Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
File: 3i6RcxXwqHiyH8E51JqCGq3cPJc.mft (raw, json)
Hash identifier: HzrDFqom+kwJNpFUEzfa996QneyDJ6/xavgxJYvYz18=
Subject key identifier: 55:4B:57:DD:A7:E5:EE:26:1A:9E:26:DB:71:ED:6B:63:0C:87:A3:50
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Certificate issuer: /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial: 019CAB6BEBC4B92AC2EE5B412ED4D50B728D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
Manifest number: 1858
Signing time: Sun 01 Mar 2026 22:01:42 +0000
Manifest this update: Sun 01 Mar 2026 22:01:42 +0000
Manifest next update: Mon 02 Mar 2026 22:01:42 +0000
Files and hashes: 1: 3i6RcxXwqHiyH8E51JqCGq3cPJc.crl (hash: 7OtzwXg868tzqbjbNJ6a3h0FyohWH1FpWeTUV/SYmw8=)
2: GtwmzzfSMyQuHA5xN2h8yl_66bg.roa (hash: b0cWR0WKtHBGdUpy+EpGKcmMMtl7w7UTXQhFBWlOy0A=)
3: syWk75JGny34Q7aH7yGz8UWltwM.roa (hash: lGizpp26YDLi0eoTG2nJ/NGlhRSSauEEXdm5wIZ3bqo=)
4: yowCytNDfEjr6iMV6-jVqrYVTnY.roa (hash: Qecp8oYwO0klWaPBXtOGO2cs0a85Z+pJ/Flg2E7BAJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:eb:c4:b9:2a:c2:ee:5b:41:2e:d4:d5:0b:72:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Validity
Not Before: Mar 1 22:01:42 2026 GMT
Not After : Mar 2 22:01:42 2026 GMT
Subject: CN=554b57dda7e5ee261a9e26db71ed6b630c87a350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:11:53:00:13:83:3c:c6:65:c2:b3:09:ed:a6:
c1:76:aa:72:63:7a:71:f0:b0:33:08:b0:d2:49:3e:
19:95:bc:4d:cb:fb:20:e6:6c:81:e2:56:8e:25:59:
69:c8:89:8a:c7:2c:f1:b0:ca:1b:45:18:0a:6c:3c:
8f:68:77:c3:95:98:8d:4e:b0:fa:86:b0:e5:db:2a:
a4:19:23:43:1f:ca:57:02:c1:bd:22:06:44:4e:78:
ff:a0:d3:63:45:79:64:46:36:7e:ec:55:a2:8b:3d:
9a:2f:34:26:9e:46:31:a8:16:b3:5e:c5:a7:41:79:
50:91:7d:ce:c8:2e:39:c0:9e:d0:93:08:a5:f0:83:
79:62:c6:97:08:b3:f2:75:eb:64:49:ac:fc:b7:c7:
1b:f2:ad:80:d3:65:83:d8:73:a6:0f:4e:66:85:c8:
18:aa:1e:24:2a:1e:bd:6f:d0:6d:cc:e5:f8:4f:e3:
f5:71:6d:f8:39:43:dd:a7:1f:26:06:0b:f5:5d:86:
a9:1c:3a:bd:44:0e:d0:08:04:63:d8:f5:2f:89:1c:
28:50:b6:cb:1a:95:f7:24:b5:f7:b8:f6:2f:59:43:
be:b3:8d:1f:f8:60:58:75:21:ba:7c:74:d0:ab:fb:
21:cf:51:ae:16:1b:a3:45:7d:5b:52:67:6d:5d:e4:
f0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4B:57:DD:A7:E5:EE:26:1A:9E:26:DB:71:ED:6B:63:0C:87:A3:50
X509v3 Authority Key Identifier:
keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b1:cb:3a:58:7b:eb:4a:06:75:bb:af:bd:a0:7c:5c:6d:24:
70:e9:8f:33:b1:6d:08:07:86:3c:bf:1c:8e:fa:57:32:ae:d2:
8c:19:d7:49:31:dc:8f:be:4d:9b:07:da:14:94:c4:e0:63:70:
46:54:dd:15:7f:76:c6:83:0e:8e:4b:3f:f7:7e:24:07:d2:1d:
ce:e5:88:5a:66:c1:96:fb:5e:a1:5c:23:81:37:39:55:d3:65:
21:82:54:e1:fe:4a:6b:fc:61:f6:92:0f:9f:10:bd:d7:d0:ab:
08:13:67:3f:1e:f3:29:06:17:f7:bc:73:ed:28:08:88:35:dc:
e6:73:d9:cd:46:d9:e2:55:6f:f8:d3:81:02:85:7f:b7:09:91:
5f:20:42:16:18:0c:5c:d0:34:91:c9:35:9d:05:23:03:e2:7a:
fc:49:2b:49:2f:00:5b:94:48:3e:09:1f:53:83:ae:50:2e:cb:
d1:de:d2:77:4f:78:58:01:79:25:24:a3:86:a4:9d:4c:1c:d1:
5d:87:47:b5:bf:02:e6:e2:24:3f:21:b5:ad:d0:f3:54:06:e7:
29:13:5a:f4:f3:09:2f:4a:31:53:7f:03:e1:49:30:6c:2e:fa:
50:29:d6:a4:93:4e:f6:a5:79:0e:42:f6:fc:22:3b:84:f9:f7:
a4:66:6c:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra+vEuSrC7ltBLtTVC3KNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMmU5MTczMTVmMGE4NzhiMjFmYzEzOWQ0OWE4MjFhYWRk
YzNjOTcwHhcNMjYwMzAxMjIwMTQyWhcNMjYwMzAyMjIwMTQyWjAzMTEwLwYDVQQD
Eyg1NTRiNTdkZGE3ZTVlZTI2MWE5ZTI2ZGI3MWVkNmI2MzBjODdhMzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xFTABODPMZlwrMJ7abBdqpyY3px
8LAzCLDSST4ZlbxNy/sg5myB4laOJVlpyImKxyzxsMobRRgKbDyPaHfDlZiNTrD6
hrDl2yqkGSNDH8pXAsG9IgZETnj/oNNjRXlkRjZ+7FWiiz2aLzQmnkYxqBazXsWn
QXlQkX3OyC45wJ7Qkwil8IN5YsaXCLPydetkSaz8t8cb8q2A02WD2HOmD05mhcgY
qh4kKh69b9BtzOX4T+P1cW34OUPdpx8mBgv1XYapHDq9RA7QCARj2PUviRwoULbL
GpX3JLX3uPYvWUO+s40f+GBYdSG6fHTQq/shz1GuFhujRX1bUmdtXeTwjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVLV92n5e4mGp4m23Hta2MMh6NQMB8GA1UdIwQY
MBaAFN4ukXMV8Kh4sh/BOdSaghqt3DyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYt
ZjhkNjVjOTgzNzQ0LzEvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYtZjhkNjVjOTgzNzQ0
LzEvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbHLOlh7
60oGdbuvvaB8XG0kcOmPM7FtCAeGPL8cjvpXMq7SjBnXSTHcj75NmwfaFJTE4GNw
RlTdFX92xoMOjks/934kB9IdzuWIWmbBlvteoVwjgTc5VdNlIYJU4f5Ka/xh9pIP
nxC919CrCBNnPx7zKQYX97xz7SgIiDXc5nPZzUbZ4lVv+NOBAoV/twmRXyBCFhgM
XNA0kck1nQUjA+J6/EkrSS8AW5RIPgkfU4OuUC7L0d7Sd094WAF5JSSjhqSdTBzR
XYdHtb8C5uIkPyG1rdDzVAbnKRNa9PMJL0oxU38D4UkwbC76UCnWpJNO9qV5DkL2
/CI7hPn3pGZs1A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:31 2026 by rpki-client