Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
File: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft (raw, json)
Hash identifier: nZnvgi+Ab80mcSP6/Hd2STiwHIgB4Z1p82Zklgalsnw=
Subject key identifier: 09:8D:3E:34:78:A6:09:7B:E1:EB:03:78:C6:11:29:33:E7:47:E6:CF
Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
Certificate issuer: /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Certificate serial: 019D9886D01D5AA0041DB3FFE07A615DAA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
Manifest number: 0FF5
Signing time: Thu 16 Apr 2026 23:01:05 +0000
Manifest this update: Thu 16 Apr 2026 23:01:05 +0000
Manifest next update: Fri 17 Apr 2026 23:01:05 +0000
Files and hashes: 1: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl (hash: qLKd4UoFb4kU71awT1POPVaouP8m7HaP2DDwVNiBni4=)
2: FB3UW6DVZXj3o7icgkVTEzxp9Ag.roa (hash: 6pH0Xhz90BXtIh2RhS40jMejU5H68bceW0YDHg58IYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:d0:1d:5a:a0:04:1d:b3:ff:e0:7a:61:5d:aa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Validity
Not Before: Apr 16 23:01:05 2026 GMT
Not After : Apr 17 23:01:05 2026 GMT
Subject: CN=098d3e3478a6097be1eb0378c6112933e747e6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:ac:ee:7d:7d:3a:2c:92:d2:1f:e1:01:4e:
44:48:60:de:75:ee:b6:2a:6f:08:bb:b2:86:55:cd:
49:0d:fa:25:17:a2:b1:f5:7d:38:99:df:a6:5b:31:
a8:49:de:34:c8:d0:b4:75:06:4b:b1:15:4e:85:2a:
e5:e2:93:24:b3:37:fa:79:d9:b6:75:32:a9:5c:8b:
2c:13:34:0f:3e:e5:77:d7:ee:d1:f6:50:14:28:57:
f6:62:4f:e4:b2:dd:5b:19:a7:5b:c5:10:b8:ff:9f:
46:88:c0:23:62:56:67:30:2e:53:60:7d:ab:de:1e:
36:59:28:43:43:fa:c6:a8:d4:09:79:af:4c:c0:a3:
18:36:eb:4e:0b:4b:4a:3b:9e:61:ce:f5:40:a9:48:
3f:68:a8:75:75:48:d9:33:1e:15:c2:27:d2:eb:9a:
9d:9a:6d:03:3d:ff:73:57:8a:04:37:2d:6d:3f:08:
45:60:75:34:0c:ef:e9:21:69:a5:de:8c:bf:57:69:
63:7b:03:e4:a0:e7:06:1a:f5:0d:fc:7f:95:16:e4:
b6:08:87:21:0d:20:57:5c:50:36:bc:08:95:70:72:
14:cc:a6:99:c1:1e:f9:b6:6a:bc:68:fe:15:11:88:
33:f2:0c:66:80:c3:d3:25:36:47:af:de:83:06:60:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8D:3E:34:78:A6:09:7B:E1:EB:03:78:C6:11:29:33:E7:47:E6:CF
X509v3 Authority Key Identifier:
keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ca:6b:c8:f0:7c:92:1f:9c:2c:e8:43:be:12:4d:14:9d:73:
68:20:24:3b:62:f4:d3:7f:9c:0a:a7:49:a8:47:d7:fb:90:c6:
b5:44:4c:60:8c:15:12:31:7b:ea:06:96:29:33:a3:70:38:25:
ec:93:78:d4:24:92:24:24:a1:1b:f6:6c:43:19:ae:91:0e:4d:
98:8d:b5:5f:a2:28:48:eb:38:59:f4:5a:54:e7:e6:29:b3:41:
6a:87:ce:9b:85:fc:1c:4e:4b:27:dd:b3:12:ac:9e:9f:02:cd:
d7:57:42:45:43:7f:75:79:d0:23:37:fd:a5:54:19:32:cb:83:
27:19:10:2e:e0:ef:42:3f:68:12:ee:66:cd:1d:bd:26:a0:e6:
78:6d:ee:14:53:b7:ed:7d:87:8c:dd:c3:58:8b:ae:56:7a:68:
b9:26:bb:b2:e9:23:03:a3:2e:29:c3:a6:03:96:c5:61:80:f2:
9b:ce:cd:80:21:6f:af:38:7b:2a:37:f4:8b:77:42:01:2f:e3:
24:18:63:11:65:64:b6:a0:fb:8c:29:64:50:a4:f0:ed:0b:b5:
9b:70:08:b5:13:1e:4f:1d:b0:f7:dc:f7:5f:e3:29:e6:e1:17:
70:99:d9:46:15:87:f3:8a:5b:4a:c3:1f:55:2c:82:6c:7c:c3:
b3:77:b9:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhtAdWqAEHbP/4HphXappMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTJmZWU5NTQyZDYzYTY4ZTQ5YjJjOGVkNzgzOGY4YTAz
NDZiMDgwHhcNMjYwNDE2MjMwMTA1WhcNMjYwNDE3MjMwMTA1WjAzMTEwLwYDVQQD
EygwOThkM2UzNDc4YTYwOTdiZTFlYjAzNzhjNjExMjkzM2U3NDdlNmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM+s7n19OiyS0h/hAU5ESGDede62
Km8Iu7KGVc1JDfolF6Kx9X04md+mWzGoSd40yNC0dQZLsRVOhSrl4pMkszf6edm2
dTKpXIssEzQPPuV31+7R9lAUKFf2Yk/kst1bGadbxRC4/59GiMAjYlZnMC5TYH2r
3h42WShDQ/rGqNQJea9MwKMYNutOC0tKO55hzvVAqUg/aKh1dUjZMx4VwifS65qd
mm0DPf9zV4oENy1tPwhFYHU0DO/pIWml3oy/V2ljewPkoOcGGvUN/H+VFuS2CIch
DSBXXFA2vAiVcHIUzKaZwR75tmq8aP4VEYgz8gxmgMPTJTZHr96DBmC8QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmNPjR4pgl74esDeMYRKTPnR+bPMB8GA1UdIwQY
MBaAFN5S/ulULWOmjkmyyO14OPigNGsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmUzYjMtYWI1NS00YWM5LWJiMjgt
YTRmMzMzNjU0Y2M5LzEvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NmUzYjMtYWI1NS00YWM5LWJiMjgtYTRmMzMzNjU0Y2M5
LzEvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcpryPB8
kh+cLOhDvhJNFJ1zaCAkO2L003+cCqdJqEfX+5DGtURMYIwVEjF76gaWKTOjcDgl
7JN41CSSJCShG/ZsQxmukQ5NmI21X6IoSOs4WfRaVOfmKbNBaofOm4X8HE5LJ92z
EqyenwLN11dCRUN/dXnQIzf9pVQZMsuDJxkQLuDvQj9oEu5mzR29JqDmeG3uFFO3
7X2HjN3DWIuuVnpouSa7sukjA6MuKcOmA5bFYYDym87NgCFvrzh7Kjf0i3dCAS/j
JBhjEWVktqD7jClkUKTw7Qu1m3AItRMeTx2w99z3X+Mp5uEXcJnZRhWH84pbSsMf
VSyCbHzDs3e5Bw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:39 2026 by rpki-client