Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: MPqZWrRls47mZxYNHxKgFSZzE9tQls1bY1TtAf5+9S8=
Subject key identifier: 02:6D:75:80:9A:20:8C:99:81:5F:58:10:57:D1:0E:AA:12:5E:8A:97
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 019CAA8FDF0A4078C3D347B108105BD2FC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 1855
Signing time: Sun 01 Mar 2026 18:01:21 +0000
Manifest this update: Sun 01 Mar 2026 18:01:21 +0000
Manifest next update: Mon 02 Mar 2026 18:01:21 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: Nh2PAQasU58gU6JRDJNy7uPId/xoqcEyft1CMPe3Shc=)
2: 9zaCEl1SgGOc-A7zIR9SmhOUbCA.roa (hash: eFtzjl4+/9tlA7bC6sKrJsHMLsAxLeLlfmditC5aZTs=)
3: _QaXkGOzguH_3SYFNe1d3y7B2Tw.roa (hash: KztSdz5ODte8K6guWxzrXZlYDG1F2rVO/Vqml3J+Q0o=)
4: fsnKswSMyeM4OK2o8J_ZzwwYiiI.roa (hash: tWk+nFmUcDykdNhoUyVPw1UFkRx/3AJQMBQrLxH1g5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:df:0a:40:78:c3:d3:47:b1:08:10:5b:d2:fc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Mar 1 18:01:21 2026 GMT
Not After : Mar 2 18:01:21 2026 GMT
Subject: CN=026d75809a208c99815f581057d10eaa125e8a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ef:15:c2:0a:9b:96:e5:93:1b:f4:47:c5:d2:
f3:4a:f1:72:5d:ca:1c:4b:a9:aa:f0:28:41:25:15:
fc:58:a8:25:16:d5:c7:a0:1a:22:aa:3d:bd:60:75:
d8:15:60:56:53:a8:0d:02:4c:ff:bf:11:f6:0e:18:
5a:54:bf:f3:ee:d7:0e:9a:dc:fd:0c:b7:7e:7c:fb:
40:cc:c4:b9:a2:21:87:75:2c:b8:a5:bc:59:e1:41:
75:0f:8e:b2:95:3e:25:41:bb:1f:36:92:f1:d8:50:
e2:b5:33:c6:41:17:66:a3:33:45:18:b6:0a:91:ff:
d6:00:7a:f8:95:5e:7f:fe:1f:6e:85:f3:c2:83:87:
cf:f3:d7:cb:26:33:cf:ac:7f:5c:c1:d6:a1:a1:d0:
f1:06:de:8f:84:aa:d9:08:eb:fb:c7:07:10:46:b1:
d4:91:6b:d2:93:ec:21:39:86:ad:a2:85:d3:c0:f2:
8a:c9:bc:6d:ce:38:7c:c6:e5:c2:d2:8a:10:5a:22:
7e:99:02:e1:13:66:14:3c:31:f1:f5:b2:97:ef:5f:
1f:9b:8b:7b:71:54:30:ab:24:e9:14:a7:5a:a0:84:
c6:9d:50:60:90:0d:8e:57:68:e1:99:99:97:ec:fb:
e3:be:4a:e6:e2:21:11:33:b9:53:61:16:b3:c6:18:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6D:75:80:9A:20:8C:99:81:5F:58:10:57:D1:0E:AA:12:5E:8A:97
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a1:28:42:77:db:b1:43:09:7c:9c:9c:ee:7f:ee:d0:8a:3c:
0a:8b:f0:54:a2:40:2d:e4:38:5e:dc:12:8e:43:13:44:1b:0b:
b7:1e:70:dc:6e:16:07:76:46:93:4f:2f:11:7a:12:14:94:6c:
8d:cf:45:13:7a:ad:03:ee:78:bb:ef:c0:62:0d:6f:2e:21:76:
b1:12:9e:de:fa:94:fe:6e:9d:c6:06:f5:1a:b1:fd:44:02:29:
64:94:36:b1:f1:00:f1:c0:57:35:e1:86:56:34:c9:54:48:3e:
9a:7c:65:9c:ae:96:b2:33:6f:5d:30:9c:98:30:35:2a:dd:01:
a7:18:cd:79:89:45:13:c9:aa:1b:78:93:19:bf:39:dd:0a:00:
16:d6:d4:07:5b:08:34:9c:cd:4e:7a:8d:6c:fe:4c:d6:77:06:
ec:b7:73:54:d6:cb:70:d3:ba:10:e4:3a:bf:12:0d:3e:95:66:
c5:c6:c8:2b:27:fd:f4:6c:da:ff:e6:ee:b3:ac:cf:81:36:b9:
d9:46:cc:16:d4:dd:47:20:e6:06:bc:92:f0:7a:bc:f3:55:3b:
cf:39:9e:56:19:54:de:6b:e5:6b:ff:39:11:35:ee:cf:5a:c1:
e6:9e:91:ce:2b:48:21:32:5b:25:3a:be:de:4f:85:37:11:11:
95:af:18:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj98KQHjD00exCBBb0vyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjY2IyZDVmYjI1Mzg1MmYxODIzYzY1NDM0ZThmMjc2ZDA0
ZTRlMGMwHhcNMjYwMzAxMTgwMTIxWhcNMjYwMzAyMTgwMTIxWjAzMTEwLwYDVQQD
EygwMjZkNzU4MDlhMjA4Yzk5ODE1ZjU4MTA1N2QxMGVhYTEyNWU4YTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+8VwgqbluWTG/RHxdLzSvFyXcoc
S6mq8ChBJRX8WKglFtXHoBoiqj29YHXYFWBWU6gNAkz/vxH2DhhaVL/z7tcOmtz9
DLd+fPtAzMS5oiGHdSy4pbxZ4UF1D46ylT4lQbsfNpLx2FDitTPGQRdmozNFGLYK
kf/WAHr4lV5//h9uhfPCg4fP89fLJjPPrH9cwdahodDxBt6PhKrZCOv7xwcQRrHU
kWvSk+whOYatooXTwPKKybxtzjh8xuXC0ooQWiJ+mQLhE2YUPDHx9bKX718fm4t7
cVQwqyTpFKdaoITGnVBgkA2OV2jhmZmX7Pvjvkrm4iERM7lTYRazxhh+OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJtdYCaIIyZgV9YEFfRDqoSXoqXMB8GA1UdIwQY
MBaAFNzLLV+yU4UvGCPGVDTo8nbQTk4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83YzFjMjktY2EwMi00OTBiLWFhODQt
ZTFhOGE2ZjFkNTlhLzEvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83YzFjMjktY2EwMi00OTBiLWFhODQtZTFhOGE2ZjFkNTlh
LzEvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKEoQnfb
sUMJfJyc7n/u0Io8CovwVKJALeQ4XtwSjkMTRBsLtx5w3G4WB3ZGk08vEXoSFJRs
jc9FE3qtA+54u+/AYg1vLiF2sRKe3vqU/m6dxgb1GrH9RAIpZJQ2sfEA8cBXNeGG
VjTJVEg+mnxlnK6WsjNvXTCcmDA1Kt0BpxjNeYlFE8mqG3iTGb853QoAFtbUB1sI
NJzNTnqNbP5M1ncG7LdzVNbLcNO6EOQ6vxINPpVmxcbIKyf99Gza/+bus6zPgTa5
2UbMFtTdRyDmBryS8Hq881U7zzmeVhlU3mvla/85ETXuz1rB5p6RzitIITJbJTq+
3k+FNxERla8Yxg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:57 2026 by rpki-client