Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: fvJkqi6HkQ5hT7j2Ms7QzEx+rCUiP1qFAGzGVmnKktU=
Subject key identifier: 33:F5:AC:9F:70:BB:22:7F:AE:3C:63:DB:D6:87:42:1E:C8:DE:DC:73
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 019CABA208F258BCF0CEDFCD37D54971C920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:00:48 +0000
Manifest this update: Sun 01 Mar 2026 23:00:48 +0000
Manifest next update: Mon 02 Mar 2026 23:00:48 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: /P7xDjuvG6W6fVvG/iDHpBUeRrB8nU4vpFvs5CvLDRQ=)
2: 9unExc-u2klcvykG9A7nqtJ0jEo.roa (hash: fK53zNSLF8dtN9JmssE7wAYgASom2B/ybWqpgUFg/kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:08:f2:58:bc:f0:ce:df:cd:37:d5:49:71:c9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Mar 1 23:00:48 2026 GMT
Not After : Mar 2 23:00:48 2026 GMT
Subject: CN=33f5ac9f70bb227fae3c63dbd687421ec8dedc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:3e:2e:45:a5:04:ca:1f:4d:45:0c:83:5d:
6b:53:a8:92:9e:72:d7:3b:0f:45:aa:d0:a8:55:80:
03:f5:89:e4:02:cd:e8:d3:73:21:b6:ce:7d:35:b1:
de:40:e8:8a:7e:a5:dc:4d:03:b4:d9:a8:ef:a5:0a:
77:9d:55:38:2d:26:f0:2c:e3:6e:1f:bb:d9:06:ff:
0e:19:fa:b6:6c:b8:f2:6d:82:cd:12:ea:67:eb:99:
4e:1a:7e:79:aa:d1:c4:58:b6:65:06:55:c5:05:33:
61:93:3b:5e:2c:ff:f2:fc:2d:59:da:7b:59:b0:96:
48:f6:37:11:c0:fd:5d:4e:38:b8:91:5b:ee:11:eb:
f5:a6:a7:3e:b2:70:5c:8f:60:64:06:b3:01:47:b6:
00:ff:0e:28:5b:1b:7d:9e:40:c4:2b:9e:e0:81:dd:
ac:60:d2:88:51:96:e5:ea:14:a4:dd:d9:ec:03:1e:
97:86:d8:30:5f:56:2a:5d:dc:3f:f0:f0:af:26:10:
62:8f:03:cb:fc:e1:16:a0:48:29:22:6d:1c:1e:6f:
c5:f3:9a:cd:a9:5f:0f:39:44:de:1f:3a:81:2d:cb:
11:1f:11:d1:87:c6:a5:2d:68:8a:13:d5:2c:fa:2d:
4f:ec:a4:8d:85:a4:0b:c5:10:1b:47:49:5f:5f:8f:
c5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F5:AC:9F:70:BB:22:7F:AE:3C:63:DB:D6:87:42:1E:C8:DE:DC:73
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:81:73:5a:3b:6f:f0:ef:1d:c2:ed:74:bc:fb:fa:2e:c2:a1:
3c:27:b8:90:c9:7c:4a:7b:16:75:37:c4:a4:14:ba:52:b7:1b:
45:5a:c5:b2:f9:ec:4b:20:9a:4d:9a:ce:52:3a:be:23:e7:9b:
e5:80:55:33:a5:af:7f:51:68:3f:a4:e5:56:aa:38:46:fd:3a:
0a:7e:d7:55:a5:50:d6:0a:e9:89:0d:6b:40:0b:e9:7f:14:94:
a3:39:ce:6e:5b:a4:f7:f4:d9:30:db:5b:2b:f9:ad:43:ed:87:
3f:67:66:7c:11:ea:60:20:57:ea:f9:35:7d:65:cc:d7:90:6c:
0d:32:9d:8a:e0:0c:82:a1:d5:f4:e3:55:a5:f3:c4:f3:7d:ac:
ea:f4:6c:5a:86:2f:43:f0:64:62:ce:13:7b:9c:07:47:ad:f8:
c1:ab:2c:e1:8d:74:c4:f9:dc:16:89:c4:25:ad:1c:b1:cc:f6:
ca:70:c8:2a:14:bd:c7:22:b1:4e:7b:72:27:c0:90:2a:1c:2f:
db:2e:d4:aa:00:d5:6e:5b:78:bc:4c:a8:97:5b:ee:f5:52:3f:
3b:b1:5d:96:51:71:1a:f5:a3:e9:a3:cf:20:8c:5d:fb:2d:a7:
27:9b:c7:8e:2e:29:73:d0:2f:02:bf:34:95:d9:27:ee:0e:9f:
a6:72:be:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrogjyWLzwzt/NN9VJcckgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMGNjZDIzOTFmYTMyYzBhZGUyOTdjNWZjODgzMDkwYjM5
OTEzOTUwHhcNMjYwMzAxMjMwMDQ4WhcNMjYwMzAyMjMwMDQ4WjAzMTEwLwYDVQQD
EygzM2Y1YWM5ZjcwYmIyMjdmYWUzYzYzZGJkNjg3NDIxZWM4ZGVkYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKo+LkWlBMofTUUMg11rU6iSnnLX
Ow9FqtCoVYAD9YnkAs3o03Mhts59NbHeQOiKfqXcTQO02ajvpQp3nVU4LSbwLONu
H7vZBv8OGfq2bLjybYLNEupn65lOGn55qtHEWLZlBlXFBTNhkzteLP/y/C1Z2ntZ
sJZI9jcRwP1dTji4kVvuEev1pqc+snBcj2BkBrMBR7YA/w4oWxt9nkDEK57ggd2s
YNKIUZbl6hSk3dnsAx6XhtgwX1YqXdw/8PCvJhBijwPL/OEWoEgpIm0cHm/F85rN
qV8POUTeHzqBLcsRHxHRh8alLWiKE9Us+i1P7KSNhaQLxRAbR0lfX4/F/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDP1rJ9wuyJ/rjxj29aHQh7I3txzMB8GA1UdIwQY
MBaAFN4MzSOR+jLAreKXxfyIMJCzmROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQt
NjdjMWE2M2M1MTUwLzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQtNjdjMWE2M2M1MTUw
LzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIFzWjtv
8O8dwu10vPv6LsKhPCe4kMl8SnsWdTfEpBS6UrcbRVrFsvnsSyCaTZrOUjq+I+eb
5YBVM6Wvf1FoP6TlVqo4Rv06Cn7XVaVQ1grpiQ1rQAvpfxSUoznObluk9/TZMNtb
K/mtQ+2HP2dmfBHqYCBX6vk1fWXM15BsDTKdiuAMgqHV9ONVpfPE832s6vRsWoYv
Q/BkYs4Te5wHR634wass4Y10xPncFonEJa0cscz2ynDIKhS9xyKxTntyJ8CQKhwv
2y7UqgDVblt4vEyol1vu9VI/O7FdllFxGvWj6aPPIIxd+y2nJ5vHji4pc9AvAr80
ldkn7g6fpnK+Dw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:18 2026 by rpki-client