Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier: FlQERE1s7iLumXMzRFJMZEFvmc1FdM+El5QaqQJaKRU=
Subject key identifier: 18:78:4D:5C:F3:BB:08:AB:17:57:26:00:FD:93:F2:47:06:05:8F:A2
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 019D3940FFB7EE893A931EEC75648DFA0D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number: 0E90
Signing time: Sun 29 Mar 2026 11:00:54 +0000
Manifest this update: Sun 29 Mar 2026 11:00:54 +0000
Manifest next update: Mon 30 Mar 2026 11:00:54 +0000
Files and hashes: 1: 1-aGDqZW0qQT1CMUWfY2StRi45As.roa (hash: B8Rl9Gai4vi9Uu6NQRhUSO+YTREX6IaIlJN6RMt60oA=)
2: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: jnkoWUhhCrhix4CkA0kTIlBzPKZT4BO3NI8X97EamR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ff:b7:ee:89:3a:93:1e:ec:75:64:8d:fa:0d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: Mar 29 11:00:54 2026 GMT
Not After : Mar 30 11:00:54 2026 GMT
Subject: CN=18784d5cf3bb08ab17572600fd93f24706058fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:91:07:f8:38:3c:50:7c:4e:71:42:ba:b5:33:
1f:9f:10:91:2f:6b:0d:30:d5:86:3e:58:6b:5a:42:
96:8e:56:ae:e3:3d:b7:ce:34:21:a3:9d:ab:f2:ca:
14:36:7f:51:f1:b4:7a:49:96:a3:d0:6d:c8:fb:fd:
3b:ad:9f:63:f1:56:6f:ec:f4:5f:77:f0:1b:27:fb:
06:9d:34:55:ca:6a:b9:1e:1a:4a:9d:49:68:a1:9f:
17:93:5a:2a:48:82:3f:27:68:85:d5:39:24:23:1e:
91:f1:1a:41:5e:ee:00:94:e2:97:36:3e:f5:c3:4d:
56:67:43:63:04:11:9b:d6:77:73:20:d9:6e:26:c2:
4e:1e:50:30:d9:f3:d0:c2:63:e6:03:ab:69:06:61:
75:f7:53:20:ce:ca:3f:62:75:38:9f:64:75:f4:83:
7b:3c:36:81:4f:e0:5b:75:60:e0:d6:41:c2:8e:34:
43:7f:5d:23:16:4b:a7:64:51:8d:7a:e5:fd:b2:1d:
d8:c7:96:88:91:52:30:56:22:a2:7e:38:85:b9:f7:
4a:97:4b:a8:32:4e:6b:0f:98:d1:12:2e:42:0e:b3:
8c:00:cf:9d:ae:71:24:90:ce:70:b4:bb:64:97:d7:
1d:bb:60:46:67:ad:c0:13:e8:1c:c7:e3:8b:6a:bb:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:78:4D:5C:F3:BB:08:AB:17:57:26:00:FD:93:F2:47:06:05:8F:A2
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b6:ac:38:98:6b:ce:e9:27:a6:55:47:ec:b3:8b:50:f7:d6:
83:e7:63:bc:97:cd:66:9c:58:e8:4e:c7:2a:b6:d9:fd:28:b4:
bf:6d:c9:4e:c1:45:b1:62:5b:ce:93:a8:93:cf:b5:05:ca:09:
e2:ea:d3:99:3a:5b:e4:1e:74:bd:ad:0e:13:74:fc:08:af:1b:
d2:b1:a8:b6:92:3f:57:cb:87:7a:7c:bd:32:f2:84:12:8b:f9:
75:16:a7:38:a0:c1:89:b1:c0:a3:6a:4f:64:c9:d2:58:20:e8:
71:65:85:70:14:bd:e4:d7:c0:ab:e2:cf:c4:0f:32:e7:fa:d2:
13:ae:5b:4b:28:0f:ec:e4:c2:47:de:ca:54:96:2d:71:8a:88:
72:3d:8d:bb:04:79:fa:25:01:74:cd:81:44:29:74:d0:43:a7:
f6:5c:a3:7b:76:30:af:67:c1:bd:6e:26:3c:b5:7e:49:5e:db:
11:48:85:38:37:01:6c:fa:fc:c9:01:32:24:86:ac:75:ce:41:
a0:83:91:61:1c:db:58:09:64:a1:7c:fc:5c:67:9b:3f:55:35:
f6:dc:8f:42:47:5a:c4:dd:63:ca:db:87:0c:05:d2:97:77:4a:
30:b8:a2:db:48:0f:90:9a:f1:aa:7a:78:d0:a1:69:40:b7:2e:
a2:27:18:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QP+37ok6kx7sdWSN+g14MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTJhZDA5MGI1NDY3OGUwOTY4ZTY5OTU1YzI1MDQ5NDM0
ZDk2YzgwHhcNMjYwMzI5MTEwMDU0WhcNMjYwMzMwMTEwMDU0WjAzMTEwLwYDVQQD
EygxODc4NGQ1Y2YzYmIwOGFiMTc1NzI2MDBmZDkzZjI0NzA2MDU4ZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJEH+Dg8UHxOcUK6tTMfnxCRL2sN
MNWGPlhrWkKWjlau4z23zjQho52r8soUNn9R8bR6SZaj0G3I+/07rZ9j8VZv7PRf
d/AbJ/sGnTRVymq5HhpKnUlooZ8Xk1oqSII/J2iF1TkkIx6R8RpBXu4AlOKXNj71
w01WZ0NjBBGb1ndzINluJsJOHlAw2fPQwmPmA6tpBmF191Mgzso/YnU4n2R19IN7
PDaBT+BbdWDg1kHCjjRDf10jFkunZFGNeuX9sh3Yx5aIkVIwViKifjiFufdKl0uo
Mk5rD5jREi5CDrOMAM+drnEkkM5wtLtkl9cdu2BGZ63AE+gcx+OLarsjJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBh4TVzzuwirF1cmAP2T8kcGBY+iMB8GA1UdIwQY
MBaAFN1SrQkLVGeOCWjmmVXCUElDTZbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmIt
ZDMwNTczMGI1MzY4LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmItZDMwNTczMGI1MzY4
LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7asOJhr
zuknplVH7LOLUPfWg+djvJfNZpxY6E7HKrbZ/Si0v23JTsFFsWJbzpOok8+1BcoJ
4urTmTpb5B50va0OE3T8CK8b0rGotpI/V8uHeny9MvKEEov5dRanOKDBibHAo2pP
ZMnSWCDocWWFcBS95NfAq+LPxA8y5/rSE65bSygP7OTCR97KVJYtcYqIcj2NuwR5
+iUBdM2BRCl00EOn9lyje3Ywr2fBvW4mPLV+SV7bEUiFODcBbPr8yQEyJIasdc5B
oIORYRzbWAlkoXz8XGebP1U19tyPQkdaxN1jytuHDAXSl3dKMLii20gPkJrxqnp4
0KFpQLcuoicYpQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:06 2026 by rpki-client