Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier: +TbnTFYqScNFnzo5oTk7qKTSqrjtlxwq85Ae0b9FfdQ=
Subject key identifier: 5B:BA:3A:A5:CD:08:46:0A:64:C0:20:4C:91:CB:48:48:75:C1:A6:74
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 019CACEBA8AA1A513FFB22B4F0C878345D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 05:00:51 +0000
Manifest this update: Mon 02 Mar 2026 05:00:51 +0000
Manifest next update: Tue 03 Mar 2026 05:00:51 +0000
Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: MPOl1UlMcHxM0IVCsqdeLLBMJJrGm/0ED16Cmc0TiPc=)
2: nFQlym1aMKDG1iZXPXNlMoKyhB0.roa (hash: r3sbYclJIQsvLQBD+qrAOMivPnh7tcPSSaMitIINazI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:a8:aa:1a:51:3f:fb:22:b4:f0:c8:78:34:5d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: Mar 2 05:00:51 2026 GMT
Not After : Mar 3 05:00:51 2026 GMT
Subject: CN=5bba3aa5cd08460a64c0204c91cb484875c1a674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:03:10:74:03:94:40:33:65:d3:56:80:de:
d0:e3:83:ad:d6:b9:9f:06:e8:d2:1c:c2:02:17:40:
c7:56:4c:64:31:e3:75:ed:6a:59:27:6b:2f:2b:22:
33:97:53:c1:c3:a8:c9:d3:d9:3f:07:91:96:76:d9:
04:8a:99:2a:76:d7:86:50:2c:11:1a:d9:85:82:8d:
0c:ee:fb:0e:38:7f:3a:8f:41:30:29:c3:f4:b8:5d:
2e:ba:15:30:02:bc:94:90:af:79:10:84:e6:fe:32:
3c:5a:ff:91:7a:50:51:62:c8:e7:aa:8e:85:7a:b5:
2c:40:ea:10:17:f4:d9:23:4c:e3:93:88:46:d1:79:
81:a9:8c:7c:7b:2b:82:e6:f4:58:e6:e1:eb:f1:a7:
21:18:32:47:21:98:3f:97:81:79:81:3c:0f:a5:1b:
2e:94:66:e7:cf:94:df:c7:ba:41:e7:70:8b:7e:cf:
e1:c4:77:0a:ad:ef:48:b0:12:3b:92:9f:cd:48:c5:
be:ce:d2:f3:33:29:76:64:bd:56:1e:e6:72:d7:56:
aa:91:94:ec:1c:8f:aa:24:bf:c4:04:74:18:07:a4:
3c:4e:f9:9a:c9:d5:a0:06:2b:88:93:8a:a1:39:3b:
0d:c4:50:5a:0f:87:79:b0:70:5f:1e:22:ad:24:96:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BA:3A:A5:CD:08:46:0A:64:C0:20:4C:91:CB:48:48:75:C1:A6:74
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:82:d7:cc:ab:8c:6e:df:99:f1:25:22:e1:7c:9c:83:3e:ed:
0a:7a:d7:a3:0f:28:5d:63:a9:8e:d1:9e:0c:46:3c:14:ec:de:
a9:95:44:6e:49:df:85:e2:e3:22:8b:20:0b:5e:19:de:7f:e4:
5a:bd:3c:47:fa:99:14:ac:02:38:67:b0:3c:54:54:ab:1e:08:
85:57:82:bb:73:53:a2:24:5d:74:de:f5:25:a8:dd:45:1b:5f:
1f:ad:21:6b:fd:e8:e9:f0:b4:39:42:84:85:aa:fa:54:0d:12:
a6:4d:48:9c:d9:6c:82:1c:b4:9a:8c:90:e7:12:b1:bd:8b:2c:
8a:6a:9f:7f:0d:25:86:2f:f1:c8:27:4e:bd:85:68:dc:df:a5:
98:9f:86:17:76:6a:90:fc:13:85:90:af:10:43:57:bc:54:d1:
ef:0a:a5:78:6d:5a:c4:15:49:e2:39:63:87:93:46:3f:58:40:
a4:e4:8b:98:7b:c9:73:36:be:ce:4b:49:50:da:8d:4c:c9:24:
91:fb:35:1d:7d:6a:cd:3e:98:8d:dc:e3:de:7d:4d:d4:1f:3d:
79:0e:15:6f:90:1b:3a:b4:96:1d:1c:50:75:96:76:c6:88:17:
15:22:86:83:8e:e8:89:b8:21:10:19:3c:94:d6:c7:28:71:ab:
18:cd:c0:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys66iqGlE/+yK08Mh4NF1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTU3MmZjYmQ2NjVmNzJlMDBlNWZmZGI4ZGI4MDJkMWNi
ZWM4OTQwHhcNMjYwMzAyMDUwMDUxWhcNMjYwMzAzMDUwMDUxWjAzMTEwLwYDVQQD
Eyg1YmJhM2FhNWNkMDg0NjBhNjRjMDIwNGM5MWNiNDg0ODc1YzFhNjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq4DEHQDlEAzZdNWgN7Q44Ot1rmf
BujSHMICF0DHVkxkMeN17WpZJ2svKyIzl1PBw6jJ09k/B5GWdtkEipkqdteGUCwR
GtmFgo0M7vsOOH86j0EwKcP0uF0uuhUwAryUkK95EITm/jI8Wv+RelBRYsjnqo6F
erUsQOoQF/TZI0zjk4hG0XmBqYx8eyuC5vRY5uHr8achGDJHIZg/l4F5gTwPpRsu
lGbnz5Tfx7pB53CLfs/hxHcKre9IsBI7kp/NSMW+ztLzMyl2ZL1WHuZy11aqkZTs
HI+qJL/EBHQYB6Q8TvmaydWgBiuIk4qhOTsNxFBaD4d5sHBfHiKtJJYuLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFu6OqXNCEYKZMAgTJHLSEh1waZ0MB8GA1UdIwQY
MBaAFN6Vcvy9Zl9y4A5f/bjbgC0cvsiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83OTIyMDAtMmRhMC00MWJmLTg1ODct
YTkyOTM0Y2IxZGU4LzEvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83OTIyMDAtMmRhMC00MWJmLTg1ODctYTkyOTM0Y2IxZGU4
LzEvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4LXzKuM
bt+Z8SUi4Xycgz7tCnrXow8oXWOpjtGeDEY8FOzeqZVEbknfheLjIosgC14Z3n/k
Wr08R/qZFKwCOGewPFRUqx4IhVeCu3NToiRddN71JajdRRtfH60ha/3o6fC0OUKE
har6VA0Spk1InNlsghy0moyQ5xKxvYssimqffw0lhi/xyCdOvYVo3N+lmJ+GF3Zq
kPwThZCvEENXvFTR7wqleG1axBVJ4jljh5NGP1hApOSLmHvJcza+zktJUNqNTMkk
kfs1HX1qzT6Yjdzj3n1N1B89eQ4Vb5AbOrSWHRxQdZZ2xogXFSKGg47oibghEBk8
lNbHKHGrGM3AJg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:11:31 2026 by rpki-client