Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File: 3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier: MIj8CBglxZacd8EMPEPCU4qSIFe/nZj71+2HaVmQobg=
Subject key identifier: CD:5E:17:40:2E:F3:1A:18:12:1A:96:90:01:F1:64:F5:6E:36:05:97
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 019CADC7A4D65EBA2036A14A2F7367A50BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number: 0F83
Signing time: Mon 02 Mar 2026 09:01:08 +0000
Manifest this update: Mon 02 Mar 2026 09:01:08 +0000
Manifest next update: Tue 03 Mar 2026 09:01:08 +0000
Files and hashes: 1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: g3qvLZNZMHe0GKYqUYg8kzqTT3hbh+QE9NbeL4+DASY=)
2: Bt0xMHy61A7htWo3HwQx0xRHYvM.roa (hash: NFwVkcrwORwq5qtsr2xFeijRYhFUAx9h0rzS5lfRuF4=)
3: td-NlOb4bFlwywB-P4mKtEXzRI0.roa (hash: 24q0c0plzrduo92mY1zavTYuQ8C/sxm4E7FFcgXlk2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:a4:d6:5e:ba:20:36:a1:4a:2f:73:67:a5:0b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Mar 2 09:01:08 2026 GMT
Not After : Mar 3 09:01:08 2026 GMT
Subject: CN=cd5e17402ef31a18121a969001f164f56e360597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:ac:47:0a:14:9f:39:82:db:bd:11:26:e8:
88:2c:ab:d1:30:cd:75:5f:02:02:e5:44:27:93:26:
ec:75:a8:c9:5d:d1:34:d5:54:50:6c:af:99:30:cd:
21:85:9d:50:90:e1:ae:25:c0:6d:9d:4b:21:4f:e2:
27:bc:6b:19:3e:7d:52:f1:9e:14:dd:20:d4:be:58:
49:7d:23:88:89:19:5c:ef:2e:9c:1a:6c:c4:9b:33:
b0:ee:76:a6:21:d6:f7:9b:df:52:8c:cf:35:f3:21:
51:d2:17:bd:9c:b1:fb:3d:aa:42:f6:cc:68:64:20:
0e:45:0d:43:65:02:10:3b:23:52:a4:68:1d:82:2b:
9a:80:37:f6:02:a7:0f:e1:dc:69:39:78:77:cc:79:
57:7f:ce:c3:ef:cd:b5:38:61:c2:c0:33:03:85:6f:
b9:9f:7a:a9:ae:df:61:44:9b:2f:02:7b:39:a5:0d:
cb:27:dc:65:b6:a7:3a:1d:08:33:52:47:c9:d5:fb:
0b:0d:8e:2d:ed:69:2a:7c:99:22:1c:bc:a4:44:e7:
a1:34:73:7c:13:79:da:4c:64:c0:33:9e:35:33:7d:
07:ce:5a:60:91:12:da:54:6b:44:d5:cf:b2:d2:e9:
de:3d:62:cc:34:d3:f1:9b:f2:5d:05:9b:7a:73:9b:
c9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5E:17:40:2E:F3:1A:18:12:1A:96:90:01:F1:64:F5:6E:36:05:97
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:91:48:38:79:5e:c7:7b:ed:2b:51:08:99:0b:02:c3:4c:17:
0a:3c:33:79:c6:ca:fd:19:71:47:a8:39:2f:c8:2e:14:89:69:
a7:f3:df:3b:3b:2c:01:e2:a3:00:48:ca:05:10:09:e4:dd:ad:
44:ec:24:71:a8:f1:e3:ab:9a:e4:02:3c:db:72:a1:9e:00:7e:
97:ce:2f:99:f6:90:a0:06:6c:09:b9:56:9e:f3:f6:ed:42:90:
f5:b1:a5:9e:9f:6e:23:cc:a7:ec:1a:64:7f:9e:64:e9:01:ed:
1a:5b:6c:9f:b2:af:35:59:e5:be:d0:c1:6b:42:8a:73:33:9d:
98:7f:bd:44:f5:89:e9:97:1f:6e:05:98:f7:2a:89:cb:ec:7c:
be:8e:b1:cd:ae:02:3f:17:47:31:0b:db:59:7e:96:af:da:9a:
81:9f:5c:e3:de:0e:05:4b:a8:cf:d3:12:6b:f3:bd:1b:50:08:
40:e0:8d:c4:8e:c2:b2:1f:d9:09:54:5a:d1:1d:34:62:2a:07:
64:31:40:85:61:fb:1d:99:c7:9c:7e:b6:1d:49:c1:6e:39:ab:
04:a4:43:7f:5e:d7:78:5a:23:61:8b:16:80:25:a8:c9:f8:37:
ab:46:e4:ac:cb:84:a8:72:a7:c0:25:ab:6c:74:1a:72:57:18:
01:be:10:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx6TWXrogNqFKL3NnpQvkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWEyNzQ0NDU4MjZlM2Q3OTVjM2VkMThjMjc3MDBlZWFj
MWNhNjIwHhcNMjYwMzAyMDkwMTA4WhcNMjYwMzAzMDkwMTA4WjAzMTEwLwYDVQQD
EyhjZDVlMTc0MDJlZjMxYTE4MTIxYTk2OTAwMWYxNjRmNTZlMzYwNTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWOsRwoUnzmC270RJuiILKvRMM11
XwIC5UQnkybsdajJXdE01VRQbK+ZMM0hhZ1QkOGuJcBtnUshT+InvGsZPn1S8Z4U
3SDUvlhJfSOIiRlc7y6cGmzEmzOw7namIdb3m99SjM818yFR0he9nLH7PapC9sxo
ZCAORQ1DZQIQOyNSpGgdgiuagDf2AqcP4dxpOXh3zHlXf87D7821OGHCwDMDhW+5
n3qprt9hRJsvAns5pQ3LJ9xltqc6HQgzUkfJ1fsLDY4t7WkqfJkiHLykROehNHN8
E3naTGTAM541M30HzlpgkRLaVGtE1c+y0unePWLMNNPxm/JdBZt6c5vJBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1eF0Au8xoYEhqWkAHxZPVuNgWXMB8GA1UdIwQY
MBaAFNyqJ0RFgm49eVw+0YwncA7qwcpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tvblJFV0NiajE1WEQ3UmpDZHdEdXJCeW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xODgyMTgtOWVlNy00MGNjLThkMTIt
OWE4MjQzZTg0ZTU0LzEvM0tvblJFV0NiajE1WEQ3UmpDZHdEdXJCeW1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xODgyMTgtOWVlNy00MGNjLThkMTItOWE4MjQzZTg0ZTU0
LzEvM0tvblJFV0NiajE1WEQ3UmpDZHdEdXJCeW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJFIOHle
x3vtK1EImQsCw0wXCjwzecbK/RlxR6g5L8guFIlpp/PfOzssAeKjAEjKBRAJ5N2t
ROwkcajx46ua5AI823KhngB+l84vmfaQoAZsCblWnvP27UKQ9bGlnp9uI8yn7Bpk
f55k6QHtGltsn7KvNVnlvtDBa0KKczOdmH+9RPWJ6ZcfbgWY9yqJy+x8vo6xza4C
PxdHMQvbWX6Wr9qagZ9c494OBUuoz9MSa/O9G1AIQOCNxI7Csh/ZCVRa0R00YioH
ZDFAhWH7HZnHnH62HUnBbjmrBKRDf17XeFojYYsWgCWoyfg3q0bkrMuEqHKnwCWr
bHQaclcYAb4QlA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:14 2026 by rpki-client