Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
File: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft (raw, json)
Hash identifier: xqatt62Ty7/0k8JXM/H5OsxPwHTM/dX1cl0qWh+t6+A=
Subject key identifier: DA:39:8A:DA:A9:CD:45:F9:D9:CE:32:B5:1D:9E:1F:20:E8:E5:9C:4E
Authority key identifier: DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
Certificate issuer: /CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Certificate serial: 019E311732798C6135A5B620E709F1CAA9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
Manifest number: 0D15
Signing time: Sat 16 May 2026 14:01:04 +0000
Manifest this update: Sat 16 May 2026 14:01:04 +0000
Manifest next update: Sun 17 May 2026 14:01:04 +0000
Files and hashes: 1: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl (hash: Sg4LQoxKIuNwhSKVjxArZKy+AGSN6iP9ggx2bTO3jYY=)
2: EpYfEYO_PBauG2EManfF8FgFl1Q.roa (hash: cXvNIHvNyPlxk30rEJGQL1sdKxLXm0Gvh2LNp2Lvi3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:32:79:8c:61:35:a5:b6:20:e7:09:f1:ca:a9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Validity
Not Before: May 16 14:01:04 2026 GMT
Not After : May 17 14:01:04 2026 GMT
Subject: CN=da398adaa9cd45f9d9ce32b51d9e1f20e8e59c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:b2:c5:53:85:b9:e3:d5:70:62:b1:0b:fd:
ad:29:99:8d:c2:fd:b3:6b:90:79:aa:22:71:f4:76:
58:65:bc:32:2c:e1:11:d6:c2:34:54:c0:a2:62:1d:
e8:13:cb:49:17:26:bb:0c:13:0b:19:23:1c:5c:19:
cf:88:7c:7b:bb:05:e6:e7:6f:81:54:85:99:38:23:
58:ae:f6:87:f7:9d:a7:59:ff:5b:ed:8a:af:ac:91:
5c:e7:9b:d5:bc:a3:73:79:4f:aa:ad:a5:dd:f3:f4:
82:0a:49:4f:6d:2f:25:8b:3d:69:7c:1b:d7:53:bc:
73:96:ee:5d:c8:de:6b:8e:64:59:27:15:ec:5c:4d:
b8:cc:21:67:49:4f:68:7b:ee:cb:b2:1c:84:4c:e7:
c4:83:57:01:ce:36:2e:86:86:b6:7d:97:d2:c6:4d:
b7:72:ef:c9:93:24:21:98:11:16:ec:d4:b6:18:f3:
61:9e:90:58:9e:62:cd:2d:19:bc:e1:c9:29:7d:36:
8d:45:1a:a0:65:9a:13:e2:0c:7b:17:25:b3:48:8c:
89:7e:4a:39:59:0e:fb:b3:66:f2:74:f5:51:c3:0f:
f9:db:d9:9d:34:a6:ad:b3:d2:19:dc:fa:f1:bc:48:
6e:34:f2:e0:e4:3a:36:d5:69:e4:16:61:00:fe:b4:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:39:8A:DA:A9:CD:45:F9:D9:CE:32:B5:1D:9E:1F:20:E8:E5:9C:4E
X509v3 Authority Key Identifier:
keyid:DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3c:e9:aa:bb:e2:bf:99:73:63:e1:e8:88:e8:4c:ac:10:d8:
07:bc:53:1e:35:23:d9:2b:b5:05:39:eb:84:1a:ce:75:d0:bd:
52:d1:78:b6:6d:66:5c:49:08:ed:14:0e:7a:d4:a9:fd:6a:46:
cd:d6:8d:aa:5d:9a:2e:5c:45:69:1e:a8:de:08:fa:ce:2a:64:
d8:c1:be:e6:65:5e:95:0f:78:59:64:9f:c2:45:ee:ee:a8:d4:
ad:81:cb:f0:57:37:2b:e4:c6:77:37:dc:a3:40:af:40:0b:72:
24:36:af:7c:2a:2e:d5:53:85:4e:91:cf:bf:de:2a:c4:e0:89:
e5:9b:af:18:29:11:85:a9:3e:b7:eb:ca:02:99:e3:3f:17:2a:
26:c9:f2:8c:2b:d1:c3:39:23:26:ab:02:28:63:d3:2b:17:23:
70:bf:1c:3a:5d:3c:57:93:76:3f:d9:86:56:27:a8:11:6a:3e:
7d:ad:95:7f:79:49:f6:37:a9:bc:22:5e:14:85:e8:29:b8:85:
89:5a:db:c9:7e:ca:4a:4e:8c:84:d5:ce:40:ab:de:ee:d2:be:
bc:07:9a:1c:a7:fa:f3:c1:11:2d:ee:07:9c:2a:f8:3b:19:30:
43:2b:8e:2d:e1:8a:c4:72:52:eb:07:67:e6:b9:0d:cd:ad:e3:
2f:dd:60:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xFzJ5jGE1pbYg5wnxyqm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMGI1OWZiNjgxNTFlMjFkYzk5ZDYyZmFmMDM1ODliZTQx
ZmJlYTIwHhcNMjYwNTE2MTQwMTA0WhcNMjYwNTE3MTQwMTA0WjAzMTEwLwYDVQQD
EyhkYTM5OGFkYWE5Y2Q0NWY5ZDljZTMyYjUxZDllMWYyMGU4ZTU5YzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo6yxVOFuePVcGKxC/2tKZmNwv2z
a5B5qiJx9HZYZbwyLOER1sI0VMCiYh3oE8tJFya7DBMLGSMcXBnPiHx7uwXm52+B
VIWZOCNYrvaH952nWf9b7YqvrJFc55vVvKNzeU+qraXd8/SCCklPbS8liz1pfBvX
U7xzlu5dyN5rjmRZJxXsXE24zCFnSU9oe+7LshyETOfEg1cBzjYuhoa2fZfSxk23
cu/JkyQhmBEW7NS2GPNhnpBYnmLNLRm84ckpfTaNRRqgZZoT4gx7FyWzSIyJfko5
WQ77s2bydPVRww/529mdNKats9IZ3PrxvEhuNPLg5Do21WnkFmEA/rQheQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNo5itqpzUX52c4ytR2eHyDo5ZxOMB8GA1UdIwQY
MBaAFN4LWftoFR4h3JnWL68DWJvkH76iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85YWQ1MDgtYmZjMS00YjhhLWJhZmMt
Y2QwMjQ3ODhlZDNjLzEvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85YWQ1MDgtYmZjMS00YjhhLWJhZmMtY2QwMjQ3ODhlZDNj
LzEvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzzpqrvi
v5lzY+HoiOhMrBDYB7xTHjUj2Su1BTnrhBrOddC9UtF4tm1mXEkI7RQOetSp/WpG
zdaNql2aLlxFaR6o3gj6zipk2MG+5mVelQ94WWSfwkXu7qjUrYHL8Fc3K+TGdzfc
o0CvQAtyJDavfCou1VOFTpHPv94qxOCJ5ZuvGCkRhak+t+vKApnjPxcqJsnyjCvR
wzkjJqsCKGPTKxcjcL8cOl08V5N2P9mGVieoEWo+fa2Vf3lJ9jepvCJeFIXoKbiF
iVrbyX7KSk6MhNXOQKve7tK+vAeaHKf688ERLe4HnCr4OxkwQyuOLeGKxHJS6wdn
5rkNza3jL91gGQ==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:46 2026 by rpki-client