Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/43e5af-c5c9-4860-bba7-4c043dfaf2d5/1/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.mft
File: p6Oy-mGR3vYPXHIq1zAhIdXNvx8.mft (raw, json)
Hash identifier: 2PfhqxnfBcnxI+0eqLACv7ZSkVXmg/QD7P2iKXlLrgY=
Subject key identifier: 3B:CF:91:90:17:A1:6D:B2:01:B4:1E:9D:45:68:C9:65:AD:FB:C5:EF
Authority key identifier: A7:A3:B2:FA:61:91:DE:F6:0F:5C:72:2A:D7:30:21:21:D5:CD:BF:1F
Certificate issuer: /CN=a7a3b2fa6191def60f5c722ad7302121d5cdbf1f
Certificate serial: 019D37894B307E63C25A6C3044997922DF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/43e5af-c5c9-4860-bba7-4c043dfaf2d5/1/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.mft
Manifest number: 32
Signing time: Sun 29 Mar 2026 03:00:37 +0000
Manifest this update: Sun 29 Mar 2026 03:00:37 +0000
Manifest next update: Mon 30 Mar 2026 03:00:37 +0000
Files and hashes: 1: p6Oy-mGR3vYPXHIq1zAhIdXNvx8.crl (hash: xPokISB8UpzXzzPo+GYUmuHRITqYuaeUlWyyvlogzxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/43e5af-c5c9-4860-bba7-4c043dfaf2d5/1/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/43e5af-c5c9-4860-bba7-4c043dfaf2d5/1/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:4b:30:7e:63:c2:5a:6c:30:44:99:79:22:df:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a3b2fa6191def60f5c722ad7302121d5cdbf1f
Validity
Not Before: Mar 29 03:00:37 2026 GMT
Not After : Mar 30 03:00:37 2026 GMT
Subject: CN=3bcf919017a16db201b41e9d4568c965adfbc5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:12:5b:2c:d6:7d:2a:50:9d:6c:69:1b:39:
6d:1d:30:26:20:11:e8:03:44:43:f8:04:ee:2f:1f:
fb:42:5a:28:1e:b2:33:23:15:0c:e3:ee:d8:e7:d3:
6c:29:1d:ca:08:4b:51:b5:45:3c:04:c4:a0:c1:e0:
b5:7f:86:b0:6c:4b:ef:34:7f:89:d8:d5:90:ef:d4:
2a:45:bc:74:b0:f9:02:83:e4:eb:7e:22:fc:de:9a:
0d:48:6b:4a:8b:92:85:d2:01:39:4f:9b:7b:b8:f5:
f2:22:cf:c9:68:14:0f:7b:32:52:87:6f:66:6a:52:
b6:55:08:02:b6:b2:a7:47:fc:e4:86:fd:86:df:fa:
58:24:fa:37:bb:c5:ed:f6:ee:35:11:3d:81:49:1a:
3e:d6:b9:b5:38:2a:27:6e:4e:98:2c:0c:3f:b3:4a:
e2:0d:39:80:ee:ed:4c:15:69:4d:55:1c:3f:e1:0f:
2e:2f:fa:52:b9:05:44:38:5a:8a:5f:22:ae:6c:1b:
70:bf:8c:fc:41:41:30:3f:4b:23:fe:7f:63:e7:bc:
40:ff:54:b5:6f:ee:24:a1:4b:b5:e1:d2:9d:49:2a:
c9:3d:2b:06:85:09:59:1e:20:15:59:bd:40:89:df:
b8:17:46:c4:28:c6:74:cd:d7:50:d6:cb:af:1d:c1:
ba:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CF:91:90:17:A1:6D:B2:01:B4:1E:9D:45:68:C9:65:AD:FB:C5:EF
X509v3 Authority Key Identifier:
keyid:A7:A3:B2:FA:61:91:DE:F6:0F:5C:72:2A:D7:30:21:21:D5:CD:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/43e5af-c5c9-4860-bba7-4c043dfaf2d5/1/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/43e5af-c5c9-4860-bba7-4c043dfaf2d5/1/p6Oy-mGR3vYPXHIq1zAhIdXNvx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1e:ee:1b:54:65:29:44:61:0b:d7:d6:57:58:1e:c2:1a:8a:
cf:97:54:2a:31:a0:b7:06:72:c7:ac:06:13:53:6b:0c:e2:f8:
ab:ec:b4:a9:0c:2f:10:19:a2:2b:03:15:43:ce:e2:0c:e1:c5:
97:e7:21:23:ab:7b:1d:7e:53:e3:86:c0:b3:57:32:da:2e:1f:
3a:c1:d0:f5:d5:ac:71:4f:0a:16:2d:4a:59:b4:46:a6:76:5b:
d7:68:bc:e3:c6:e8:c6:75:12:6a:e2:10:63:48:5a:2c:11:8e:
12:ac:17:6a:0c:38:f5:b2:8e:ea:69:d8:f8:ae:58:fd:4c:17:
2f:30:57:2e:dd:ff:68:05:97:4f:fe:8b:7a:73:8c:89:31:1c:
41:4b:17:31:2d:3a:2c:84:b8:fd:ef:55:69:9a:79:0f:87:ef:
28:93:e0:c8:95:9d:97:ba:3b:2f:79:e9:36:48:03:5d:a3:81:
47:0f:6c:30:54:7c:4c:82:8c:cf:0f:36:1a:e6:d2:3a:d8:8d:
69:74:48:51:2e:2e:06:f7:99:ad:c4:39:18:3c:51:5c:81:ef:
a1:ac:ff:53:0f:3a:7c:67:90:6b:ba:b2:79:7b:25:09:0c:dc:
60:c7:d6:cc:a3:81:6e:06:74:e1:98:54:75:f7:ad:d0:f3:89:
b6:99:38:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iUswfmPCWmwwRJl5It82MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YTNiMmZhNjE5MWRlZjYwZjVjNzIyYWQ3MzAyMTIxZDVj
ZGJmMWYwHhcNMjYwMzI5MDMwMDM3WhcNMjYwMzMwMDMwMDM3WjAzMTEwLwYDVQQD
EygzYmNmOTE5MDE3YTE2ZGIyMDFiNDFlOWQ0NTY4Yzk2NWFkZmJjNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+YSWyzWfSpQnWxpGzltHTAmIBHo
A0RD+ATuLx/7QlooHrIzIxUM4+7Y59NsKR3KCEtRtUU8BMSgweC1f4awbEvvNH+J
2NWQ79QqRbx0sPkCg+TrfiL83poNSGtKi5KF0gE5T5t7uPXyIs/JaBQPezJSh29m
alK2VQgCtrKnR/zkhv2G3/pYJPo3u8Xt9u41ET2BSRo+1rm1OConbk6YLAw/s0ri
DTmA7u1MFWlNVRw/4Q8uL/pSuQVEOFqKXyKubBtwv4z8QUEwP0sj/n9j57xA/1S1
b+4koUu14dKdSSrJPSsGhQlZHiAVWb1Aid+4F0bEKMZ0zddQ1suvHcG6dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvPkZAXoW2yAbQenUVoyWWt+8XvMB8GA1UdIwQY
MBaAFKejsvphkd72D1xyKtcwISHVzb8fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDZPeS1tR1IzdllQWEhJcTF6QWhJZFhOdng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC80M2U1YWYtYzVjOS00ODYwLWJiYTct
NGMwNDNkZmFmMmQ1LzEvcDZPeS1tR1IzdllQWEhJcTF6QWhJZFhOdng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC80M2U1YWYtYzVjOS00ODYwLWJiYTctNGMwNDNkZmFmMmQ1
LzEvcDZPeS1tR1IzdllQWEhJcTF6QWhJZFhOdng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFh7uG1Rl
KURhC9fWV1gewhqKz5dUKjGgtwZyx6wGE1NrDOL4q+y0qQwvEBmiKwMVQ87iDOHF
l+chI6t7HX5T44bAs1cy2i4fOsHQ9dWscU8KFi1KWbRGpnZb12i848boxnUSauIQ
Y0haLBGOEqwXagw49bKO6mnY+K5Y/UwXLzBXLt3/aAWXT/6LenOMiTEcQUsXMS06
LIS4/e9VaZp5D4fvKJPgyJWdl7o7L3npNkgDXaOBRw9sMFR8TIKMzw82GubSOtiN
aXRIUS4uBveZrcQ5GDxRXIHvoaz/Uw86fGeQa7qyeXslCQzcYMfWzKOBbgZ04ZhU
dfet0POJtpk45A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:21 2026 by rpki-client