Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
File: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft (raw, json)
Hash identifier: NsDCH6dvot4lf+42vDu4uHyYsh1Br2+qurPpiAoJmLo=
Subject key identifier: 3A:0D:E9:5F:C3:65:98:FE:D1:BE:CA:1B:F2:80:16:46:FD:57:4B:51
Authority key identifier: DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
Certificate issuer: /CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Certificate serial: 019D39E5502E4D9F830B43ECFBA3AD21285B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
Manifest number: 0276
Signing time: Sun 29 Mar 2026 14:00:22 +0000
Manifest this update: Sun 29 Mar 2026 14:00:22 +0000
Manifest next update: Mon 30 Mar 2026 14:00:22 +0000
Files and hashes: 1: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl (hash: uwbHDFAXRteKF77AOvslh0Al+FxR9Ycu2xLKXHcPSTQ=)
2: zi6BX2pprFhR63Y5lPO5fzP2XJw.roa (hash: k4cOLLcWBtedRh3+dHl3HpPG8a/ZH38IiLNVDqMNrQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:50:2e:4d:9f:83:0b:43:ec:fb:a3:ad:21:28:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Validity
Not Before: Mar 29 14:00:22 2026 GMT
Not After : Mar 30 14:00:22 2026 GMT
Subject: CN=3a0de95fc36598fed1beca1bf2801646fd574b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:3a:f5:eb:d9:3d:4c:fd:4e:8d:8e:a0:8e:
06:42:7b:71:dc:d8:a2:23:29:e4:3e:92:54:44:25:
5e:57:9a:3f:0d:60:84:fa:ea:b1:b4:e3:8a:e4:79:
a4:93:71:23:21:64:01:3d:5b:05:4e:a4:9d:0b:36:
e6:dc:0f:b3:c8:f4:c3:1c:09:a9:8c:94:53:f4:b6:
45:de:87:78:93:ef:94:6b:da:1a:c3:1a:31:11:98:
99:bf:3b:ab:f5:88:10:ed:9c:3d:e0:a1:70:08:7c:
36:58:86:89:f0:1f:7b:9c:c1:41:6a:15:3a:99:2c:
c9:7a:2c:eb:50:91:a4:ab:58:ea:74:08:f9:cd:a7:
ba:92:c5:cc:be:02:61:d9:a4:3a:82:3c:76:7b:c3:
d6:f6:57:a1:92:6c:5b:b3:d7:e4:fa:5d:5f:2b:f8:
93:f5:30:28:74:89:f4:7f:8c:30:c6:99:e7:b4:b2:
d8:74:06:ca:6e:b5:ab:1b:ae:de:ad:84:21:ea:34:
93:3e:17:af:4d:7d:1d:70:51:9b:fa:86:85:d0:9e:
ae:a0:20:81:57:3e:37:31:e4:a9:7b:20:2b:0c:35:
44:39:22:f9:78:48:a5:78:0b:40:ad:08:15:24:60:
e2:40:33:88:9f:fd:ac:ef:9f:42:80:22:4c:f1:cb:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0D:E9:5F:C3:65:98:FE:D1:BE:CA:1B:F2:80:16:46:FD:57:4B:51
X509v3 Authority Key Identifier:
keyid:DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:87:7f:14:d2:da:8e:e2:ab:72:9e:ff:99:64:51:53:f1:81:
fb:c8:93:e3:07:5e:7c:8d:e4:aa:e7:04:46:a4:a6:8e:17:a2:
28:a1:08:56:4a:92:aa:7c:e4:de:bf:80:47:c9:ef:60:d9:eb:
4a:ce:5b:0a:b9:bd:00:89:37:c0:b7:e5:f5:93:85:b5:14:a4:
77:06:30:05:bc:95:13:dd:b4:7e:b5:7f:20:d9:5b:75:9d:ee:
37:22:61:ec:bb:08:71:6a:1b:43:34:66:1f:09:39:9c:e3:66:
99:89:77:f0:a7:6c:7d:40:1f:47:3b:df:64:06:a1:53:d7:1a:
2e:2c:34:e4:02:f0:3c:4d:ee:2e:a5:50:6e:c8:ce:6f:bc:6c:
d0:42:87:be:ec:95:65:4a:2a:a0:15:a4:c9:61:64:d5:fd:e8:
88:83:11:0a:97:ea:51:17:64:cd:b9:68:d4:46:f2:31:cb:f8:
06:f9:a6:60:cb:a7:41:ec:c3:fa:18:2c:30:76:d2:90:90:af:
5d:53:bc:41:78:3e:00:81:76:3d:09:62:3b:89:74:e1:00:3b:
61:5a:e7:be:9d:cf:6a:36:0a:55:c1:1e:ab:60:0c:10:ee:14:
80:fd:08:31:b2:99:c8:06:9c:a6:44:e9:3f:90:4b:b2:b7:14:
23:cf:51:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055VAuTZ+DC0Ps+6OtIShbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2IxZDI3NzNhMDNkMzE3YTc3MDMxOTNkMmY0NTQyOWE5
NGJhOWYwHhcNMjYwMzI5MTQwMDIyWhcNMjYwMzMwMTQwMDIyWjAzMTEwLwYDVQQD
EygzYTBkZTk1ZmMzNjU5OGZlZDFiZWNhMWJmMjgwMTY0NmZkNTc0YjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXM69evZPUz9To2OoI4GQntx3Nii
IynkPpJURCVeV5o/DWCE+uqxtOOK5Hmkk3EjIWQBPVsFTqSdCzbm3A+zyPTDHAmp
jJRT9LZF3od4k++Ua9oawxoxEZiZvzur9YgQ7Zw94KFwCHw2WIaJ8B97nMFBahU6
mSzJeizrUJGkq1jqdAj5zae6ksXMvgJh2aQ6gjx2e8PW9lehkmxbs9fk+l1fK/iT
9TAodIn0f4wwxpnntLLYdAbKbrWrG67erYQh6jSTPhevTX0dcFGb+oaF0J6uoCCB
Vz43MeSpeyArDDVEOSL5eEileAtArQgVJGDiQDOIn/2s759CgCJM8ctmmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoN6V/DZZj+0b7KG/KAFkb9V0tRMB8GA1UdIwQY
MBaAFN87HSdzoD0xencDGT0vRUKalLqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3pzZEozT2dQVEY2ZHdNWlBTOUZRcHFVdXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81MmQwODgtNjk4OS00ZTg5LTg3Nzct
NTI2ZGNiMmEyM2JkLzEvM3pzZEozT2dQVEY2ZHdNWlBTOUZRcHFVdXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi81MmQwODgtNjk4OS00ZTg5LTg3NzctNTI2ZGNiMmEyM2Jk
LzEvM3pzZEozT2dQVEY2ZHdNWlBTOUZRcHFVdXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYd/FNLa
juKrcp7/mWRRU/GB+8iT4wdefI3kqucERqSmjheiKKEIVkqSqnzk3r+AR8nvYNnr
Ss5bCrm9AIk3wLfl9ZOFtRSkdwYwBbyVE920frV/INlbdZ3uNyJh7LsIcWobQzRm
Hwk5nONmmYl38KdsfUAfRzvfZAahU9caLiw05ALwPE3uLqVQbsjOb7xs0EKHvuyV
ZUoqoBWkyWFk1f3oiIMRCpfqURdkzblo1EbyMcv4BvmmYMunQezD+hgsMHbSkJCv
XVO8QXg+AIF2PQliO4l04QA7YVrnvp3PajYKVcEeq2AMEO4UgP0IMbKZyAacpkTp
P5BLsrcUI89RFw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:53 2026 by rpki-client