Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: MCmanvcK5CQ/8qkfPz+xwoWEWyj48YJznd3Rrase1oU=
Subject key identifier: 3F:D8:83:E7:7E:F7:C5:3B:24:B8:09:0E:66:A0:DF:DC:3C:31:47:FE
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 019D39E54C8B4832BFC2CFF55E37379D89E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 124C
Signing time: Sun 29 Mar 2026 14:00:21 +0000
Manifest this update: Sun 29 Mar 2026 14:00:21 +0000
Manifest next update: Mon 30 Mar 2026 14:00:21 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: ol0M9oF9tagfeY6RaYw5OLFPu+kdlFr4YILmTuQV73o=)
2: 3dytCQRLOyyF8BB1A5B-6F1xVBM.roa (hash: WNCavQmenTSfXPZnZ/JnExGVfMwWPV0krWA6OaC4XXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:4c:8b:48:32:bf:c2:cf:f5:5e:37:37:9d:89:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Mar 29 14:00:21 2026 GMT
Not After : Mar 30 14:00:21 2026 GMT
Subject: CN=3fd883e77ef7c53b24b8090e66a0dfdc3c3147fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:70:ed:06:d9:03:b2:3b:dd:d5:6a:b9:3c:
92:35:06:95:6c:17:26:0d:48:f2:53:51:71:9d:c6:
c7:58:8c:c7:70:c9:68:53:df:a2:74:08:b7:dc:21:
aa:1c:2a:ac:51:d8:03:07:32:c8:c1:40:03:99:00:
b0:87:9b:3d:ab:9b:8c:71:d8:94:94:22:2b:79:84:
cc:41:6e:08:8e:f7:b1:e4:99:2e:a7:e6:3e:c9:d9:
87:f6:fb:0d:54:71:23:b0:22:6d:9b:0d:ba:33:65:
23:f9:16:94:18:b5:c1:9b:5d:39:e1:2e:d9:4f:a9:
69:76:1f:ea:c7:6a:ba:05:fc:00:de:37:38:f4:88:
95:7f:a7:d5:2d:52:1d:0a:74:1e:51:f1:e0:3f:be:
58:78:61:cb:65:d0:3d:f7:e6:99:a3:74:a3:29:98:
d8:64:73:b6:0b:32:6d:a3:20:c2:97:5d:fa:2f:7c:
6d:42:aa:32:71:c2:af:c6:11:ac:b9:7c:5c:d4:73:
ef:cf:41:7b:26:3f:87:22:02:c2:8a:00:e1:9a:32:
09:97:45:6f:53:af:50:cf:4d:73:d8:b8:14:2e:70:
35:9e:53:9b:31:02:35:23:e8:1a:a4:5d:ab:73:5d:
44:80:4f:54:a4:8c:55:e9:59:e1:7c:e5:4a:f3:af:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D8:83:E7:7E:F7:C5:3B:24:B8:09:0E:66:A0:DF:DC:3C:31:47:FE
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:17:ad:6d:be:82:48:53:66:73:54:d9:eb:c6:42:9b:64:0a:
89:fa:6d:8e:b5:fc:0e:d7:3f:fe:2b:07:c8:fc:31:0b:14:b5:
ca:9c:94:32:4f:88:87:38:be:17:07:d3:64:a9:34:33:95:e3:
07:61:ce:d5:af:78:5d:14:8e:a7:d1:4c:5b:e6:87:99:04:23:
2a:35:45:76:1d:d2:5a:7a:18:4b:02:70:00:04:2c:a5:d2:db:
5e:e5:7d:e4:48:00:81:7b:46:fc:5d:94:c7:73:29:49:c6:93:
84:aa:fe:66:df:2f:71:a4:46:15:0e:68:af:5f:7c:af:ca:9c:
0a:19:81:6d:4d:22:f3:dd:5b:61:00:8a:92:78:3e:9b:d1:d9:
6a:75:9a:dc:22:c3:73:b8:84:5d:2f:a3:21:4e:3a:84:23:f2:
11:98:fe:8a:d9:e8:97:57:41:78:59:0d:fd:fa:fc:00:10:6d:
97:aa:02:aa:ed:16:c3:5d:0f:f1:68:5b:a6:de:fa:a5:74:61:
aa:a6:9c:ef:a2:8b:79:42:03:a2:24:69:d4:1a:4a:7b:48:0e:
6f:78:fa:64:d6:35:8b:de:83:3a:57:e6:c5:49:cc:1e:bc:9b:
a1:fe:9f:3e:66:9b:6a:a0:aa:14:65:fb:f1:eb:db:33:06:8f:
af:db:5d:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055UyLSDK/ws/1Xjc3nYnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjY2E1MjIxOTZmZDA5YmFlNzM5YjZiZDIzMjJlNWViOTBk
YTRmYjkwHhcNMjYwMzI5MTQwMDIxWhcNMjYwMzMwMTQwMDIxWjAzMTEwLwYDVQQD
EygzZmQ4ODNlNzdlZjdjNTNiMjRiODA5MGU2NmEwZGZkYzNjMzE0N2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUFw7QbZA7I73dVquTySNQaVbBcm
DUjyU1FxncbHWIzHcMloU9+idAi33CGqHCqsUdgDBzLIwUADmQCwh5s9q5uMcdiU
lCIreYTMQW4Ijvex5Jkup+Y+ydmH9vsNVHEjsCJtmw26M2Uj+RaUGLXBm1054S7Z
T6lpdh/qx2q6BfwA3jc49IiVf6fVLVIdCnQeUfHgP75YeGHLZdA99+aZo3SjKZjY
ZHO2CzJtoyDCl136L3xtQqoyccKvxhGsuXxc1HPvz0F7Jj+HIgLCigDhmjIJl0Vv
U69Qz01z2LgULnA1nlObMQI1I+gapF2rc11EgE9UpIxV6VnhfOVK86+iqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/Yg+d+98U7JLgJDmag39w8MUf+MB8GA1UdIwQY
MBaAFNzKUiGW/Qm65zm2vSMi5euQ2k+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMt
M2IyNTBhZTE4OTM2LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMtM2IyNTBhZTE4OTM2
LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBetbb6C
SFNmc1TZ68ZCm2QKifptjrX8Dtc//isHyPwxCxS1ypyUMk+Ihzi+FwfTZKk0M5Xj
B2HO1a94XRSOp9FMW+aHmQQjKjVFdh3SWnoYSwJwAAQspdLbXuV95EgAgXtG/F2U
x3MpScaThKr+Zt8vcaRGFQ5or198r8qcChmBbU0i891bYQCKkng+m9HZanWa3CLD
c7iEXS+jIU46hCPyEZj+itnol1dBeFkN/fr8ABBtl6oCqu0Ww10P8Whbpt76pXRh
qqac76KLeUIDoiRp1BpKe0gOb3j6ZNY1i96DOlfmxUnMHrybof6fPmabaqCqFGX7
8evbMwaPr9tdfg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:47:01 2026 by rpki-client