Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier: 3C5tqjopZ6oHXUsR7rNiZKe8cJjrCMv5IYkqLOOMp3E=
Subject key identifier: 03:CC:CA:DB:D5:CD:4A:1C:7D:DD:31:A8:D0:C1:89:35:58:44:62:04
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 019E3072BCE34A95A3A6A7B425A6ED2187FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number: 0F10
Signing time: Sat 16 May 2026 11:01:26 +0000
Manifest this update: Sat 16 May 2026 11:01:26 +0000
Manifest next update: Sun 17 May 2026 11:01:26 +0000
Files and hashes: 1: 1-aGDqZW0qQT1CMUWfY2StRi45As.roa (hash: B8Rl9Gai4vi9Uu6NQRhUSO+YTREX6IaIlJN6RMt60oA=)
2: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: tHP7hmOYSsQ8cQS8qj5gd4ZeZJ+JbbAchxKfof9lXdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:bc:e3:4a:95:a3:a6:a7:b4:25:a6:ed:21:87:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: May 16 11:01:26 2026 GMT
Not After : May 17 11:01:26 2026 GMT
Subject: CN=03cccadbd5cd4a1c7ddd31a8d0c1893558446204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e6:8d:e1:a1:59:f0:89:34:bc:e9:74:a8:9a:
97:21:93:1e:98:61:dd:0f:6b:1c:d6:56:56:cb:72:
60:93:c8:fa:f3:1d:d0:90:71:e3:4f:51:87:44:0c:
63:18:2d:1f:ca:40:5f:a3:ad:91:c3:c1:91:03:14:
28:01:b1:48:9f:1b:e0:11:91:5a:40:b2:65:44:4b:
c3:fa:79:ab:3d:12:b4:0f:77:4f:08:82:dc:2c:a0:
4f:a2:c7:32:ba:ca:f4:73:cf:da:1b:ca:08:04:dc:
09:e5:45:69:2b:9f:ee:d0:24:86:a6:8c:03:65:a2:
7e:33:e3:73:49:b1:b9:1e:aa:c0:e3:41:c6:21:e3:
c7:f4:a1:ce:2b:1a:25:5b:87:01:50:d8:cb:63:3b:
39:d3:18:99:79:7a:9b:f7:54:e1:b0:ca:1b:28:8d:
02:c8:95:18:e8:b3:a0:39:84:af:55:e1:17:38:cc:
18:89:39:9a:d7:8e:7f:7b:48:be:7c:8f:6e:d0:b2:
01:19:c7:f1:a4:72:e4:26:37:27:1d:04:ff:4b:aa:
0b:b5:18:f3:89:c7:68:ad:49:fd:fe:0d:88:f8:1f:
93:2f:a6:a8:12:e6:31:9d:b0:05:45:4f:b3:f6:85:
33:35:08:cf:0b:11:ef:48:70:bc:a0:30:5e:5e:cf:
42:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CC:CA:DB:D5:CD:4A:1C:7D:DD:31:A8:D0:C1:89:35:58:44:62:04
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8b:ab:a3:88:31:51:09:70:71:e2:b9:ed:8d:a3:41:8a:ed:
ed:be:55:3a:52:d9:f1:44:83:1d:5d:59:0f:40:67:f6:b7:18:
34:8b:7a:f4:cd:c6:c5:dd:f5:63:bb:89:1e:19:d5:18:58:2f:
51:50:1d:45:78:0c:ee:58:cf:5f:a5:4f:0d:79:21:56:dd:66:
db:3f:13:7d:7d:3d:93:2f:43:bf:d5:82:cc:21:15:16:8f:41:
2f:a2:bc:ef:60:69:40:53:07:66:33:a7:7c:79:98:d6:28:00:
38:94:a8:19:53:44:55:f9:bd:a8:ee:b8:f8:83:cb:20:d8:75:
59:34:ab:32:40:78:c4:e7:7b:a0:57:5c:f8:9c:d9:6c:67:86:
a2:35:b9:7c:06:85:09:e4:d5:1e:d0:78:89:9b:b4:ed:61:11:
8b:7d:f0:60:d7:ef:b9:eb:da:5b:89:cb:39:37:6b:43:a1:01:
ac:f3:e3:85:6f:28:ff:e9:7b:92:99:57:79:05:d8:7e:d0:b5:
f8:02:34:11:82:f3:b3:94:cf:0d:b2:80:3a:32:74:58:9c:21:
36:2d:77:3c:13:2e:29:82:b1:28:28:5d:45:ab:0b:ef:99:78:
1d:07:a6:d8:55:45:73:35:a6:cf:39:d8:b6:5f:65:a3:43:2f:
f7:b2:d9:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcrzjSpWjpqe0JabtIYf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTJhZDA5MGI1NDY3OGUwOTY4ZTY5OTU1YzI1MDQ5NDM0
ZDk2YzgwHhcNMjYwNTE2MTEwMTI2WhcNMjYwNTE3MTEwMTI2WjAzMTEwLwYDVQQD
EygwM2NjY2FkYmQ1Y2Q0YTFjN2RkZDMxYThkMGMxODkzNTU4NDQ2MjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneaN4aFZ8Ik0vOl0qJqXIZMemGHd
D2sc1lZWy3Jgk8j68x3QkHHjT1GHRAxjGC0fykBfo62Rw8GRAxQoAbFInxvgEZFa
QLJlREvD+nmrPRK0D3dPCILcLKBPoscyusr0c8/aG8oIBNwJ5UVpK5/u0CSGpowD
ZaJ+M+NzSbG5HqrA40HGIePH9KHOKxolW4cBUNjLYzs50xiZeXqb91ThsMobKI0C
yJUY6LOgOYSvVeEXOMwYiTma145/e0i+fI9u0LIBGcfxpHLkJjcnHQT/S6oLtRjz
icdorUn9/g2I+B+TL6aoEuYxnbAFRU+z9oUzNQjPCxHvSHC8oDBeXs9C1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPMytvVzUocfd0xqNDBiTVYRGIEMB8GA1UdIwQY
MBaAFN1SrQkLVGeOCWjmmVXCUElDTZbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmIt
ZDMwNTczMGI1MzY4LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmItZDMwNTczMGI1MzY4
LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIuro4gx
UQlwceK57Y2jQYrt7b5VOlLZ8USDHV1ZD0Bn9rcYNIt69M3Gxd31Y7uJHhnVGFgv
UVAdRXgM7ljPX6VPDXkhVt1m2z8TfX09ky9Dv9WCzCEVFo9BL6K872BpQFMHZjOn
fHmY1igAOJSoGVNEVfm9qO64+IPLINh1WTSrMkB4xOd7oFdc+JzZbGeGojW5fAaF
CeTVHtB4iZu07WERi33wYNfvuevaW4nLOTdrQ6EBrPPjhW8o/+l7kplXeQXYftC1
+AI0EYLzs5TPDbKAOjJ0WJwhNi13PBMuKYKxKChdRasL75l4HQem2FVFczWmzznY
tl9lo0Mv97LZvg==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:46 2026 by rpki-client