Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: dygw+8+25fTbO5CQ74enm2s3wmZotCOAhOMPLsAYzA0=
Subject key identifier: 55:D3:28:86:1B:BA:31:73:35:57:29:CE:8F:B9:96:E4:8D:C6:A5:36
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 019CE55A6C3795CAD651A02CBEAD75A664E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 186E
Signing time: Fri 13 Mar 2026 04:00:34 +0000
Manifest this update: Fri 13 Mar 2026 04:00:34 +0000
Manifest next update: Sat 14 Mar 2026 04:00:34 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: ojhvp4hVVU9zxt1UoxbFGwNYa3L2jBxs+TQB9PreDB4=)
2: BkDRLAa3B4lViMgjpTtfQSFV14I.roa (hash: FjVWnkZKxfwmWvnmDOyzpHJdLPGSitKsvtBzxG3wncA=)
3: nFz68vxexIG1S-RusF1_qXkv1Yc.roa (hash: CL/0BWaI5R4mYNyzheF3UgRNXWDP8rh4d3WLBBru+lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:6c:37:95:ca:d6:51:a0:2c:be:ad:75:a6:64:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Mar 13 04:00:34 2026 GMT
Not After : Mar 14 04:00:34 2026 GMT
Subject: CN=55d328861bba3173355729ce8fb996e48dc6a536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:7a:e6:74:81:94:db:07:1e:9b:91:ea:e9:
c7:ba:85:b7:2d:96:e8:b1:f0:81:b5:ed:22:b8:54:
01:d8:5f:a7:60:0a:83:f8:b7:1d:bd:8b:a9:b0:16:
8e:96:e1:42:be:1e:16:88:ec:00:04:cb:fd:97:c5:
d5:7f:67:96:ab:51:29:a1:0a:2f:19:30:e8:b4:be:
e4:17:10:7e:58:07:90:aa:17:6e:4d:f8:6f:ca:04:
2d:f3:30:7a:76:a8:02:76:eb:f4:7d:e7:6c:57:d1:
6f:21:49:9e:cf:7e:be:7d:1b:21:b2:90:ea:f8:32:
28:71:2b:8f:b9:4b:e9:1f:6e:d9:90:14:1d:a9:41:
f1:cd:d3:7c:85:a9:11:4b:41:43:f1:e3:e0:62:64:
97:d1:31:8b:df:78:29:c9:a3:1c:5e:46:17:9d:85:
60:e4:7b:35:87:da:9b:f0:8b:aa:b5:b0:e2:33:20:
36:0d:3a:ba:07:b7:b2:51:7f:4b:82:98:89:c2:5a:
6d:96:24:b7:04:f3:af:09:9b:78:8c:87:cb:4d:ae:
b1:02:79:39:d2:68:01:cc:b7:a2:11:6a:35:57:2d:
97:bb:60:44:d5:e4:8d:1d:50:8a:58:9f:a4:24:bb:
3e:0b:33:c1:bd:92:9f:e6:1b:29:3c:29:36:17:d0:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D3:28:86:1B:BA:31:73:35:57:29:CE:8F:B9:96:E4:8D:C6:A5:36
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:24:78:d8:78:d6:3a:a0:41:ae:cf:f9:ef:ec:c8:28:58:1e:
3d:c1:55:4a:4f:38:06:0f:1b:5d:42:c1:f7:08:5b:a7:67:09:
1f:d9:33:45:38:f1:b9:05:13:8a:8a:d2:9e:e7:90:46:08:75:
98:1b:a9:06:8a:0c:17:01:5f:a9:1d:16:d5:84:c6:98:76:9b:
fd:a9:ab:99:14:c6:08:ab:88:81:f5:0e:df:9b:82:b7:8a:30:
9c:ea:7b:d6:12:1e:90:dc:1c:96:2a:e1:42:55:f7:17:14:ac:
9d:c7:28:44:01:59:da:e9:7d:dc:86:5f:ef:e0:10:10:73:10:
4a:48:56:c1:2b:b2:b9:f3:22:20:d9:4c:0f:b1:f0:6b:de:ba:
c2:04:55:03:a8:32:91:d3:92:39:c0:91:68:9a:ff:a9:bb:fa:
50:21:64:93:f3:59:8a:75:1c:77:8f:f3:69:7c:9e:06:6f:d6:
0b:ad:d4:17:a6:56:87:8a:14:86:38:70:54:58:03:85:f8:aa:
fe:cf:64:61:ab:5d:35:cb:9c:d5:89:8e:50:32:1a:b5:53:27:
4e:5b:0f:e7:a1:b0:75:80:ad:32:42:8e:1b:82:20:77:05:d5:
f8:ca:bd:ec:35:73:e5:d1:2b:62:3e:5d:41:ec:4d:47:15:fa:
e2:f4:d1:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlWmw3lcrWUaAsvq11pmTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMjdiOTM5OTM0YTJjYzIwNmZmYmE2YmNlOWM5MGZkY2Jh
MzljNzEwHhcNMjYwMzEzMDQwMDM0WhcNMjYwMzE0MDQwMDM0WjAzMTEwLwYDVQQD
Eyg1NWQzMjg4NjFiYmEzMTczMzU1NzI5Y2U4ZmI5OTZlNDhkYzZhNTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBd65nSBlNsHHpuR6unHuoW3LZbo
sfCBte0iuFQB2F+nYAqD+LcdvYupsBaOluFCvh4WiOwABMv9l8XVf2eWq1EpoQov
GTDotL7kFxB+WAeQqhduTfhvygQt8zB6dqgCduv0fedsV9FvIUmez36+fRshspDq
+DIocSuPuUvpH27ZkBQdqUHxzdN8hakRS0FD8ePgYmSX0TGL33gpyaMcXkYXnYVg
5Hs1h9qb8IuqtbDiMyA2DTq6B7eyUX9LgpiJwlptliS3BPOvCZt4jIfLTa6xAnk5
0mgBzLeiEWo1Vy2Xu2BE1eSNHVCKWJ+kJLs+CzPBvZKf5hspPCk2F9BI3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXTKIYbujFzNVcpzo+5luSNxqU2MB8GA1UdIwQY
MBaAFN8nuTmTSizCBv+6a86ckP3Lo5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0Njgt
NmVkNTRkM2ZlNGY0LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0NjgtNmVkNTRkM2ZlNGY0
LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSR42HjW
OqBBrs/57+zIKFgePcFVSk84Bg8bXULB9whbp2cJH9kzRTjxuQUTiorSnueQRgh1
mBupBooMFwFfqR0W1YTGmHab/amrmRTGCKuIgfUO35uCt4ownOp71hIekNwclirh
QlX3FxSsnccoRAFZ2ul93IZf7+AQEHMQSkhWwSuyufMiINlMD7Hwa966wgRVA6gy
kdOSOcCRaJr/qbv6UCFkk/NZinUcd4/zaXyeBm/WC63UF6ZWh4oUhjhwVFgDhfiq
/s9kYatdNcuc1YmOUDIatVMnTlsP56GwdYCtMkKOG4IgdwXV+Mq97DVz5dErYj5d
QexNRxX64vTRTA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:51:54 2026 by rpki-client