Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: VnVDhH+1C6E1CeM2mwDgArKRcLb4UpZDK6FM9UhQdEk=
Subject key identifier: F7:86:22:2B:A3:92:0E:84:3B:0F:7C:BA:C8:00:2D:AB:76:77:87:C1
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 019CAAC61D2986B04A685EBAEA0F6F58D460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0D53
Signing time: Sun 01 Mar 2026 19:00:36 +0000
Manifest this update: Sun 01 Mar 2026 19:00:36 +0000
Manifest next update: Mon 02 Mar 2026 19:00:36 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: fEnqky/qCjn4nOA8griDXp6ZhJfZqVBBHWQK/9/GYPQ=)
2: 7oc8a8fS3DJKvtS40qTcpFXQvEM.roa (hash: 8aVVJ9t5PeC1jL7SS/bu2hleqTmY1JsdKhA8bRBNWso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:1d:29:86:b0:4a:68:5e:ba:ea:0f:6f:58:d4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Mar 1 19:00:36 2026 GMT
Not After : Mar 2 19:00:36 2026 GMT
Subject: CN=f786222ba3920e843b0f7cbac8002dab767787c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c9:3d:dc:8d:05:30:88:2c:97:6e:16:7d:ac:
8f:e3:bf:32:f8:ab:6a:64:de:b7:11:5c:27:01:ec:
11:51:a7:fd:cc:64:fa:dd:fa:a6:63:d3:d5:ef:47:
fc:1a:19:a9:6a:2e:0e:f3:17:25:ce:06:1a:f5:82:
f6:88:1c:28:00:72:26:5b:67:3a:1b:ac:71:d8:a7:
ef:35:45:4b:e2:53:ce:c0:9a:18:00:7a:98:14:eb:
a2:19:62:7f:e8:1d:c3:8e:7a:b3:4a:16:b3:b9:76:
ea:ad:1c:06:9a:7f:73:49:0a:82:1f:b2:d6:dd:bb:
fa:3a:b3:67:8b:65:73:e6:3c:64:e4:f9:a5:ac:b1:
a9:d9:95:05:0a:a3:1a:3b:54:7c:98:53:2d:3e:7e:
b3:de:c6:d8:29:df:e2:50:81:20:b4:19:7c:af:1c:
7a:1f:e7:ba:61:f6:6b:99:e7:90:7e:a2:a4:f7:27:
ce:cc:d7:26:ee:12:91:1b:f0:ee:19:25:96:0b:f8:
23:5f:34:a0:c1:ba:64:02:db:40:48:9a:14:85:b4:
61:cb:b3:b6:41:1a:7b:92:2d:16:9d:04:fc:e0:ad:
bf:6e:c3:24:bb:00:97:3d:81:d6:80:21:b3:73:44:
93:61:14:1a:3f:cf:2c:a1:da:08:7d:49:4d:08:19:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:86:22:2B:A3:92:0E:84:3B:0F:7C:BA:C8:00:2D:AB:76:77:87:C1
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f9:2d:cc:e8:ae:84:e9:5b:fd:d8:10:ed:e9:fe:8d:a9:64:
b2:01:ed:ec:b7:2f:0f:af:dc:49:85:99:9d:3f:c9:f4:a6:62:
03:31:e1:0d:8e:88:0d:29:9b:24:1a:cf:00:50:9d:31:3c:77:
93:a9:4b:2b:57:db:90:9a:0d:96:27:72:3f:81:e5:7d:01:fe:
b8:fa:1f:ef:01:9b:e9:9f:05:88:89:15:51:5b:df:b8:75:4b:
08:ee:a8:d0:2b:24:7d:90:d1:4b:82:cb:9c:a4:47:27:8c:aa:
86:2d:7c:ea:3c:94:fc:91:10:ef:93:b4:b2:b4:db:18:c2:49:
ae:1f:81:88:72:9a:e6:aa:0b:c7:63:89:4a:2f:ef:e8:2f:0c:
c0:47:53:4a:2f:75:63:7d:70:d9:e9:a0:98:18:36:f8:4f:06:
41:db:20:7d:c7:5d:76:84:4d:f1:2b:da:15:11:a6:24:87:78:
b7:d1:c0:32:86:59:9e:37:5c:aa:61:87:e4:a7:47:11:5e:46:
b9:b7:8f:79:c0:d9:f5:05:35:1c:39:6c:e5:c1:52:96:95:cd:
47:33:9f:9f:7e:d2:33:2a:3d:38:e7:99:a5:b0:9d:b7:d5:38:
8a:4d:6a:7c:f9:ed:58:3b:54:67:1f:95:ae:33:69:8c:d9:3a:
06:63:14:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxh0phrBKaF666g9vWNRgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDc0OGNkNDcxNGE1Y2M4N2NhZmI4NDMwZmI4MTI0OGIw
OTQwNzkwHhcNMjYwMzAxMTkwMDM2WhcNMjYwMzAyMTkwMDM2WjAzMTEwLwYDVQQD
EyhmNzg2MjIyYmEzOTIwZTg0M2IwZjdjYmFjODAwMmRhYjc2Nzc4N2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ck93I0FMIgsl24WfayP478y+Ktq
ZN63EVwnAewRUaf9zGT63fqmY9PV70f8Ghmpai4O8xclzgYa9YL2iBwoAHImW2c6
G6xx2KfvNUVL4lPOwJoYAHqYFOuiGWJ/6B3DjnqzShazuXbqrRwGmn9zSQqCH7LW
3bv6OrNni2Vz5jxk5PmlrLGp2ZUFCqMaO1R8mFMtPn6z3sbYKd/iUIEgtBl8rxx6
H+e6YfZrmeeQfqKk9yfOzNcm7hKRG/DuGSWWC/gjXzSgwbpkAttASJoUhbRhy7O2
QRp7ki0WnQT84K2/bsMkuwCXPYHWgCGzc0STYRQaP88sodoIfUlNCBm52QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeGIiujkg6EOw98usgALat2d4fBMB8GA1UdIwQY
MBaAFN1HSM1HFKXMh8r7hDD7gSSLCUB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80YzU1YWYtNWU5Yi00MTk3LTg2ZmIt
Mzc1NDVkYTA1NmJkLzEvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80YzU1YWYtNWU5Yi00MTk3LTg2ZmItMzc1NDVkYTA1NmJk
LzEvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfktzOiu
hOlb/dgQ7en+jalksgHt7LcvD6/cSYWZnT/J9KZiAzHhDY6IDSmbJBrPAFCdMTx3
k6lLK1fbkJoNlidyP4HlfQH+uPof7wGb6Z8FiIkVUVvfuHVLCO6o0CskfZDRS4LL
nKRHJ4yqhi186jyU/JEQ75O0srTbGMJJrh+BiHKa5qoLx2OJSi/v6C8MwEdTSi91
Y31w2emgmBg2+E8GQdsgfcdddoRN8SvaFRGmJId4t9HAMoZZnjdcqmGH5KdHEV5G
ubePecDZ9QU1HDls5cFSlpXNRzOfn37SMyo9OOeZpbCdt9U4ik1qfPntWDtUZx+V
rjNpjNk6BmMUaA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:28 2026 by rpki-client