Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier: zadIIp4ikyxbgihRXLD8wRgCx0BTygTwj9r1uKsDpYw=
Subject key identifier: 78:AF:EA:D6:BF:55:EF:18:61:7B:E8:E5:8A:38:F5:E8:13:12:D9:D4
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 019CAA90150008473B335E702BC054B71999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number: 1249
Signing time: Sun 01 Mar 2026 18:01:35 +0000
Manifest this update: Sun 01 Mar 2026 18:01:35 +0000
Manifest next update: Mon 02 Mar 2026 18:01:35 +0000
Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: LX2+0rTe3c4mZz2mGQ+SxnR9L38KyCD4yKOPa1ZlOzk=)
2: CnP7xic-J3ZlsEiL_ErvWxwtjH4.roa (hash: 5VuIA/sliXJSN13FjulNtyBF4Z5iaCwmwNeqLvTqwQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:15:00:08:47:3b:33:5e:70:2b:c0:54:b7:19:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Mar 1 18:01:35 2026 GMT
Not After : Mar 2 18:01:35 2026 GMT
Subject: CN=78afead6bf55ef18617be8e58a38f5e81312d9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:88:bf:34:18:39:56:e8:04:3a:3f:a4:b6:
13:42:f9:74:3c:0c:4d:27:bf:1a:c3:7c:bd:21:50:
9e:35:fd:22:87:08:e4:ad:99:10:d4:7b:42:01:d7:
2d:6f:7e:09:73:1d:c1:35:54:eb:f4:cc:9f:0a:2e:
28:5c:16:64:ea:de:5d:73:01:c3:32:59:56:c9:32:
55:5b:f1:ab:aa:14:f3:66:31:e1:7f:af:90:33:c0:
a6:8d:50:77:4a:cd:67:45:e2:18:21:d2:62:9f:e5:
3d:c3:ab:3a:9b:38:81:23:ed:e2:b1:79:00:61:7c:
7e:4b:08:c9:f2:05:01:b2:e7:f7:65:73:31:58:c1:
df:40:ed:1d:6d:8a:13:0d:4e:8f:7d:b2:86:79:fb:
f1:a8:c2:97:8f:90:9b:54:41:fe:05:92:ac:67:fb:
c6:b7:81:9d:3a:67:ab:62:bc:99:3e:d9:24:0a:e0:
32:bd:e7:4d:7a:88:d1:20:b0:e5:b6:6b:bb:fc:9f:
b3:a7:5a:02:e1:59:e6:01:b0:3b:7e:6f:97:c0:da:
93:a1:26:13:e3:97:75:57:a5:64:bc:eb:ad:59:da:
47:c6:a2:b0:9a:7b:5e:a6:2a:aa:71:e9:77:e5:b9:
df:e4:97:49:e1:50:92:02:08:53:20:92:36:81:f3:
99:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AF:EA:D6:BF:55:EF:18:61:7B:E8:E5:8A:38:F5:E8:13:12:D9:D4
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:16:5c:5d:23:dd:4f:49:71:a4:3b:2c:75:6a:53:ba:e1:ee:
13:bb:be:40:2d:c5:09:f0:4f:95:6b:9e:3e:f5:f4:f8:90:5a:
64:cd:ce:bb:c3:7c:4e:71:d5:5c:ae:e1:01:d2:cb:9e:9e:05:
c1:89:0d:3e:92:bf:2f:5e:0e:6c:2c:92:7e:4f:3b:b0:47:ad:
38:26:95:3d:33:c6:7a:c3:10:4f:ff:dc:a2:ce:a6:de:6a:c0:
d9:2f:15:52:04:01:29:fb:1c:9d:e2:c1:a8:98:fd:24:45:8d:
9c:6d:92:d5:f1:6c:d4:5d:fc:0a:a5:a0:9e:bd:96:fe:0d:b5:
5e:5a:1e:0f:a6:4f:c0:ad:cb:86:17:e8:bc:7e:41:b4:b5:c9:
f1:c9:33:6a:ac:26:04:2d:a5:f4:a3:5a:4e:13:24:2f:1b:2d:
7a:46:70:98:1e:0d:35:e9:29:ce:78:1f:96:b7:b9:45:cb:ff:
77:db:90:0e:af:ef:fa:2d:08:f0:b1:09:33:25:fb:4e:bc:8a:
f7:af:1c:5d:6a:0c:3e:ad:17:0e:6d:42:73:aa:6a:7f:fe:75:
c6:83:b6:f5:d8:90:3e:09:1f:3f:25:b8:da:51:f8:1c:cf:74:
35:7e:0d:97:f8:20:cc:05:e1:5f:4f:44:28:1a:c8:be:88:df:
52:bf:65:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqkBUACEc7M15wK8BUtxmZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNWUzNmYxNTlmNTc2OTg4ZmI0ZTUxZDQxMDFiYjg1ZDBk
MGM5ODMwHhcNMjYwMzAxMTgwMTM1WhcNMjYwMzAyMTgwMTM1WjAzMTEwLwYDVQQD
Eyg3OGFmZWFkNmJmNTVlZjE4NjE3YmU4ZTU4YTM4ZjVlODEzMTJkOWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe2IvzQYOVboBDo/pLYTQvl0PAxN
J78aw3y9IVCeNf0ihwjkrZkQ1HtCAdctb34Jcx3BNVTr9MyfCi4oXBZk6t5dcwHD
MllWyTJVW/GrqhTzZjHhf6+QM8CmjVB3Ss1nReIYIdJin+U9w6s6mziBI+3isXkA
YXx+SwjJ8gUBsuf3ZXMxWMHfQO0dbYoTDU6PfbKGefvxqMKXj5CbVEH+BZKsZ/vG
t4GdOmerYryZPtkkCuAyvedNeojRILDltmu7/J+zp1oC4VnmAbA7fm+XwNqToSYT
45d1V6VkvOutWdpHxqKwmntepiqqcel35bnf5JdJ4VCSAghTIJI2gfOZdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiv6ta/Ve8YYXvo5Yo49egTEtnUMB8GA1UdIwQY
MBaAFN5eNvFZ9XaYj7TlHUEBu4XQ0MmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAt
ZWJiYmI0NDQyODZlLzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAtZWJiYmI0NDQyODZl
LzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRZcXSPd
T0lxpDssdWpTuuHuE7u+QC3FCfBPlWuePvX0+JBaZM3Ou8N8TnHVXK7hAdLLnp4F
wYkNPpK/L14ObCySfk87sEetOCaVPTPGesMQT//cos6m3mrA2S8VUgQBKfscneLB
qJj9JEWNnG2S1fFs1F38CqWgnr2W/g21XloeD6ZPwK3LhhfovH5BtLXJ8ckzaqwm
BC2l9KNaThMkLxstekZwmB4NNekpzngflre5Rcv/d9uQDq/v+i0I8LEJMyX7TryK
968cXWoMPq0XDm1Cc6pqf/51xoO29diQPgkfPyW42lH4HM90NX4Nl/ggzAXhX09E
KBrIvojfUr9lQg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:15 2026 by rpki-client