Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: 42AfC5hW9Jie2Zib03IF69D6pYqV5/XzEMbm9I603x4=
Subject key identifier: B1:4B:47:E7:27:FF:02:95:7B:A0:B3:94:1B:26:75:82:31:17:17:7A
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 019D3A1C513ED8819798F60C4B3F57D7A21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 15:00:27 +0000
Manifest this update: Sun 29 Mar 2026 15:00:27 +0000
Manifest next update: Mon 30 Mar 2026 15:00:27 +0000
Files and hashes: 1: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: IcvHl92MSHlpry86CkKACu+60FulWIBRdRghCutT2gg=)
2: q2os6H-xLvk9UkRKuFy2kFXrSyk.roa (hash: PRxebSo24ZxSHOEyZVv7K175GUR0r91e11qM7IDM3bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:51:3e:d8:81:97:98:f6:0c:4b:3f:57:d7:a2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Mar 29 15:00:27 2026 GMT
Not After : Mar 30 15:00:27 2026 GMT
Subject: CN=b14b47e727ff02957ba0b3941b2675823117177a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:f0:11:65:8b:60:46:d8:43:6a:aa:39:fe:
5a:30:ca:b5:04:24:67:ae:42:2e:74:7d:21:12:8c:
ce:df:c8:08:7e:8d:0d:f8:ae:50:61:86:09:bf:61:
00:00:e4:08:19:97:0d:2e:5b:ee:18:68:12:c0:cd:
2f:aa:21:65:b5:c1:f5:04:1c:3f:22:ba:b1:cc:ca:
eb:85:51:e2:4c:ac:76:ab:83:17:df:ee:72:15:da:
e2:61:8d:68:1f:78:6e:6f:09:dd:95:5e:11:1f:bf:
78:82:2f:98:b0:60:16:17:45:86:f5:59:3c:eb:d7:
7a:88:bd:f6:9e:9f:b9:ae:c0:e3:86:60:b9:c5:c2:
77:44:b0:b9:ef:8f:7a:b0:69:5b:d9:21:e2:66:ec:
58:ed:bb:89:59:55:3b:4c:b5:e8:f6:b1:9a:58:9d:
6f:71:61:49:32:d9:40:f0:7e:fc:d2:62:29:cd:71:
08:ad:8b:5a:61:fd:10:c9:0c:58:ca:1b:90:a9:af:
9e:9d:c6:93:b1:d8:6c:25:10:49:9c:fc:9b:4a:c9:
29:08:db:b1:66:dc:8b:0f:f3:b4:9e:89:8d:43:49:
1c:6b:3a:84:0c:72:58:9b:c3:b2:71:38:d9:0f:3d:
c2:0b:59:14:47:e1:c5:b0:b9:1e:52:68:85:58:06:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4B:47:E7:27:FF:02:95:7B:A0:B3:94:1B:26:75:82:31:17:17:7A
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ed:e2:6f:33:18:48:22:4b:d1:f5:ef:30:74:ec:a0:ad:fd:
dc:86:97:a3:0d:53:60:90:80:54:2b:cb:65:8d:f7:b6:07:a8:
29:fa:38:42:16:51:8d:4c:e1:3d:aa:90:ae:b0:f0:50:d7:a6:
9a:a4:ea:6b:7b:75:c3:70:37:fe:12:1d:78:bf:4a:32:97:52:
74:80:d4:e4:9d:f8:36:3a:bd:ac:74:5b:81:65:25:5c:16:90:
dc:bb:e2:9e:4a:b3:08:8f:2f:42:16:29:4b:43:ee:02:50:64:
4c:b1:bb:a4:61:73:0b:0a:6c:f0:d3:4e:31:29:95:4c:65:ba:
94:18:fb:2b:e7:11:13:90:b8:9e:f2:f1:08:77:9c:bf:3c:9a:
1c:2f:c2:03:de:42:39:e3:6d:11:eb:23:87:cf:c2:a9:ad:fe:
ff:9d:1c:a9:6d:14:00:02:17:ac:19:df:58:0a:52:90:36:75:
b2:2a:04:de:2d:ad:ab:84:06:ef:5d:0f:4e:0d:50:b0:a8:7b:
60:64:83:ea:8b:f3:2f:5b:84:ca:0d:48:83:0c:ad:6f:a7:fb:
35:01:0a:04:f1:c9:a8:c6:9f:1c:90:0b:51:eb:10:ab:f0:b6:
7b:bd:99:71:09:99:f2:84:f4:0a:08:b4:48:fb:02:77:fd:8f:
7a:c5:00:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HFE+2IGXmPYMSz9X16IfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNzI3NmM0ZDhjZmFmYzA0YzI2Zjg1ZmIzNGZkOWVjZTQ3
Njk2OTUwHhcNMjYwMzI5MTUwMDI3WhcNMjYwMzMwMTUwMDI3WjAzMTEwLwYDVQQD
EyhiMTRiNDdlNzI3ZmYwMjk1N2JhMGIzOTQxYjI2NzU4MjMxMTcxNzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVHwEWWLYEbYQ2qqOf5aMMq1BCRn
rkIudH0hEozO38gIfo0N+K5QYYYJv2EAAOQIGZcNLlvuGGgSwM0vqiFltcH1BBw/
IrqxzMrrhVHiTKx2q4MX3+5yFdriYY1oH3hubwndlV4RH794gi+YsGAWF0WG9Vk8
69d6iL32np+5rsDjhmC5xcJ3RLC57496sGlb2SHiZuxY7buJWVU7TLXo9rGaWJ1v
cWFJMtlA8H780mIpzXEIrYtaYf0QyQxYyhuQqa+encaTsdhsJRBJnPybSskpCNux
ZtyLD/O0nomNQ0kcazqEDHJYm8OycTjZDz3CC1kUR+HFsLkeUmiFWAYkCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFLR+cn/wKVe6CzlBsmdYIxFxd6MB8GA1UdIwQY
MBaAFP9ydsTYz6/ATCb4X7NP2ezkdpaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzNKMnhOalByOEJNSnZoZnMwX1o3T1IybHBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85ZGY4MTEtMDdkYy00ZmRmLTkxMTgt
NzdmZDRkMWU1YjI2LzEvXzNKMnhOalByOEJNSnZoZnMwX1o3T1IybHBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC85ZGY4MTEtMDdkYy00ZmRmLTkxMTgtNzdmZDRkMWU1YjI2
LzEvXzNKMnhOalByOEJNSnZoZnMwX1o3T1IybHBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVu3ibzMY
SCJL0fXvMHTsoK393IaXow1TYJCAVCvLZY33tgeoKfo4QhZRjUzhPaqQrrDwUNem
mqTqa3t1w3A3/hIdeL9KMpdSdIDU5J34Njq9rHRbgWUlXBaQ3LvinkqzCI8vQhYp
S0PuAlBkTLG7pGFzCwps8NNOMSmVTGW6lBj7K+cRE5C4nvLxCHecvzyaHC/CA95C
OeNtEesjh8/Cqa3+/50cqW0UAAIXrBnfWApSkDZ1sioE3i2tq4QG710PTg1QsKh7
YGSD6ovzL1uEyg1Igwytb6f7NQEKBPHJqMafHJALUesQq/C2e72ZcQmZ8oT0Cgi0
SPsCd/2PesUANw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:33 2026 by rpki-client