Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
File: g-3hynyzX11h-NWctQNumT6kO3A.mft (raw, json)
Hash identifier: KWj37cYd/5rp9as1Lc7vVk1E6oVtTK+7Zm2ZEHv4yGk=
Subject key identifier: 42:77:2A:4A:88:41:F8:81:17:A2:56:E3:B6:47:72:64:67:52:12:04
Authority key identifier: 83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
Certificate issuer: /CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Certificate serial: 019CAB6B8B0BA71C5218768C245911589377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
Manifest number: 106D
Signing time: Sun 01 Mar 2026 22:01:17 +0000
Manifest this update: Sun 01 Mar 2026 22:01:17 +0000
Manifest next update: Mon 02 Mar 2026 22:01:17 +0000
Files and hashes: 1: g-3hynyzX11h-NWctQNumT6kO3A.crl (hash: JXGZ5DAocYUPLFKJg8L4FdkLx9rBnOk99BUto6T0szs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:8b:0b:a7:1c:52:18:76:8c:24:59:11:58:93:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Validity
Not Before: Mar 1 22:01:17 2026 GMT
Not After : Mar 2 22:01:17 2026 GMT
Subject: CN=42772a4a8841f88117a256e3b647726467521204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:25:6a:22:d3:3f:50:f1:2c:7b:b9:6e:36:
1e:4e:b5:43:08:61:09:83:a8:f2:4f:41:2f:15:44:
d1:1c:1b:39:e6:01:76:c3:86:4f:d2:6f:75:12:02:
65:39:ba:92:48:a1:5c:a5:7a:19:a5:79:a0:e9:3d:
c8:a5:cd:2e:dd:7e:d3:b6:25:c1:56:e0:56:44:14:
ae:d8:e8:1e:09:f4:3a:32:24:d8:d3:bf:24:63:8b:
5a:4e:fa:2a:ac:6a:2f:96:3a:fa:59:e4:0f:29:b0:
f0:86:8b:a8:00:b1:aa:c1:df:64:ce:86:6a:46:58:
21:07:16:44:7d:8a:cc:be:41:2c:1f:8e:79:50:02:
2d:12:7f:51:bf:1d:0f:f3:3b:26:e6:29:cf:12:09:
9a:d3:4c:a5:89:0c:8a:91:dd:83:07:c2:77:a4:9f:
2e:fa:41:bc:4a:0e:72:6b:17:cd:44:8c:0a:f5:3b:
aa:1c:7d:47:2c:cf:f4:e0:64:d8:15:48:14:ce:2b:
3e:a1:3e:b0:a5:e7:7a:6b:3f:55:da:8e:5d:cc:f9:
98:d4:29:28:f8:e1:f6:86:78:ff:3d:68:59:27:c1:
eb:f5:fc:04:e1:59:13:84:53:57:59:38:6b:1b:0e:
6b:bf:d8:5d:80:14:ac:e0:f6:db:4f:ff:fe:51:7d:
af:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:77:2A:4A:88:41:F8:81:17:A2:56:E3:B6:47:72:64:67:52:12:04
X509v3 Authority Key Identifier:
keyid:83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a6:31:74:86:ca:1d:06:cb:ac:bf:98:6b:cd:21:11:9c:aa:
d3:ca:30:b1:fd:b5:03:9c:d0:48:83:34:76:33:25:1a:f6:15:
bd:53:74:e7:11:c1:4c:9c:70:7b:82:a4:69:d8:f2:18:cb:83:
ca:fc:70:fa:75:1a:5f:2c:d6:ef:f9:2c:88:34:bb:14:7c:d6:
81:b5:ca:21:8e:bc:a0:3d:23:a0:a1:3e:4b:f5:05:9b:a0:97:
6f:0b:9e:6a:d9:02:5e:f9:7b:f4:3f:94:bf:81:29:48:f9:f1:
d8:4d:5d:5d:c7:a9:2b:96:1b:0f:da:57:6a:68:50:e2:32:0a:
a6:17:c7:0f:a6:34:ea:7f:82:a7:c3:32:10:be:45:e6:dd:5a:
0d:65:28:3d:67:cb:b6:05:dd:96:fb:5f:88:b8:2c:b7:42:b7:
ef:3e:d3:5a:7e:9f:f1:b4:ac:48:ea:b9:85:45:f4:58:dc:0f:
50:0a:42:1d:86:f2:38:f6:f9:42:4a:c8:c9:65:b6:d2:8b:42:
b9:4d:d2:32:27:62:49:1c:9f:9d:e6:83:4e:df:4f:b8:e6:75:
35:18:4c:21:7e:44:ac:98:a2:cb:08:f0:10:bd:83:5e:b7:7f:
4a:90:dd:39:b1:77:18:16:99:d3:d5:8f:93:96:69:7e:e5:67:
b6:11:26:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra4sLpxxSGHaMJFkRWJN3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZWRlMWNhN2NiMzVmNWQ2MWY4ZDU5Y2I1MDM2ZTk5M2Vh
NDNiNzAwHhcNMjYwMzAxMjIwMTE3WhcNMjYwMzAyMjIwMTE3WjAzMTEwLwYDVQQD
Eyg0Mjc3MmE0YTg4NDFmODgxMTdhMjU2ZTNiNjQ3NzI2NDY3NTIxMjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUclaiLTP1DxLHu5bjYeTrVDCGEJ
g6jyT0EvFUTRHBs55gF2w4ZP0m91EgJlObqSSKFcpXoZpXmg6T3Ipc0u3X7TtiXB
VuBWRBSu2OgeCfQ6MiTY078kY4taTvoqrGovljr6WeQPKbDwhouoALGqwd9kzoZq
RlghBxZEfYrMvkEsH455UAItEn9Rvx0P8zsm5inPEgma00yliQyKkd2DB8J3pJ8u
+kG8Sg5yaxfNRIwK9TuqHH1HLM/04GTYFUgUzis+oT6wped6az9V2o5dzPmY1Cko
+OH2hnj/PWhZJ8Hr9fwE4VkThFNXWThrGw5rv9hdgBSs4PbbT//+UX2v6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJ3KkqIQfiBF6JW47ZHcmRnUhIEMB8GA1UdIwQY
MBaAFIPt4cp8s19dYfjVnLUDbpk+pDtwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy0zaHlueXpYMTFoLU5XY3RRTnVtVDZrTzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mM2ViMTktODVlZS00ODdmLWFkMTIt
OGIzNjYwZWQ1ZWQwLzEvZy0zaHlueXpYMTFoLU5XY3RRTnVtVDZrTzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9mM2ViMTktODVlZS00ODdmLWFkMTItOGIzNjYwZWQ1ZWQw
LzEvZy0zaHlueXpYMTFoLU5XY3RRTnVtVDZrTzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvqYxdIbK
HQbLrL+Ya80hEZyq08owsf21A5zQSIM0djMlGvYVvVN05xHBTJxwe4KkadjyGMuD
yvxw+nUaXyzW7/ksiDS7FHzWgbXKIY68oD0joKE+S/UFm6CXbwueatkCXvl79D+U
v4EpSPnx2E1dXcepK5YbD9pXamhQ4jIKphfHD6Y06n+Cp8MyEL5F5t1aDWUoPWfL
tgXdlvtfiLgst0K37z7TWn6f8bSsSOq5hUX0WNwPUApCHYbyOPb5QkrIyWW20otC
uU3SMidiSRyfneaDTt9PuOZ1NRhMIX5ErJiiywjwEL2DXrd/SpDdObF3GBaZ09WP
k5ZpfuVnthEmZw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:41 2026 by rpki-client