Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
File: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft (raw, json)
Hash identifier: lFr4OG9g7RjsDeJU2+oen23HGvrD9ZBs1alb6Dhm79I=
Subject key identifier: AB:BD:32:EE:05:28:3B:46:85:8B:9F:13:CA:AA:AF:86:D2:76:7C:E9
Authority key identifier: DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
Certificate issuer: /CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Certificate serial: 019D37F716635D3DFC936103E607FEB5358C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
Manifest number: 0C94
Signing time: Sun 29 Mar 2026 05:00:33 +0000
Manifest this update: Sun 29 Mar 2026 05:00:33 +0000
Manifest next update: Mon 30 Mar 2026 05:00:33 +0000
Files and hashes: 1: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl (hash: IRjGrUEtbtumaOyuraqq5sV7WCaARNyYVNGlR2l7Rro=)
2: EpYfEYO_PBauG2EManfF8FgFl1Q.roa (hash: cXvNIHvNyPlxk30rEJGQL1sdKxLXm0Gvh2LNp2Lvi3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:16:63:5d:3d:fc:93:61:03:e6:07:fe:b5:35:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Validity
Not Before: Mar 29 05:00:33 2026 GMT
Not After : Mar 30 05:00:33 2026 GMT
Subject: CN=abbd32ee05283b46858b9f13caaaaf86d2767ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:58:12:00:82:08:4d:51:4a:b4:20:31:7c:1a:
22:fe:39:92:45:ef:9b:d9:15:4b:26:1f:0f:a4:ae:
99:2b:89:ba:45:de:50:d2:22:6f:f8:62:da:ef:aa:
66:ed:7b:7d:a6:81:bb:e3:18:98:90:fa:c7:bd:19:
a0:de:ae:8b:fa:a4:5a:41:44:83:a9:14:19:0f:7d:
db:e2:59:70:1a:c1:b8:fa:c2:97:82:0a:5a:48:6e:
d5:d5:7a:a7:9f:c3:ef:36:bc:ce:ad:9f:5b:89:08:
84:d0:50:72:dd:36:37:6f:3a:bd:0b:e4:24:e5:03:
93:fa:c5:ba:2f:3c:51:b0:05:12:9b:04:18:68:47:
9f:18:fd:f0:7c:3b:40:66:8a:fd:78:ef:a4:6f:f2:
3b:33:21:2c:2b:62:64:0e:f1:f4:b5:e0:8b:65:95:
d4:c8:e1:0a:f4:97:d6:a5:fb:38:99:01:c8:1b:13:
82:b1:08:d0:eb:d7:00:ac:e9:eb:39:13:fa:3d:0f:
28:b8:34:ec:a7:5d:32:e8:84:00:d6:27:13:a9:43:
92:2a:0d:b0:dd:b9:06:71:1d:53:81:07:bd:d8:66:
27:bc:ee:75:52:ee:3f:c5:1a:10:46:e7:a3:a3:02:
73:ae:7f:f6:2e:d8:7c:ab:8b:be:b9:13:1d:e9:6e:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BD:32:EE:05:28:3B:46:85:8B:9F:13:CA:AA:AF:86:D2:76:7C:E9
X509v3 Authority Key Identifier:
keyid:DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:16:dc:ac:61:9c:06:2c:0e:9b:34:e8:3a:cd:8f:69:02:ae:
b0:fb:f6:70:ff:a3:ad:ed:33:0f:3c:33:f7:39:ce:9e:a3:66:
03:92:23:0b:22:b4:53:3f:33:14:a6:37:c3:11:80:ab:b9:ee:
d7:08:3c:3f:76:7d:ae:c7:40:5c:0d:12:f2:ce:75:51:ad:f5:
15:e2:cf:98:c6:b2:ca:ea:cc:ea:87:63:cb:50:1a:9c:65:aa:
72:0b:7a:87:e6:9c:72:03:24:aa:fb:cf:db:9e:52:02:e5:5c:
e7:74:9e:7f:c4:72:77:b3:dc:3c:95:92:0d:01:a6:69:b2:ad:
50:81:3a:4c:4d:41:6f:2c:68:1a:ae:b6:45:a6:ac:70:27:64:
b0:c9:29:ba:c7:f6:0f:50:97:03:d2:6b:55:82:91:67:3f:ed:
ac:99:e9:85:1e:9e:29:ee:0a:d6:0a:9c:f2:e9:e1:88:8b:5a:
7d:f2:29:64:18:c9:df:88:a8:c3:23:74:f9:2b:4c:ac:96:07:
85:30:68:6a:66:c7:7e:7c:06:6a:9f:df:cc:be:55:01:05:41:
80:ba:1c:5a:06:58:e6:5b:c0:0c:a5:45:61:f6:c3:54:07:c4:
77:55:dc:50:75:bf:30:3c:2e:0c:3a:e8:e2:24:a6:60:97:35:
fc:8b:f4:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039xZjXT38k2ED5gf+tTWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMGI1OWZiNjgxNTFlMjFkYzk5ZDYyZmFmMDM1ODliZTQx
ZmJlYTIwHhcNMjYwMzI5MDUwMDMzWhcNMjYwMzMwMDUwMDMzWjAzMTEwLwYDVQQD
EyhhYmJkMzJlZTA1MjgzYjQ2ODU4YjlmMTNjYWFhYWY4NmQyNzY3Y2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VgSAIIITVFKtCAxfBoi/jmSRe+b
2RVLJh8PpK6ZK4m6Rd5Q0iJv+GLa76pm7Xt9poG74xiYkPrHvRmg3q6L+qRaQUSD
qRQZD33b4llwGsG4+sKXggpaSG7V1Xqnn8PvNrzOrZ9biQiE0FBy3TY3bzq9C+Qk
5QOT+sW6LzxRsAUSmwQYaEefGP3wfDtAZor9eO+kb/I7MyEsK2JkDvH0teCLZZXU
yOEK9JfWpfs4mQHIGxOCsQjQ69cArOnrORP6PQ8ouDTsp10y6IQA1icTqUOSKg2w
3bkGcR1TgQe92GYnvO51Uu4/xRoQRuejowJzrn/2Lth8q4u+uRMd6W6sgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKu9Mu4FKDtGhYufE8qqr4bSdnzpMB8GA1UdIwQY
MBaAFN4LWftoFR4h3JnWL68DWJvkH76iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85YWQ1MDgtYmZjMS00YjhhLWJhZmMt
Y2QwMjQ3ODhlZDNjLzEvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85YWQ1MDgtYmZjMS00YjhhLWJhZmMtY2QwMjQ3ODhlZDNj
LzEvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxbcrGGc
BiwOmzToOs2PaQKusPv2cP+jre0zDzwz9znOnqNmA5IjCyK0Uz8zFKY3wxGAq7nu
1wg8P3Z9rsdAXA0S8s51Ua31FeLPmMayyurM6odjy1AanGWqcgt6h+accgMkqvvP
255SAuVc53Sef8Ryd7PcPJWSDQGmabKtUIE6TE1BbyxoGq62RaascCdksMkpusf2
D1CXA9JrVYKRZz/trJnphR6eKe4K1gqc8unhiItaffIpZBjJ34iowyN0+StMrJYH
hTBoambHfnwGap/fzL5VAQVBgLocWgZY5lvADKVFYfbDVAfEd1XcUHW/MDwuDDro
4iSmYJc1/Iv0HQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:10 2026 by rpki-client