Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: hbDFk5r2sqdC6Wq/qYiTOP3L+SlBdYm+pLfgzzbqrO0=
Subject key identifier: BD:74:B0:24:17:27:9F:2A:32:C9:A5:83:1C:60:35:A0:49:C9:5B:E4
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 019CAA219B4B7B34A9BB3E2F21D9B3AE6903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 0EDA
Signing time: Sun 01 Mar 2026 16:00:55 +0000
Manifest this update: Sun 01 Mar 2026 16:00:55 +0000
Manifest next update: Mon 02 Mar 2026 16:00:55 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: VcLql5PPH3yQnCyoRE2ZxWJjnojOdqonK/AdVU3eY7U=)
2: QFEuDeeu4X6RvqTM-9j-vL-jCec.roa (hash: enIY13X+DtKSJonUyur86EMN51RX0wJhm2ZaFev3lAE=)
3: lGfy-skAnLgxdiq51q1vJk9OXZg.roa (hash: 905M+SG71AWuwma3AVwJNMrg+VeownsgNGw18kPIIEs=)
4: shwWHH59CwEK5l3nYzgvrpyDADs.roa (hash: Xxgj4+MGImPO/BRjCoJfEL8QyT6UC4SQ9MovxKsATjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:9b:4b:7b:34:a9:bb:3e:2f:21:d9:b3:ae:69:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Mar 1 16:00:55 2026 GMT
Not After : Mar 2 16:00:55 2026 GMT
Subject: CN=bd74b02417279f2a32c9a5831c6035a049c95be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:bd:50:c8:d2:ff:d5:d2:b7:e1:58:2b:e6:
41:e1:db:20:ed:1d:11:85:d5:ba:56:1a:53:68:1d:
4e:23:70:5c:f9:e0:f6:3f:3d:db:06:f5:00:79:7e:
58:da:2e:6a:30:4b:31:74:47:bc:31:b1:8e:69:d9:
5c:97:90:64:fe:3b:2e:35:2c:f9:a9:06:58:01:1a:
89:bd:c4:3a:50:3e:2b:2d:8d:a6:66:a6:da:82:27:
ba:86:08:d1:13:0d:96:e6:06:20:0b:81:4a:9e:38:
6c:62:50:2e:b9:08:9b:66:3b:97:06:2f:c3:49:de:
c0:ae:89:74:b0:7f:c6:c2:8d:2d:f0:08:01:c2:6b:
b0:25:66:3b:f3:cf:ac:e6:37:20:cf:68:3d:24:15:
60:f3:df:f2:61:a5:88:74:7d:6b:bb:8d:74:fa:d9:
f5:68:01:03:4d:91:22:9d:8b:0b:7a:25:0d:a2:1f:
b1:87:36:c2:97:f2:d2:29:b8:56:f0:76:00:6c:f1:
9e:a6:42:f6:95:eb:39:51:46:7e:31:06:61:8e:e9:
9a:16:1a:2c:c0:ab:ea:7d:d0:64:5b:1e:b5:f5:0e:
b2:da:1a:76:56:4e:0f:d7:99:4f:26:8b:fc:70:4f:
65:d8:54:ff:74:71:1a:da:10:59:b0:02:be:f9:ef:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:74:B0:24:17:27:9F:2A:32:C9:A5:83:1C:60:35:A0:49:C9:5B:E4
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:49:fc:84:70:fa:66:bd:86:ba:1b:82:e0:f1:e9:e7:18:7d:
eb:3d:5d:a3:81:05:75:60:73:3d:ff:f9:f2:a8:77:6f:20:5c:
53:24:a3:49:a4:a4:9b:87:13:0e:92:61:2a:34:7d:87:2f:ed:
4b:40:6f:ce:cc:bc:9f:3f:d2:b7:f7:7a:8e:0f:21:9f:49:da:
52:cc:f4:06:f7:48:0b:55:84:4a:f5:43:fb:20:74:9e:83:53:
ba:25:db:e9:7d:54:59:d8:fb:85:ad:bb:8c:61:17:99:80:ff:
46:50:a0:8d:e6:91:53:f2:46:a5:4a:a8:a2:de:f4:13:7b:be:
15:ec:de:38:38:29:52:78:d7:45:a3:15:5b:e2:9e:bb:27:80:
a1:73:ec:c6:a5:e4:da:de:3c:f6:a8:7f:8c:c7:72:02:7f:83:
2a:16:05:69:47:6d:ca:9c:c0:70:c3:d4:92:d4:93:3c:c6:33:
cf:94:71:5c:e0:74:79:4d:2d:b2:f6:d9:b1:2c:6a:83:f6:8e:
22:00:61:cd:e0:b1:97:b5:32:49:2d:4c:9c:f8:b7:32:98:0a:
57:0c:1d:ca:67:4b:e9:86:13:4e:7c:18:5a:1d:7a:d7:f9:04:
f7:02:14:3d:37:95:77:ab:80:29:2c:14:a0:20:91:24:e7:63:
8f:bf:a9:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIZtLezSpuz4vIdmzrmkDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYjcxNDcxMzczYmIwNjAzYzM1NmVlZGVkNGI5MTgyOTJi
NWJlZWUwHhcNMjYwMzAxMTYwMDU1WhcNMjYwMzAyMTYwMDU1WjAzMTEwLwYDVQQD
EyhiZDc0YjAyNDE3Mjc5ZjJhMzJjOWE1ODMxYzYwMzVhMDQ5Yzk1YmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYy9UMjS/9XSt+FYK+ZB4dsg7R0R
hdW6VhpTaB1OI3Bc+eD2Pz3bBvUAeX5Y2i5qMEsxdEe8MbGOadlcl5Bk/jsuNSz5
qQZYARqJvcQ6UD4rLY2mZqbagie6hgjREw2W5gYgC4FKnjhsYlAuuQibZjuXBi/D
Sd7Arol0sH/Gwo0t8AgBwmuwJWY788+s5jcgz2g9JBVg89/yYaWIdH1ru410+tn1
aAEDTZEinYsLeiUNoh+xhzbCl/LSKbhW8HYAbPGepkL2les5UUZ+MQZhjumaFhos
wKvqfdBkWx619Q6y2hp2Vk4P15lPJov8cE9l2FT/dHEa2hBZsAK++e/HYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL10sCQXJ58qMsmlgxxgNaBJyVvkMB8GA1UdIwQY
MBaAFN23FHE3O7BgPDVu7e1LkYKStb7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgt
NjIxMmFjNDljYTNiLzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgtNjIxMmFjNDljYTNi
LzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkn8hHD6
Zr2GuhuC4PHp5xh96z1do4EFdWBzPf/58qh3byBcUySjSaSkm4cTDpJhKjR9hy/t
S0Bvzsy8nz/St/d6jg8hn0naUsz0BvdIC1WESvVD+yB0noNTuiXb6X1UWdj7ha27
jGEXmYD/RlCgjeaRU/JGpUqoot70E3u+FezeODgpUnjXRaMVW+KeuyeAoXPsxqXk
2t489qh/jMdyAn+DKhYFaUdtypzAcMPUktSTPMYzz5RxXOB0eU0tsvbZsSxqg/aO
IgBhzeCxl7UySS1MnPi3MpgKVwwdymdL6YYTTnwYWh161/kE9wIUPTeVd6uAKSwU
oCCRJOdjj7+pMQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:39 2026 by rpki-client