Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: 3p0E6zO2wGzw4P6euCJDRnsWMKZAFDMhAZ7hVJ2FpQ4=
Subject key identifier: E8:C4:41:20:E5:D1:AA:0B:0A:63:7B:B6:82:35:D7:65:37:0A:21:7C
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 019D38658633C65915C7E7FFB865E0C811D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 07:01:10 +0000
Manifest this update: Sun 29 Mar 2026 07:01:10 +0000
Manifest next update: Mon 30 Mar 2026 07:01:10 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: BM0SD6NgxYqurkKwJzzHtPqFtl6fQBAEHSnf0+Uetxo=)
2: O-gxnsHzDhdYKwTNHTFr-Ch9dJM.roa (hash: kVKhuC0dJOQWPqNSK7n1W9Bj9SrxDJpJnAeLYtUm8Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:86:33:c6:59:15:c7:e7:ff:b8:65:e0:c8:11:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: Mar 29 07:01:10 2026 GMT
Not After : Mar 30 07:01:10 2026 GMT
Subject: CN=e8c44120e5d1aa0b0a637bb68235d765370a217c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:06:5a:65:a5:15:d3:12:83:ce:53:bc:9a:44:
e8:f3:43:cf:3b:a5:6a:af:a5:4b:d9:8c:a5:02:eb:
c6:ba:8f:43:45:5c:80:38:3b:52:ac:e1:88:27:df:
52:f3:37:15:3c:ef:4f:89:76:58:1a:f4:d6:2a:58:
28:c2:91:54:2a:e3:8c:d5:b7:ff:c0:b2:30:40:f4:
47:b3:70:f8:ab:67:ce:8e:7e:4c:fa:ca:e8:92:1c:
7b:02:d2:e8:18:42:ca:4e:fe:ff:a0:8f:37:d8:86:
92:58:fd:c7:6b:82:7d:72:07:11:db:7a:40:af:47:
df:d2:e6:4a:69:c2:fc:b7:c2:b7:1a:e1:93:ef:b7:
b2:2f:0f:fd:04:85:5c:5f:1f:d6:d4:fa:4a:34:2c:
41:4d:9d:4b:a9:e1:8f:80:d0:9d:92:fd:f6:0d:e6:
d0:91:6c:c2:3c:73:28:02:2e:a3:11:e1:ca:b2:b5:
d4:e0:c6:b0:c3:41:ba:20:09:56:5d:9f:a6:8c:10:
e1:e3:49:a6:5e:79:33:5d:3d:0b:22:08:a7:35:99:
2e:3f:d1:0e:ab:a7:1c:dc:11:36:c1:8f:f5:16:fc:
1e:dc:6f:76:29:9b:a8:26:65:2c:ca:5e:3a:62:5e:
4d:3f:76:89:84:9a:f5:1e:83:df:db:c9:fc:ec:46:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C4:41:20:E5:D1:AA:0B:0A:63:7B:B6:82:35:D7:65:37:0A:21:7C
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0d:2d:6f:27:02:29:8b:d2:8d:0a:54:c9:4c:3d:2d:d1:1e:
e7:93:59:51:76:f2:35:63:40:68:b4:16:ed:89:bf:ff:68:d9:
91:24:d2:fb:00:69:01:87:7a:e6:82:4e:25:43:d3:9d:90:36:
b3:13:81:fe:81:95:ef:d7:19:9b:94:4d:05:26:f7:a3:17:0d:
9c:81:ad:c1:74:24:2b:5f:88:a5:47:74:a9:12:30:94:d5:b7:
40:2f:3c:ba:f5:ad:0f:17:62:9b:80:13:3f:09:11:37:65:b1:
fe:56:f9:fa:e5:7b:02:9c:e5:62:b5:d1:ca:f5:f0:60:da:d8:
3a:23:0a:6b:3b:04:06:f6:82:eb:06:7a:aa:30:59:5c:52:0a:
4f:34:95:87:55:b8:62:fd:32:e0:dc:5f:e9:df:ac:e7:b9:d2:
9a:1d:c9:06:9e:94:71:8d:bf:95:a0:ac:da:9f:26:89:ab:d1:
21:f7:52:18:c5:b8:e7:a6:81:75:a2:ad:f8:19:d6:53:2e:e8:
3a:ec:9f:47:8a:fa:8c:c1:54:5a:c0:80:ec:9d:10:7a:14:a7:
0c:e2:df:e2:ca:17:aa:86:c6:1f:73:94:8e:a9:59:44:2c:ee:
36:d0:c1:92:39:dd:3b:e9:e9:b6:23:94:72:31:96:5f:58:52:
fb:f8:76:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZYYzxlkVx+f/uGXgyBHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTY3MGE2ZWQ0Yzc4ZmRkNzc2ODY3OTJmN2UwODc1OTg5
MDZmNzMwHhcNMjYwMzI5MDcwMTEwWhcNMjYwMzMwMDcwMTEwWjAzMTEwLwYDVQQD
EyhlOGM0NDEyMGU1ZDFhYTBiMGE2MzdiYjY4MjM1ZDc2NTM3MGEyMTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AZaZaUV0xKDzlO8mkTo80PPO6Vq
r6VL2YylAuvGuo9DRVyAODtSrOGIJ99S8zcVPO9PiXZYGvTWKlgowpFUKuOM1bf/
wLIwQPRHs3D4q2fOjn5M+srokhx7AtLoGELKTv7/oI832IaSWP3Ha4J9cgcR23pA
r0ff0uZKacL8t8K3GuGT77eyLw/9BIVcXx/W1PpKNCxBTZ1LqeGPgNCdkv32DebQ
kWzCPHMoAi6jEeHKsrXU4Maww0G6IAlWXZ+mjBDh40mmXnkzXT0LIginNZkuP9EO
q6cc3BE2wY/1Fvwe3G92KZuoJmUsyl46Yl5NP3aJhJr1HoPf28n87EbiOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjEQSDl0aoLCmN7toI112U3CiF8MB8GA1UdIwQY
MBaAFNzmcKbtTHj913aGeS9+CHWYkG9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9lMzE4MDQtNjI3MC00MjQ2LTkxMDAt
ZjA2ZTIzNDMyMjczLzEvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9lMzE4MDQtNjI3MC00MjQ2LTkxMDAtZjA2ZTIzNDMyMjcz
LzEvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQ0tbycC
KYvSjQpUyUw9LdEe55NZUXbyNWNAaLQW7Ym//2jZkSTS+wBpAYd65oJOJUPTnZA2
sxOB/oGV79cZm5RNBSb3oxcNnIGtwXQkK1+IpUd0qRIwlNW3QC88uvWtDxdim4AT
PwkRN2Wx/lb5+uV7ApzlYrXRyvXwYNrYOiMKazsEBvaC6wZ6qjBZXFIKTzSVh1W4
Yv0y4Nxf6d+s57nSmh3JBp6UcY2/laCs2p8miavRIfdSGMW456aBdaKt+BnWUy7o
OuyfR4r6jMFUWsCA7J0QehSnDOLf4soXqobGH3OUjqlZRCzuNtDBkjndO+nptiOU
cjGWX1hS+/h2nw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:10 2026 by rpki-client