Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File: 3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier: DePZXq8By5LM7kZUJ8Q2lNmfVO5F4JrUPfOr7aFbT5E=
Subject key identifier: 50:95:B0:62:F1:EF:7C:0E:0C:62:DC:B8:04:8D:34:6E:90:FD:D6:40
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer: /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial: 019CADC77BF0D8BFA3876A196849CF8F9486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number: 0CBD
Signing time: Mon 02 Mar 2026 09:00:57 +0000
Manifest this update: Mon 02 Mar 2026 09:00:57 +0000
Manifest next update: Tue 03 Mar 2026 09:00:57 +0000
Files and hashes: 1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: mwrYrcwvZVDP6BBsHHjdmol9VT0NRKBt2aRcBk+oHWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:7b:f0:d8:bf:a3:87:6a:19:68:49:cf:8f:94:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Validity
Not Before: Mar 2 09:00:57 2026 GMT
Not After : Mar 3 09:00:57 2026 GMT
Subject: CN=5095b062f1ef7c0e0c62dcb8048d346e90fdd640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:55:ee:f0:a8:22:ae:2e:98:9e:71:6c:5f:
b1:12:69:0f:f2:eb:2e:f2:3f:48:3f:c0:cb:e3:b0:
d8:48:d0:0c:96:46:cd:b0:61:0b:f0:88:ff:f9:58:
6d:10:18:32:63:51:ff:2a:36:82:46:a3:c9:1c:bd:
bb:3d:29:0c:d6:eb:ca:a8:ee:98:2e:d5:ca:ee:14:
7a:5e:55:44:7e:7a:d2:f0:5e:13:70:69:41:9b:5e:
81:a2:5f:86:cf:88:b6:b5:99:b4:8f:82:10:e5:4f:
96:6b:8d:af:d9:91:e5:71:a6:eb:4f:04:d1:fe:55:
1e:16:38:bd:c2:8d:df:4c:a1:3d:a1:89:a0:1b:29:
9a:df:95:58:b6:02:55:32:a6:d5:28:cb:64:09:24:
f8:cb:e6:1d:00:5b:8c:42:50:ce:2a:b2:75:53:d0:
68:37:a6:ce:12:a3:0e:be:d9:d5:4e:fc:5c:12:9a:
33:fe:68:d9:64:fa:47:2e:c0:eb:38:36:66:f3:e0:
fd:8e:38:e9:4a:f5:57:ef:6d:66:2e:1a:8e:fd:e4:
cb:f0:b0:6c:33:11:2e:c8:ac:ad:39:86:27:b6:f7:
32:ec:e1:e7:e7:a9:3c:f3:00:55:d0:fa:4f:9a:33:
98:02:7d:8e:4e:cc:37:1f:3b:1a:03:8d:58:54:5b:
9a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:95:B0:62:F1:EF:7C:0E:0C:62:DC:B8:04:8D:34:6E:90:FD:D6:40
X509v3 Authority Key Identifier:
keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0b:1f:7a:87:9f:f1:dd:ef:4a:a8:48:ae:ac:fd:8b:d7:0f:
80:84:72:b4:da:ab:f8:ea:34:cc:7f:3c:5c:de:42:cb:c2:f1:
1e:55:41:85:b3:d3:b2:a0:7a:9d:9d:06:e8:15:1a:47:98:7f:
29:bb:b0:2e:fa:93:0d:d9:a3:57:d4:47:ee:55:7c:46:40:03:
63:dd:3e:85:b6:f9:55:57:2b:6f:99:6e:25:0e:21:2b:35:97:
01:58:aa:25:3b:28:54:ab:88:80:48:3b:9f:27:58:6c:13:31:
1e:8e:77:dc:55:df:70:6f:0d:e7:8b:a9:6c:b0:6b:d3:4b:42:
1d:85:6d:cf:56:5d:bb:58:4e:2f:4c:c2:ca:68:b0:6d:c7:f0:
94:bf:57:e3:21:64:1d:d9:6a:28:92:bd:0f:e8:ff:72:f3:98:
77:51:26:78:52:d0:f3:68:d0:b8:41:26:24:6f:c0:f4:2f:45:
40:ae:00:10:4e:e8:2e:ab:05:5e:38:1a:5e:15:6c:0b:40:0a:
1e:c5:5b:22:ba:7e:65:ad:c9:66:0e:56:ce:a3:8b:17:20:06:
ad:c7:c3:16:91:bd:14:3d:96:70:b3:3b:a0:67:f6:02:4b:5d:
27:38:2c:47:8d:2e:66:56:0d:24:5f:c8:35:08:c0:6f:ed:2d:
25:21:59:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx3vw2L+jh2oZaEnPj5SGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNTdhMWY5YzEyMWM5YzJiNmY5NGQzOGE3NWZiZmRjYzU0
ZGYwNWIwHhcNMjYwMzAyMDkwMDU3WhcNMjYwMzAzMDkwMDU3WjAzMTEwLwYDVQQD
Eyg1MDk1YjA2MmYxZWY3YzBlMGM2MmRjYjgwNDhkMzQ2ZTkwZmRkNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC9V7vCoIq4umJ5xbF+xEmkP8usu
8j9IP8DL47DYSNAMlkbNsGEL8Ij/+VhtEBgyY1H/KjaCRqPJHL27PSkM1uvKqO6Y
LtXK7hR6XlVEfnrS8F4TcGlBm16Bol+Gz4i2tZm0j4IQ5U+Wa42v2ZHlcabrTwTR
/lUeFji9wo3fTKE9oYmgGyma35VYtgJVMqbVKMtkCST4y+YdAFuMQlDOKrJ1U9Bo
N6bOEqMOvtnVTvxcEpoz/mjZZPpHLsDrODZm8+D9jjjpSvVX721mLhqO/eTL8LBs
MxEuyKytOYYntvcy7OHn56k88wBV0PpPmjOYAn2OTsw3HzsaA41YVFuaWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCVsGLx73wODGLcuASNNG6Q/dZAMB8GA1UdIwQY
MBaAFNxXofnBIcnCtvlNOKdfv9zFTfBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZTY3NjUtODZlMi00MDEwLThmOGUt
ZGQxMTNjNjk4ZDEyLzEvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wZTY3NjUtODZlMi00MDEwLThmOGUtZGQxMTNjNjk4ZDEy
LzEvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgsfeoef
8d3vSqhIrqz9i9cPgIRytNqr+Oo0zH88XN5Cy8LxHlVBhbPTsqB6nZ0G6BUaR5h/
KbuwLvqTDdmjV9RH7lV8RkADY90+hbb5VVcrb5luJQ4hKzWXAViqJTsoVKuIgEg7
nydYbBMxHo533FXfcG8N54upbLBr00tCHYVtz1Zdu1hOL0zCymiwbcfwlL9X4yFk
HdlqKJK9D+j/cvOYd1EmeFLQ82jQuEEmJG/A9C9FQK4AEE7oLqsFXjgaXhVsC0AK
HsVbIrp+Za3JZg5WzqOLFyAGrcfDFpG9FD2WcLM7oGf2AktdJzgsR40uZlYNJF/I
NQjAb+0tJSFZBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:35 2026 by rpki-client