Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier: 5YiPfjnkO6cc4GCtbiv46pNJlvQg+ksaXTxfXvge7DE=
Subject key identifier: 89:54:3E:F5:F2:26:4E:55:27:73:2C:1F:B7:7F:28:DD:27:32:3E:08
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial: 019D3A1C6CCDEE3128C5B68D3BD4BE8FFDBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 15:00:34 +0000
Manifest this update: Sun 29 Mar 2026 15:00:34 +0000
Manifest next update: Mon 30 Mar 2026 15:00:34 +0000
Files and hashes: 1: P7j9IEWadDPaQ_nsO00HdXrOIT4.roa (hash: czQbKrK6LqGgUhK9pjsed0KgnTQUiTmpJ6IrbxHUhzM=)
2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: T8DzybYtDCHFeQbiCX6zh8qxliGxpHoIoqd8ekS8XhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:6c:cd:ee:31:28:c5:b6:8d:3b:d4:be:8f:fd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Validity
Not Before: Mar 29 15:00:34 2026 GMT
Not After : Mar 30 15:00:34 2026 GMT
Subject: CN=89543ef5f2264e5527732c1fb77f28dd27323e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:2a:99:72:9e:37:16:26:69:b5:fe:eb:58:
91:1d:25:6a:70:ed:57:58:76:eb:15:a9:7d:e0:e1:
a6:4b:e1:01:ca:cf:a6:f5:9c:3e:10:81:44:3d:39:
f8:ee:e2:c7:ac:24:08:d8:6f:ee:89:cb:4c:29:5e:
51:0f:7f:3f:d3:a8:3f:6e:00:9f:bf:22:82:e3:0f:
fa:31:4b:55:48:96:f4:42:f7:d7:f1:36:79:4e:92:
f7:ad:87:4a:d8:65:cc:73:e2:93:ee:44:90:0d:d7:
e5:d2:ec:ab:af:06:62:0c:60:76:5e:03:93:d7:66:
d1:a9:36:e3:be:99:b1:47:6d:1c:88:eb:1a:23:39:
d4:32:d5:d7:f1:41:62:47:40:f2:c4:72:94:f3:a5:
eb:9d:4e:ce:0c:13:8d:7e:06:78:a8:86:a9:34:79:
73:9e:05:5b:e9:e5:34:9e:4d:a4:56:90:69:78:6e:
74:d6:f2:23:90:86:bb:50:97:65:3a:47:b7:ae:88:
8d:67:6d:4d:66:cf:10:18:fa:02:84:dc:65:b0:02:
e9:ea:42:2e:c6:dd:a3:7c:ae:66:f2:ab:b0:f7:9e:
ed:e5:a1:f7:bf:ab:0c:99:b6:65:d7:38:4e:ec:68:
79:04:d5:3c:8f:37:d3:7a:af:5f:6d:99:38:57:d2:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:54:3E:F5:F2:26:4E:55:27:73:2C:1F:B7:7F:28:DD:27:32:3E:08
X509v3 Authority Key Identifier:
keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:19:bb:51:97:2d:e1:0d:a9:1a:03:63:79:ea:47:c4:6c:98:
8e:ac:e9:af:ff:06:39:f9:0c:65:80:7f:e3:d4:a8:60:d7:a6:
d3:e7:23:4c:8c:21:d0:79:45:51:11:a7:a7:1e:41:ab:e9:27:
8f:e2:78:2e:bd:32:3b:79:e5:4f:d5:7e:31:ce:d4:88:95:ce:
1a:65:c2:f1:e6:7d:de:d6:50:82:ed:93:18:30:b2:ae:44:65:
d4:f0:c3:36:3a:77:78:db:57:8e:ab:40:6f:60:1a:7b:27:63:
b7:1c:87:e9:9a:70:61:a8:15:54:1c:e3:7f:ea:61:6d:ff:82:
06:b7:0d:5b:c9:33:96:f2:1f:02:a4:cf:29:8f:4a:a5:d7:55:
d9:18:5f:f6:36:5f:87:f5:5b:b4:c6:5d:8b:73:82:63:2b:4a:
53:ba:84:46:78:eb:e7:b2:bd:75:37:fe:28:15:68:1d:a4:f1:
ea:e7:7e:31:a5:f7:74:9a:18:2c:69:25:d6:2e:4e:ab:bc:76:
a3:22:dc:93:1e:54:83:5b:db:8b:c9:eb:43:8b:ae:7e:fd:a1:
30:29:c8:e9:1f:0a:b4:e2:a4:c9:dc:70:ec:d9:f4:b7:9e:99:
d0:01:83:67:97:eb:19:bb:b7:d0:f8:d1:4f:97:04:a6:4b:38:
d8:ec:0c:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HGzN7jEoxbaNO9S+j/26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNzQ5ZWExYjk5NzliZmYyY2QzMDY2OTQ4ZjgzNWRkNTRj
ZWRlYzAwHhcNMjYwMzI5MTUwMDM0WhcNMjYwMzMwMTUwMDM0WjAzMTEwLwYDVQQD
Eyg4OTU0M2VmNWYyMjY0ZTU1Mjc3MzJjMWZiNzdmMjhkZDI3MzIzZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE4qmXKeNxYmabX+61iRHSVqcO1X
WHbrFal94OGmS+EBys+m9Zw+EIFEPTn47uLHrCQI2G/uictMKV5RD38/06g/bgCf
vyKC4w/6MUtVSJb0QvfX8TZ5TpL3rYdK2GXMc+KT7kSQDdfl0uyrrwZiDGB2XgOT
12bRqTbjvpmxR20ciOsaIznUMtXX8UFiR0DyxHKU86XrnU7ODBONfgZ4qIapNHlz
ngVb6eU0nk2kVpBpeG501vIjkIa7UJdlOke3roiNZ21NZs8QGPoChNxlsALp6kIu
xt2jfK5m8quw957t5aH3v6sMmbZl1zhO7Gh5BNU8jzfTeq9fbZk4V9IeGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlUPvXyJk5VJ3MsH7d/KN0nMj4IMB8GA1UdIwQY
MBaAFLN0nqG5l5v/LNMGaUj4Nd1Uzt7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hYzM3YzMtY2M0Zi00NDU2LWI5NTgt
ZTM1OTA5MDE4YTMzLzEvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9hYzM3YzMtY2M0Zi00NDU2LWI5NTgtZTM1OTA5MDE4YTMz
LzEvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORm7UZct
4Q2pGgNjeepHxGyYjqzpr/8GOfkMZYB/49SoYNem0+cjTIwh0HlFURGnpx5Bq+kn
j+J4Lr0yO3nlT9V+Mc7UiJXOGmXC8eZ93tZQgu2TGDCyrkRl1PDDNjp3eNtXjqtA
b2AaeydjtxyH6ZpwYagVVBzjf+phbf+CBrcNW8kzlvIfAqTPKY9KpddV2Rhf9jZf
h/VbtMZdi3OCYytKU7qERnjr57K9dTf+KBVoHaTx6ud+MaX3dJoYLGkl1i5Oq7x2
oyLckx5Ug1vbi8nrQ4uufv2hMCnI6R8KtOKkydxw7Nn0t56Z0AGDZ5frGbu30PjR
T5cEpks42OwMhg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:53 2026 by rpki-client