Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
File: 3liIYKFLOUpzUSmEKu-tGnBKMoc.mft (raw, json)
Hash identifier: wF9eTotowVFEVujttKGCvUC07BevTz0px/e2m/Mwr18=
Subject key identifier: 5A:13:46:6D:C7:5D:92:39:16:D6:E7:5B:14:2B:9C:F8:EF:12:68:C2
Authority key identifier: DE:58:88:60:A1:4B:39:4A:73:51:29:84:2A:EF:AD:1A:70:4A:32:87
Certificate issuer: /CN=de588860a14b394a735129842aefad1a704a3287
Certificate serial: 019D37C0A210A268DCE9C04CCACDA237925A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
Manifest number: 01A8
Signing time: Sun 29 Mar 2026 04:01:04 +0000
Manifest this update: Sun 29 Mar 2026 04:01:04 +0000
Manifest next update: Mon 30 Mar 2026 04:01:04 +0000
Files and hashes: 1: 3liIYKFLOUpzUSmEKu-tGnBKMoc.crl (hash: oLlOn0BweX7oG+ZHAtC1SQivqhJvPOA7veauSQacDF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a2:10:a2:68:dc:e9:c0:4c:ca:cd:a2:37:92:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de588860a14b394a735129842aefad1a704a3287
Validity
Not Before: Mar 29 04:01:04 2026 GMT
Not After : Mar 30 04:01:04 2026 GMT
Subject: CN=5a13466dc75d923916d6e75b142b9cf8ef1268c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:79:80:08:1b:25:7d:a2:f9:9c:88:e3:57:
d5:d2:3e:a4:52:b0:45:37:08:3f:c8:41:bc:c5:4b:
35:68:09:27:4a:87:77:e1:c2:b4:00:35:5c:8b:c9:
7e:5a:02:6a:51:b4:94:46:4b:ff:c0:21:b0:3e:a2:
ab:10:3f:b7:91:14:30:29:f4:ce:bb:c6:10:9c:85:
4d:a7:9c:ef:fd:6f:dc:38:e7:e4:5a:e9:41:d1:9a:
67:c1:54:17:8d:2e:f3:02:c1:14:cc:4e:f0:72:e4:
92:3a:11:32:91:28:5f:6a:c4:aa:93:02:9e:91:c7:
db:5f:96:9c:6f:64:ee:de:14:be:e7:df:47:16:02:
b4:a4:91:6f:e7:39:44:cb:e3:a6:48:6d:f3:b1:7b:
82:20:cf:99:76:40:6d:f3:61:93:f2:02:d5:b2:68:
47:f4:01:c6:66:66:a9:3c:89:08:95:8b:9b:03:05:
1d:6e:37:9b:7a:c3:1c:82:ce:f5:81:77:b0:36:e0:
ea:7e:e1:07:5a:70:11:60:b2:66:1d:de:be:c3:7e:
f7:3b:e7:98:74:c1:be:1d:18:48:cd:6d:00:a0:20:
4f:46:00:03:c5:49:b7:e2:85:0e:da:ce:73:04:ee:
28:88:95:06:55:8c:c0:b0:b9:77:a3:37:6a:78:34:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:13:46:6D:C7:5D:92:39:16:D6:E7:5B:14:2B:9C:F8:EF:12:68:C2
X509v3 Authority Key Identifier:
keyid:DE:58:88:60:A1:4B:39:4A:73:51:29:84:2A:EF:AD:1A:70:4A:32:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:59:7c:50:e7:d9:ec:e7:49:6d:14:d1:a5:ea:41:f3:5f:f1:
58:30:6c:fe:a1:65:d2:67:33:4d:e4:8a:fc:65:c4:8a:5b:1b:
60:3d:6e:7a:25:65:90:cc:ec:71:34:5b:63:dd:ec:1e:bb:95:
b3:0d:3d:ec:8a:bb:54:ed:a8:72:c0:42:04:79:c0:c7:e9:d6:
03:fa:ca:9b:45:78:d1:9e:1a:ca:e1:2c:bd:fa:2e:bf:79:a8:
ec:4f:42:dc:74:30:5e:6c:ed:d1:d7:b3:75:79:5a:a1:36:b3:
34:78:26:98:9d:89:02:d4:e7:f1:ca:7d:53:24:94:a2:6f:5a:
9e:09:64:0d:f4:b4:af:b6:db:ef:05:11:a0:88:51:bd:9a:af:
1b:1f:1a:5d:86:82:c7:30:01:95:d0:05:c2:13:8b:63:64:d7:
c8:db:d0:cc:cd:44:ea:aa:cb:07:30:44:3f:af:af:b2:ba:56:
e6:db:a3:77:08:9b:af:61:b7:32:f5:d8:69:57:9a:20:c3:8d:
5e:38:08:a3:22:0f:77:58:eb:91:5a:88:63:3f:41:dc:a6:f6:
ff:a8:a5:71:c1:b1:6b:37:d1:af:d7:2f:fc:fd:01:a8:c7:e6:
a6:37:93:b4:9f:58:9e:e6:18:be:aa:40:f9:96:15:3f:68:d7:
40:7b:2b:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wKIQomjc6cBMys2iN5JaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTg4ODYwYTE0YjM5NGE3MzUxMjk4NDJhZWZhZDFhNzA0
YTMyODcwHhcNMjYwMzI5MDQwMTA0WhcNMjYwMzMwMDQwMTA0WjAzMTEwLwYDVQQD
Eyg1YTEzNDY2ZGM3NWQ5MjM5MTZkNmU3NWIxNDJiOWNmOGVmMTI2OGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLZ5gAgbJX2i+ZyI41fV0j6kUrBF
Nwg/yEG8xUs1aAknSod34cK0ADVci8l+WgJqUbSURkv/wCGwPqKrED+3kRQwKfTO
u8YQnIVNp5zv/W/cOOfkWulB0ZpnwVQXjS7zAsEUzE7wcuSSOhEykShfasSqkwKe
kcfbX5acb2Tu3hS+599HFgK0pJFv5zlEy+OmSG3zsXuCIM+ZdkBt82GT8gLVsmhH
9AHGZmapPIkIlYubAwUdbjebesMcgs71gXewNuDqfuEHWnARYLJmHd6+w373O+eY
dMG+HRhIzW0AoCBPRgADxUm34oUO2s5zBO4oiJUGVYzAsLl3ozdqeDT4GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoTRm3HXZI5FtbnWxQrnPjvEmjCMB8GA1UdIwQY
MBaAFN5YiGChSzlKc1EphCrvrRpwSjKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xpSVlLRkxPVXB6VVNtRUt1LXRHbkJLTW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hNTcwMzYtZmE0Yi00NzE0LTgzNDAt
NjNmNjc5ZDdlZTFkLzEvM2xpSVlLRkxPVXB6VVNtRUt1LXRHbkJLTW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hNTcwMzYtZmE0Yi00NzE0LTgzNDAtNjNmNjc5ZDdlZTFk
LzEvM2xpSVlLRkxPVXB6VVNtRUt1LXRHbkJLTW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1l8UOfZ
7OdJbRTRpepB81/xWDBs/qFl0mczTeSK/GXEilsbYD1ueiVlkMzscTRbY93sHruV
sw097Iq7VO2ocsBCBHnAx+nWA/rKm0V40Z4ayuEsvfouv3mo7E9C3HQwXmzt0dez
dXlaoTazNHgmmJ2JAtTn8cp9UySUom9anglkDfS0r7bb7wURoIhRvZqvGx8aXYaC
xzABldAFwhOLY2TXyNvQzM1E6qrLBzBEP6+vsrpW5tujdwibr2G3MvXYaVeaIMON
XjgIoyIPd1jrkVqIYz9B3Kb2/6ilccGxazfRr9cv/P0BqMfmpjeTtJ9YnuYYvqpA
+ZYVP2jXQHsrTw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:36 2026 by rpki-client