Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier: Qt5JwOIp4rSxjdohAfvhxQz/kotRSNCXC7IcvSA6Pkk=
Subject key identifier: 57:AA:B9:25:68:51:33:81:11:F8:27:6B:23:D2:DF:23:02:2D:A5:FC
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 019CAEA39CC473954654AA5B3449A7BB6352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 13:01:23 +0000
Manifest this update: Mon 02 Mar 2026 13:01:23 +0000
Manifest next update: Tue 03 Mar 2026 13:01:23 +0000
Files and hashes: 1: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: aGFWLWHS1PrZdfHJ2S/kIhKVBb8xJt4Uil3Mu3PKoTA=)
2: Eutl85DJa5Wvda8Ay8PusU7FvGw.roa (hash: 0UQ/kddOeRvGr5lY/YK4culyM9uyjud6DEWUEwmL8/g=)
3: QHBZT5kThtefU6Yue7jJobqw9JU.roa (hash: pRD253NVKbYirBHDkZVZG3Wa4gP+JVRS3M7a27XwU/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:9c:c4:73:95:46:54:aa:5b:34:49:a7:bb:63:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Mar 2 13:01:23 2026 GMT
Not After : Mar 3 13:01:23 2026 GMT
Subject: CN=57aab9256851338111f8276b23d2df23022da5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:dc:16:ba:91:5b:bb:87:30:bc:32:86:29:
bc:8b:23:68:87:75:43:a5:fe:f7:d1:43:93:dc:e8:
05:2d:69:ec:ce:55:ca:27:b0:a9:3f:50:8c:63:a2:
70:b9:ce:66:0f:79:bd:df:45:48:d2:e3:b3:b7:c5:
e7:9b:a8:31:2e:88:24:80:c7:8e:7f:28:b4:fd:b9:
4d:dc:d8:56:fa:4c:61:ed:4a:da:ed:66:f7:c5:ea:
94:23:f2:b7:f1:6a:b2:9b:01:b9:ea:ee:e8:e2:6e:
a4:96:58:e5:88:5e:fb:a0:4b:f8:4e:ab:ef:f0:83:
0f:e4:f7:1b:5d:95:5b:97:13:8c:77:be:06:c0:0b:
ec:45:af:c9:b6:ac:c0:ac:d6:11:06:e4:10:4c:2e:
35:55:f8:ee:1b:89:60:bf:6a:4b:f4:2f:7e:64:79:
aa:fc:cb:f6:0b:52:6b:73:10:5d:35:8e:a0:b9:94:
2c:a4:08:bb:44:0c:56:93:be:78:35:9a:bd:62:21:
3d:79:8e:f4:ee:2a:c0:73:9e:13:fe:e7:0b:a3:86:
43:3b:55:fc:10:3e:25:5d:fa:ab:31:1a:d6:60:1e:
84:6e:7a:50:fb:f3:34:f3:50:64:2e:b2:52:05:e6:
2c:47:10:d6:0b:78:83:17:ec:bd:8d:0e:df:3d:bd:
b5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AA:B9:25:68:51:33:81:11:F8:27:6B:23:D2:DF:23:02:2D:A5:FC
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:71:ae:b0:dd:35:73:20:5b:28:d9:11:36:2d:c7:f1:88:12:
89:46:a7:90:4a:d6:3d:c4:1e:4e:74:6c:c5:3a:14:f6:7b:d3:
31:92:c1:52:e5:4b:17:ba:7d:57:f2:17:11:3b:e8:b2:1e:20:
10:0a:e7:b3:27:95:4f:2f:d8:c4:5a:8d:7e:0b:82:b2:43:66:
06:b0:cd:5c:9a:36:2e:c0:2e:d7:de:f2:57:b7:fe:5e:48:49:
45:56:1b:da:ff:d5:77:4d:51:06:ae:bf:7d:f0:45:0b:25:80:
fa:76:4d:e0:67:1a:01:f8:2a:4f:02:ad:93:14:78:8e:f4:f3:
6f:a6:8c:cc:d2:4d:20:3a:eb:4f:b6:cd:55:c6:31:e1:4d:02:
de:c7:0c:d6:e0:11:5c:ae:04:8d:c6:6f:a9:db:e9:1d:2e:d9:
68:8e:37:c0:1d:db:8f:0c:98:16:f9:7c:3e:27:d9:d2:dc:7a:
21:2d:6a:f3:d4:54:64:29:12:a6:93:c7:c6:2d:45:14:66:3f:
61:df:99:d9:3a:14:07:3e:ad:60:cd:22:df:48:26:9d:8d:f9:
cd:a5:08:84:b5:43:c3:9a:3c:96:4b:ca:06:71:98:24:25:16:
5c:3f:3c:74:a5:c3:3a:02:1f:82:a8:a9:82:25:0c:95:57:9c:
98:a5:3a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuo5zEc5VGVKpbNEmnu2NSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NGRjZDBlZTcwMTRlZmIyZTNiNTU0ZmJiNzA2Mzg0ZWYx
MWQwNTEwHhcNMjYwMzAyMTMwMTIzWhcNMjYwMzAzMTMwMTIzWjAzMTEwLwYDVQQD
Eyg1N2FhYjkyNTY4NTEzMzgxMTFmODI3NmIyM2QyZGYyMzAyMmRhNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/TcFrqRW7uHMLwyhim8iyNoh3VD
pf730UOT3OgFLWnszlXKJ7CpP1CMY6Jwuc5mD3m930VI0uOzt8Xnm6gxLogkgMeO
fyi0/blN3NhW+kxh7Ura7Wb3xeqUI/K38WqymwG56u7o4m6klljliF77oEv4Tqvv
8IMP5PcbXZVblxOMd74GwAvsRa/JtqzArNYRBuQQTC41VfjuG4lgv2pL9C9+ZHmq
/Mv2C1JrcxBdNY6guZQspAi7RAxWk754NZq9YiE9eY707irAc54T/ucLo4ZDO1X8
ED4lXfqrMRrWYB6EbnpQ+/M081BkLrJSBeYsRxDWC3iDF+y9jQ7fPb212QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFequSVoUTOBEfgnayPS3yMCLaX8MB8GA1UdIwQY
MBaAFAZNzQ7nAU77LjtVT7twY4TvEdBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kY2IwOGMtNTUxNS00NDVjLWFkOTkt
ZmI0NzQwZmRhMjUwLzEvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kY2IwOGMtNTUxNS00NDVjLWFkOTktZmI0NzQwZmRhMjUw
LzEvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHGusN01
cyBbKNkRNi3H8YgSiUankErWPcQeTnRsxToU9nvTMZLBUuVLF7p9V/IXETvosh4g
EArnsyeVTy/YxFqNfguCskNmBrDNXJo2LsAu197yV7f+XkhJRVYb2v/Vd01RBq6/
ffBFCyWA+nZN4GcaAfgqTwKtkxR4jvTzb6aMzNJNIDrrT7bNVcYx4U0C3scM1uAR
XK4EjcZvqdvpHS7ZaI43wB3bjwyYFvl8PifZ0tx6IS1q89RUZCkSppPHxi1FFGY/
Yd+Z2ToUBz6tYM0i30gmnY35zaUIhLVDw5o8lkvKBnGYJCUWXD88dKXDOgIfgqip
giUMlVecmKU6Bw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:31 2026 by rpki-client