Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier: KGuN9Y9W5aL5O+zGu1IHMrkso5mRiJ8iFkeh7nAD+wA=
Subject key identifier: 45:7B:FC:5B:C4:B5:C8:65:C2:90:39:45:90:72:B8:59:FB:67:16:00
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial: 019CAA58B81CF8E4404C254774A130B8EDC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number: 1488
Signing time: Sun 01 Mar 2026 17:01:06 +0000
Manifest this update: Sun 01 Mar 2026 17:01:06 +0000
Manifest next update: Mon 02 Mar 2026 17:01:06 +0000
Files and hashes: 1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: cw3AlpKSiSFfuF8MRc3UGFQTjOSVXWD3XNbH8LYPYpw=)
2: 7cYGhHG7YtiE08uGuW1-X_rHKII.roa (hash: hmnCIat4n3k5p2akfmzZ49cT/kokW1B90E1WUFaEO78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b8:1c:f8:e4:40:4c:25:47:74:a1:30:b8:ed:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
Validity
Not Before: Mar 1 17:01:06 2026 GMT
Not After : Mar 2 17:01:06 2026 GMT
Subject: CN=457bfc5bc4b5c865c29039459072b859fb671600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:fc:51:b6:c1:b4:ba:8d:74:5a:7c:34:90:
b5:d7:8b:99:b1:36:1e:03:20:e4:ec:ec:64:39:ef:
cd:1f:27:41:80:5e:15:bd:bc:2d:c1:83:8f:73:56:
f1:01:f7:5c:58:0d:5d:d0:16:37:ab:4a:5e:56:1a:
4a:2f:c2:de:8a:ec:e8:a3:61:56:d9:47:ba:d2:7a:
a7:c3:c1:a5:be:0b:b5:82:0b:af:2c:96:d2:57:0c:
c4:fa:8f:43:7a:c4:f9:c2:57:d0:1c:7d:8d:c5:12:
9b:e2:18:fb:8c:f8:b6:e6:ab:e8:77:c9:c7:fd:a3:
a8:87:df:44:73:37:7b:b9:fe:55:48:f7:50:c2:29:
ed:2a:a3:8b:67:65:d1:ce:74:db:c2:ba:9e:7f:55:
7e:40:cb:e4:0b:ef:f4:83:ae:43:b9:cc:45:4f:03:
bb:ee:a9:21:b9:da:5c:38:cb:40:8a:c4:c7:2f:29:
e6:cd:b4:54:a0:9d:d7:cb:9d:e2:05:71:69:74:45:
60:d0:b9:99:a0:07:b6:22:91:1d:b1:2d:25:ac:77:
53:d1:69:c4:db:70:f0:19:6f:64:d8:ea:3d:c8:bc:
a2:c7:2c:83:61:77:ea:7d:6c:a8:79:23:7f:e8:6a:
f4:93:58:d0:e6:88:e6:ba:4b:22:22:6f:ec:f0:20:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7B:FC:5B:C4:B5:C8:65:C2:90:39:45:90:72:B8:59:FB:67:16:00
X509v3 Authority Key Identifier:
keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8d:86:e8:64:f6:50:1d:9d:b9:e9:86:01:01:cb:cd:de:b0:
8c:40:61:72:ab:76:94:ec:ae:13:83:d6:41:e6:47:a3:e9:c7:
a7:a3:49:42:d3:69:1b:83:67:fb:1d:af:05:ee:3a:ba:e5:64:
10:b0:fd:ec:17:4a:10:9e:89:84:2b:78:ca:d0:48:45:2f:5e:
a1:53:38:d6:e8:6e:3a:5a:e6:09:43:da:e3:59:ad:90:1b:fa:
ec:3c:1f:cd:74:0b:1d:4e:5f:a7:fc:f4:45:4e:0e:f2:e1:f7:
76:0e:68:b9:94:79:95:b9:70:91:08:d1:ab:b4:73:0d:73:8d:
b9:70:73:3b:59:a5:c0:01:eb:dc:49:57:2d:52:98:20:07:93:
49:4a:5a:59:3e:da:ff:62:3e:07:b5:b3:59:51:ec:d4:1a:55:
57:ac:8c:13:90:b4:a9:5e:32:5e:91:34:10:48:55:e6:5a:0d:
6c:32:0a:c2:d9:6b:ba:33:df:4e:f5:b9:56:60:44:b4:36:af:
ef:0e:27:08:d9:4f:0d:41:c7:dc:1a:89:62:a5:74:e6:13:23:
b2:d1:58:c0:17:74:ea:01:66:55:7b:18:bc:3c:44:9c:05:e8:
ad:7e:16:a4:74:fd:85:01:1b:6f:6f:19:8b:80:ea:1c:d1:a9:
81:91:9e:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWLgc+ORATCVHdKEwuO3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWI1NDg3NjJjN2Q0Y2FjY2I2MTZkODE5Y2U5NWNmNjI3
YjIwMjEwHhcNMjYwMzAxMTcwMTA2WhcNMjYwMzAyMTcwMTA2WjAzMTEwLwYDVQQD
Eyg0NTdiZmM1YmM0YjVjODY1YzI5MDM5NDU5MDcyYjg1OWZiNjcxNjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp38UbbBtLqNdFp8NJC114uZsTYe
AyDk7OxkOe/NHydBgF4VvbwtwYOPc1bxAfdcWA1d0BY3q0peVhpKL8Leiuzoo2FW
2Ue60nqnw8Glvgu1gguvLJbSVwzE+o9DesT5wlfQHH2NxRKb4hj7jPi25qvod8nH
/aOoh99Eczd7uf5VSPdQwintKqOLZ2XRznTbwrqef1V+QMvkC+/0g65DucxFTwO7
7qkhudpcOMtAisTHLynmzbRUoJ3Xy53iBXFpdEVg0LmZoAe2IpEdsS0lrHdT0WnE
23DwGW9k2Oo9yLyixyyDYXfqfWyoeSN/6Gr0k1jQ5ojmuksiIm/s8CBbbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEV7/FvEtchlwpA5RZByuFn7ZxYAMB8GA1UdIwQY
MBaAFNzrVIdix9TKzLYW2BnOlc9ieyAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM090VWgyTEgxTXJNdGhiWUdjNlZ6Mko3SUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iZTIyMzYtYzJiYS00NzhhLWFiYzMt
YjRjZWE1MTQ1NmI0LzEvM090VWgyTEgxTXJNdGhiWUdjNlZ6Mko3SUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iZTIyMzYtYzJiYS00NzhhLWFiYzMtYjRjZWE1MTQ1NmI0
LzEvM090VWgyTEgxTXJNdGhiWUdjNlZ6Mko3SUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQI2G6GT2
UB2duemGAQHLzd6wjEBhcqt2lOyuE4PWQeZHo+nHp6NJQtNpG4Nn+x2vBe46uuVk
ELD97BdKEJ6JhCt4ytBIRS9eoVM41uhuOlrmCUPa41mtkBv67DwfzXQLHU5fp/z0
RU4O8uH3dg5ouZR5lblwkQjRq7RzDXONuXBzO1mlwAHr3ElXLVKYIAeTSUpaWT7a
/2I+B7WzWVHs1BpVV6yME5C0qV4yXpE0EEhV5loNbDIKwtlrujPfTvW5VmBEtDav
7w4nCNlPDUHH3BqJYqV05hMjstFYwBd06gFmVXsYvDxEnAXorX4WpHT9hQEbb28Z
i4DqHNGpgZGesw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:48 2026 by rpki-client