Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: 7xcLfjvXqnTOfGGVFjEW+3xKdOSN4aW/JM+CJUavekk=
Subject key identifier: 81:E1:0D:72:BB:DE:F5:4D:CA:7D:F1:98:FB:CA:9F:49:0A:4B:82:3F
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 019CAC0FC5E97006F9CB423F4C74C12176F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 14EB
Signing time: Mon 02 Mar 2026 01:00:40 +0000
Manifest this update: Mon 02 Mar 2026 01:00:40 +0000
Manifest next update: Tue 03 Mar 2026 01:00:40 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: 5kvsUV7+rOpWMZqOPtB9MsziFqB4YMjwR2C+fCEoFew=)
2: INE61DSnT0byRQAlBRacyXpwM4M.roa (hash: ZjFf2bVbEAR4MMNRtk1mizzAeZIxKBJHJE2Ioiflxw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:c5:e9:70:06:f9:cb:42:3f:4c:74:c1:21:76:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Mar 2 01:00:40 2026 GMT
Not After : Mar 3 01:00:40 2026 GMT
Subject: CN=81e10d72bbdef54dca7df198fbca9f490a4b823f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:f2:3a:bb:9e:e0:c6:47:fb:e5:05:37:d0:
47:93:cc:ce:aa:65:7e:f5:b1:46:23:38:dc:f1:7f:
29:12:fb:cd:e0:aa:b6:f1:7f:d2:4d:cc:66:fb:f1:
d9:72:66:37:4e:d7:3e:10:ee:33:7f:03:73:82:ca:
64:82:ba:6d:25:62:41:4c:33:39:21:df:fd:cd:60:
86:e0:ff:5e:bd:91:bf:5f:04:0a:af:8e:82:f5:41:
6c:b2:23:ee:fd:9d:4f:42:76:ca:3b:42:78:39:bd:
d2:94:37:8b:16:bd:ec:b6:5a:4a:0e:b1:64:82:41:
43:ed:43:bf:b5:20:3f:c0:3f:d4:d1:2f:da:ab:09:
f0:f0:6d:80:75:61:12:d3:4a:f7:81:9b:6b:29:7f:
db:38:6c:52:c0:90:8d:9c:60:f7:3a:3d:1e:52:1d:
16:58:6f:fe:21:04:81:3a:4b:23:82:ed:08:79:6b:
5d:10:7f:1a:19:6c:64:6d:c8:ba:8f:38:6e:c6:0f:
7f:5e:c6:dc:1a:68:43:64:14:05:e8:b0:01:b9:5a:
b1:95:85:bf:21:80:01:83:fa:ad:47:47:e6:6d:a1:
c6:8b:f9:6e:fd:f8:ae:db:8b:5f:09:31:5f:f0:16:
b5:fd:67:cd:cc:f8:e6:f3:b7:74:06:7e:92:a4:59:
46:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E1:0D:72:BB:DE:F5:4D:CA:7D:F1:98:FB:CA:9F:49:0A:4B:82:3F
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:40:72:eb:4e:1e:b8:a6:7c:83:81:17:94:12:9c:69:c2:a6:
1a:27:6e:8f:7f:6c:52:c6:5d:c2:f0:b4:64:47:89:7b:f4:64:
bd:72:12:d3:2d:69:63:dd:09:4e:b8:5a:84:ec:ce:77:07:be:
f2:e5:7c:19:60:13:40:0b:9e:0b:47:f3:f7:e3:c4:66:dc:9e:
0a:fe:da:27:17:01:d9:52:ed:c9:20:ee:71:10:f0:2a:f0:d4:
7f:bb:ea:68:24:13:ed:f1:4a:41:d0:41:9e:cb:03:15:31:25:
e7:7b:e0:bf:d3:f4:97:ca:e8:b3:03:a0:5c:3c:99:64:3b:88:
14:74:8f:d3:52:74:08:6a:18:d4:34:88:6f:71:92:fb:37:a2:
c7:66:af:9b:2d:dd:56:f8:fb:c6:ee:2d:7a:29:71:96:73:9e:
93:9e:86:5f:e2:06:9b:84:9f:9a:54:cb:a4:22:2d:4b:e4:44:
99:f5:e4:89:64:1a:46:f5:0a:b1:27:1a:e4:5f:5a:5c:12:a5:
2b:6b:c0:65:b9:48:f5:17:54:96:b0:52:00:00:8b:9f:3c:0d:
0d:49:5c:9f:9f:55:ea:b9:f0:55:b5:a3:c4:49:cc:43:4c:0f:
6e:39:ae:61:f4:94:29:75:59:e0:35:0d:d2:21:40:62:5d:14:
b6:4a:49:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD8XpcAb5y0I/THTBIXbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTFjM2M1ZGRjNGZiNjEzODFjM2JlYTI0YzFiYTRmNzQ5
OThlYWIwHhcNMjYwMzAyMDEwMDQwWhcNMjYwMzAzMDEwMDQwWjAzMTEwLwYDVQQD
Eyg4MWUxMGQ3MmJiZGVmNTRkY2E3ZGYxOThmYmNhOWY0OTBhNGI4MjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTPyOrue4MZH++UFN9BHk8zOqmV+
9bFGIzjc8X8pEvvN4Kq28X/STcxm+/HZcmY3Ttc+EO4zfwNzgspkgrptJWJBTDM5
Id/9zWCG4P9evZG/XwQKr46C9UFssiPu/Z1PQnbKO0J4Ob3SlDeLFr3stlpKDrFk
gkFD7UO/tSA/wD/U0S/aqwnw8G2AdWES00r3gZtrKX/bOGxSwJCNnGD3Oj0eUh0W
WG/+IQSBOksjgu0IeWtdEH8aGWxkbci6jzhuxg9/XsbcGmhDZBQF6LABuVqxlYW/
IYABg/qtR0fmbaHGi/lu/fiu24tfCTFf8Ba1/WfNzPjm87d0Bn6SpFlG5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHhDXK73vVNyn3xmPvKn0kKS4I/MB8GA1UdIwQY
MBaAFN5Rw8XdxPthOBw76iTBuk90mY6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEt
YTUzMjVkNDQxNzAyLzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEtYTUzMjVkNDQxNzAy
LzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkBy604e
uKZ8g4EXlBKcacKmGiduj39sUsZdwvC0ZEeJe/RkvXIS0y1pY90JTrhahOzOdwe+
8uV8GWATQAueC0fz9+PEZtyeCv7aJxcB2VLtySDucRDwKvDUf7vqaCQT7fFKQdBB
nssDFTEl53vgv9P0l8roswOgXDyZZDuIFHSP01J0CGoY1DSIb3GS+zeix2avmy3d
Vvj7xu4teilxlnOek56GX+IGm4SfmlTLpCItS+REmfXkiWQaRvUKsSca5F9aXBKl
K2vAZblI9RdUlrBSAACLnzwNDUlcn59V6rnwVbWjxEnMQ0wPbjmuYfSUKXVZ4DUN
0iFAYl0UtkpJoA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:38 2026 by rpki-client