Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: mMMT0+14OMXwjqTULF+vVz3YJR9NerdsI/kE7/Ur/4M=
Subject key identifier: E9:3B:A3:70:C2:42:A3:76:30:97:13:FE:2A:38:F5:05:DD:AB:01:D4
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 019CAA214FB5C059C96DA43AEDC50242F013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 1186
Signing time: Sun 01 Mar 2026 16:00:35 +0000
Manifest this update: Sun 01 Mar 2026 16:00:35 +0000
Manifest next update: Mon 02 Mar 2026 16:00:35 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: DU1XoqBb5KYAu2LaLxlLHzYDlKvyq6RTp5sLef/kvoI=)
2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:4f:b5:c0:59:c9:6d:a4:3a:ed:c5:02:42:f0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Mar 1 16:00:35 2026 GMT
Not After : Mar 2 16:00:35 2026 GMT
Subject: CN=e93ba370c242a376309713fe2a38f505ddab01d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:11:62:a7:b7:c1:01:0a:9e:c2:7c:64:b5:
31:fc:07:07:de:4c:dc:47:ed:99:4a:09:c5:29:38:
8f:e5:ee:93:c2:10:40:27:bd:b4:a5:b0:55:c4:6d:
6c:3d:dd:30:6b:71:35:cc:79:ea:86:37:b9:54:f8:
db:18:96:59:cc:b6:40:87:04:59:24:70:3e:2c:e4:
92:2a:1a:b7:8f:12:89:e1:eb:22:84:4a:f1:c7:24:
56:14:03:4c:03:41:06:f7:10:ad:e7:32:aa:e5:3f:
84:05:6c:af:45:ef:e0:90:79:73:73:b5:9a:4d:0e:
1f:2e:21:2d:f4:6b:c6:56:ef:52:61:2d:30:0d:2a:
0a:fd:cd:99:1c:d2:fb:7a:7d:d2:68:bd:09:5f:e5:
03:06:45:67:fd:d1:75:36:31:73:92:bf:36:27:c7:
da:83:05:7d:d3:6b:10:87:bf:cd:95:a5:5a:58:2f:
93:77:d8:cd:67:1e:eb:73:02:49:5b:db:f8:6f:b9:
dd:0f:a8:b7:45:9b:02:49:74:77:55:08:a4:11:58:
f6:ff:ef:f6:38:be:40:ff:f8:c5:63:04:87:78:6e:
b6:2e:0c:ac:26:81:e6:4b:41:13:7e:6c:67:fd:2a:
a2:15:90:a4:b2:41:e4:ce:02:90:50:65:ad:dc:0c:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3B:A3:70:C2:42:A3:76:30:97:13:FE:2A:38:F5:05:DD:AB:01:D4
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ab:f9:94:bb:74:5f:4e:d3:e4:ea:bb:0a:4e:08:26:f4:57:
db:b5:4c:d0:0a:06:85:49:63:cb:90:e3:7c:06:01:3e:51:8d:
8d:ad:70:2e:9d:ae:95:16:87:d3:b3:47:be:fc:13:b5:ba:4b:
33:02:cd:cc:22:1e:ae:0a:a0:ff:b5:7a:c7:2f:51:80:c1:01:
93:4b:f5:8d:75:a8:2c:61:47:16:96:7c:70:06:84:8e:34:0f:
c0:bc:e6:39:0e:f9:eb:be:fe:cb:2e:c1:40:77:40:24:bf:b7:
37:41:54:0a:8a:36:b6:45:69:3d:35:a9:c0:7a:f0:70:1b:e3:
11:21:09:b6:c4:ed:32:57:59:85:08:68:df:e1:f2:08:cc:eb:
1a:15:04:d7:e8:cd:a4:b3:16:71:e9:10:0f:4c:53:49:92:04:
5b:d9:48:4d:87:14:ad:97:a7:6a:b9:68:d5:db:9d:4b:f3:d5:
ac:11:31:11:3c:46:ea:e4:c0:aa:ee:4f:19:4b:77:3e:a0:f0:
14:ad:fa:d4:29:97:36:38:14:d0:79:38:d0:85:09:a5:99:09:
bb:37:e1:ae:32:0c:46:c7:24:23:1a:0b:24:6c:21:83:97:7f:
eb:8f:ac:ec:06:87:c1:84:b5:3a:14:a7:69:f2:04:e1:98:a3:
43:44:20:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIU+1wFnJbaQ67cUCQvATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjE0NTc1NjA4MGFmZjFiYjAwZjVmOTBmZDlmMmYyN2Nj
NTczMmEwHhcNMjYwMzAxMTYwMDM1WhcNMjYwMzAyMTYwMDM1WjAzMTEwLwYDVQQD
EyhlOTNiYTM3MGMyNDJhMzc2MzA5NzEzZmUyYTM4ZjUwNWRkYWIwMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VURYqe3wQEKnsJ8ZLUx/AcH3kzc
R+2ZSgnFKTiP5e6TwhBAJ720pbBVxG1sPd0wa3E1zHnqhje5VPjbGJZZzLZAhwRZ
JHA+LOSSKhq3jxKJ4esihErxxyRWFANMA0EG9xCt5zKq5T+EBWyvRe/gkHlzc7Wa
TQ4fLiEt9GvGVu9SYS0wDSoK/c2ZHNL7en3SaL0JX+UDBkVn/dF1NjFzkr82J8fa
gwV902sQh7/NlaVaWC+Td9jNZx7rcwJJW9v4b7ndD6i3RZsCSXR3VQikEVj2/+/2
OL5A//jFYwSHeG62LgysJoHmS0ETfmxn/SqiFZCkskHkzgKQUGWt3AytKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOk7o3DCQqN2MJcT/io49QXdqwHUMB8GA1UdIwQY
MBaAFN6xRXVggK/xuwD1+Q/Z8vJ8xXMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1Njgt
M2ZmOTY0NTUwM2U5LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1NjgtM2ZmOTY0NTUwM2U5
LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKv5lLt0
X07T5Oq7Ck4IJvRX27VM0AoGhUljy5DjfAYBPlGNja1wLp2ulRaH07NHvvwTtbpL
MwLNzCIergqg/7V6xy9RgMEBk0v1jXWoLGFHFpZ8cAaEjjQPwLzmOQ75677+yy7B
QHdAJL+3N0FUCoo2tkVpPTWpwHrwcBvjESEJtsTtMldZhQho3+HyCMzrGhUE1+jN
pLMWcekQD0xTSZIEW9lITYcUrZenarlo1dudS/PVrBExETxG6uTAqu5PGUt3PqDw
FK361CmXNjgU0Hk40IUJpZkJuzfhrjIMRsckIxoLJGwhg5d/64+s7AaHwYS1OhSn
afIE4ZijQ0Qgyg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:38 2026 by rpki-client