Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: WVq4tvLKnISPyXqzykiR65QdpQ1unA8jJyyO+R+bBHo=
Subject key identifier: 72:17:80:08:12:43:14:3E:60:0D:1E:66:C6:C9:2A:C5:67:90:C7:31
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 019CAC10591EA31290C96F8FECD1EDC9CA8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 143E
Signing time: Mon 02 Mar 2026 01:01:18 +0000
Manifest this update: Mon 02 Mar 2026 01:01:18 +0000
Manifest next update: Tue 03 Mar 2026 01:01:18 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: +Wl+CXzMEbRCItxUZYzMGfQhZNCwDwGsVcLMHirT/oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:59:1e:a3:12:90:c9:6f:8f:ec:d1:ed:c9:ca:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Mar 2 01:01:18 2026 GMT
Not After : Mar 3 01:01:18 2026 GMT
Subject: CN=721780081243143e600d1e66c6c92ac56790c731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:d0:23:9d:71:3e:05:e8:06:4c:19:4e:3b:
10:23:6e:7e:a0:76:67:38:6a:ca:f7:6c:f3:50:2e:
03:f8:4b:3a:68:f7:44:19:d6:6d:53:07:54:0a:45:
a9:14:84:91:76:1a:ab:33:95:e4:b7:4b:9f:80:62:
13:a4:99:fa:49:ee:0f:c1:9f:34:4c:b9:1b:67:09:
37:77:19:f2:24:fd:ce:ab:a9:a1:8c:ad:1d:63:06:
b6:2f:ae:54:ec:63:07:77:71:f9:c5:2b:98:bd:b5:
40:82:6f:42:48:77:06:cf:a3:8b:26:90:7a:f6:71:
4f:5a:d2:45:e6:cc:7e:bd:93:90:62:8d:66:6d:6d:
5c:b5:46:63:c2:38:ab:75:58:c2:2c:a6:22:98:b3:
90:8b:01:d1:83:66:29:67:5f:00:2c:9a:2a:4e:98:
a7:b2:8b:7a:a7:95:9a:6d:d7:be:4a:2c:43:66:69:
13:21:6b:9e:38:61:68:26:ad:f7:74:91:7d:46:1c:
fe:d5:38:a9:71:bb:55:0b:3f:a3:7f:0d:5a:7e:0c:
cf:f0:98:73:d9:20:ad:f9:5c:5b:eb:89:7b:29:67:
9e:fa:08:13:56:ef:a9:9a:73:a6:90:2f:a4:0a:f8:
2d:1a:da:98:a6:bc:8c:93:11:43:ea:f5:58:ef:58:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:17:80:08:12:43:14:3E:60:0D:1E:66:C6:C9:2A:C5:67:90:C7:31
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ac:35:22:0e:89:19:b4:81:e2:03:ee:3b:0c:b9:9c:b6:89:
f7:87:bc:66:bf:5f:44:97:1b:cd:9d:7f:55:b7:d0:1c:1b:91:
3c:43:35:08:79:8b:9e:4a:59:11:9d:c3:8b:2b:75:df:34:58:
94:ef:12:6d:d9:77:60:b4:d8:c1:e7:ef:17:6d:d7:c2:7f:ec:
77:71:88:6c:e3:b0:78:71:7f:4a:c0:22:16:5b:7d:0e:2a:ae:
7b:a1:5b:33:15:61:86:44:46:c0:46:cf:b4:0c:b0:80:f7:4b:
22:36:d7:12:98:45:00:fb:ca:c5:e3:11:98:21:66:8f:d8:ec:
d1:7e:1e:36:16:ce:07:4f:9e:de:81:a6:d9:5e:37:39:99:b0:
7e:62:0b:43:e6:db:d8:38:68:2e:7c:19:12:51:ac:06:6b:2b:
df:29:67:ac:91:f7:e9:e1:d7:ca:84:b7:a8:5b:f3:eb:a7:23:
97:d2:eb:0b:59:96:d5:bb:21:0c:dd:2b:af:18:c0:0a:9d:f8:
aa:cd:0b:53:24:ef:dc:05:69:44:e7:d3:45:56:9d:a2:f1:b3:
8f:1e:57:fc:e1:0b:c8:d5:99:e5:a6:1d:24:8a:87:f5:b4:c5:
62:8c:14:d5:b0:74:b0:0a:87:6b:d5:e8:8f:27:32:b9:23:92:
e4:a2:6f:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEFkeoxKQyW+P7NHtycqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYzAxNjc0MDY0NDFlYTE2YzQ3NDA2ZDA1MjJiNWM2NjMw
YWJjYjMwHhcNMjYwMzAyMDEwMTE4WhcNMjYwMzAzMDEwMTE4WjAzMTEwLwYDVQQD
Eyg3MjE3ODAwODEyNDMxNDNlNjAwZDFlNjZjNmM5MmFjNTY3OTBjNzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntjQI51xPgXoBkwZTjsQI25+oHZn
OGrK92zzUC4D+Es6aPdEGdZtUwdUCkWpFISRdhqrM5Xkt0ufgGITpJn6Se4PwZ80
TLkbZwk3dxnyJP3Oq6mhjK0dYwa2L65U7GMHd3H5xSuYvbVAgm9CSHcGz6OLJpB6
9nFPWtJF5sx+vZOQYo1mbW1ctUZjwjirdVjCLKYimLOQiwHRg2YpZ18ALJoqTpin
sot6p5Wabde+SixDZmkTIWueOGFoJq33dJF9Rhz+1TipcbtVCz+jfw1afgzP8Jhz
2SCt+Vxb64l7KWee+ggTVu+pmnOmkC+kCvgtGtqYpryMkxFD6vVY71hB7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIXgAgSQxQ+YA0eZsbJKsVnkMcxMB8GA1UdIwQY
MBaAFN3AFnQGRB6hbEdAbQUitcZjCryzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNjA3YjctMTg3Yi00NTQ1LWI2MTQt
M2Q5YWVkYWMyYjMzLzEvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jNjA3YjctMTg3Yi00NTQ1LWI2MTQtM2Q5YWVkYWMyYjMz
LzEvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaw1Ig6J
GbSB4gPuOwy5nLaJ94e8Zr9fRJcbzZ1/VbfQHBuRPEM1CHmLnkpZEZ3Diyt13zRY
lO8Sbdl3YLTYwefvF23Xwn/sd3GIbOOweHF/SsAiFlt9Dique6FbMxVhhkRGwEbP
tAywgPdLIjbXEphFAPvKxeMRmCFmj9js0X4eNhbOB0+e3oGm2V43OZmwfmILQ+bb
2DhoLnwZElGsBmsr3ylnrJH36eHXyoS3qFvz66cjl9LrC1mW1bshDN0rrxjACp34
qs0LUyTv3AVpROfTRVadovGzjx5X/OELyNWZ5aYdJIqH9bTFYowU1bB0sAqHa9Xo
jycyuSOS5KJvNA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:46 2026 by rpki-client