb2kEMuw8fi0WeM4xqHUm
UUY/58TenJRwyw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:58:05 2026 by rpki-client