Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
File: pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft (raw, json)
Hash identifier: US+q4eRMZwPQ3qguIsMhLcn0kSGnKNCojJ9aYbxH3oA=
Subject key identifier: 6A:3B:7F:77:F0:3A:6F:00:3C:0E:BF:82:A8:9B:12:22:4B:1C:A7:04
Authority key identifier: A5:CD:E2:04:A3:66:9F:92:81:EE:1F:C1:D5:F2:48:54:2A:80:5E:00
Certificate issuer: /CN=a5cde204a3669f9281ee1fc1d5f248542a805e00
Certificate serial: 019D38D3CE5F593D16ECA17269C2F441F39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
Manifest number: 01BC
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: cOQzX0ZgdC95fwEhMGOJPgzc7pQ.roa (hash: eeOGfbWU7at9s1wv4++gVcvwFwwdlNK8hImsrJAnmsQ=)
2: pc3iBKNmn5KB7h_B1fJIVCqAXgA.crl (hash: lMK2f8+x5KgCJD3seoJ6NHQq+NppOqoSbKyqF4Rs/OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ce:5f:59:3d:16:ec:a1:72:69:c2:f4:41:f3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cde204a3669f9281ee1fc1d5f248542a805e00
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=6a3b7f77f03a6f003c0ebf82a89b12224b1ca704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:21:92:10:ba:21:e4:5e:7f:96:4c:1d:84:de:
06:d1:31:93:c8:29:e2:97:80:38:86:4a:91:ab:ac:
4e:79:e6:e0:59:98:93:8a:3c:93:a7:1e:6f:f9:40:
21:3c:cb:62:6e:43:97:b9:9f:1b:2e:f6:61:1b:bd:
09:e6:01:53:c5:49:49:31:8f:60:63:1d:f5:2d:c6:
9f:c7:8b:b1:ba:0e:f4:ba:de:40:5b:6d:51:6c:c4:
b6:71:1f:b3:12:e1:f1:49:76:27:93:a8:1e:3d:6d:
49:50:b4:46:03:40:cf:87:80:94:c7:e3:27:5c:b5:
4c:eb:4b:f7:e6:f8:e9:0a:65:7e:f3:b9:4d:d8:d4:
c0:4f:08:78:be:87:a8:a7:27:52:34:83:43:07:27:
32:77:45:09:fd:58:4f:57:f2:10:95:60:fc:0c:22:
57:09:da:f2:4a:ec:63:0b:0f:4c:d6:1f:82:ae:2a:
1a:14:ce:dd:d2:53:fc:5d:d0:7b:fd:3c:6e:47:b6:
02:11:db:28:93:ad:f1:9b:f9:08:64:cd:8d:88:eb:
07:9f:f0:3f:c5:cb:ef:c0:a6:cc:e1:4e:44:3a:19:
5c:69:f3:d4:3f:0b:d0:8c:f1:40:dc:c0:6d:2d:36:
cc:89:e5:4f:df:8e:90:1e:a4:37:b2:e5:46:e9:57:
34:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3B:7F:77:F0:3A:6F:00:3C:0E:BF:82:A8:9B:12:22:4B:1C:A7:04
X509v3 Authority Key Identifier:
keyid:A5:CD:E2:04:A3:66:9F:92:81:EE:1F:C1:D5:F2:48:54:2A:80:5E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a4:5b:42:20:7c:3d:d2:f5:1e:50:c6:2d:eb:23:b3:b1:be:
7e:61:1d:80:09:a1:e8:c2:e5:06:c3:ab:b5:f3:58:60:ab:55:
8b:11:29:c6:48:c3:1e:78:c7:19:2c:f7:62:31:2b:7d:99:28:
c8:29:bc:f7:2b:0d:5a:d5:18:3d:1c:46:22:51:08:86:7f:cd:
ff:c4:19:ef:dc:56:48:58:13:28:2e:29:bb:1b:7c:f8:1d:2f:
5e:67:ec:45:5f:ce:ab:81:e0:7c:9c:39:7b:21:bb:b9:db:3a:
c6:77:f6:04:d9:d6:cf:1f:63:87:07:9f:5a:36:79:7e:7f:e6:
3d:ec:51:1a:71:b8:50:ab:80:9c:f7:af:32:d7:91:22:0d:b2:
04:b3:0a:c0:2b:4f:26:0b:92:df:49:4d:04:66:99:7a:ae:ba:
ae:93:95:e6:f0:aa:f3:41:12:b2:62:5a:72:cb:17:15:68:3d:
67:8b:1d:bf:f7:d4:5f:ef:76:cd:b2:4a:96:57:5d:5f:47:25:
2c:bd:01:99:63:a1:6f:b7:3a:f0:32:81:d4:2d:97:4b:0f:e1:
dc:59:6d:c9:e2:d7:39:9c:75:70:a5:58:81:98:5c:1f:07:43:
24:c5:82:1b:0e:dd:0b:8b:2a:16:f1:03:40:39:62:ec:86:8a:
12:f6:3f:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04085fWT0W7KFyacL0QfObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1Y2RlMjA0YTM2NjlmOTI4MWVlMWZjMWQ1ZjI0ODU0MmE4
MDVlMDAwHhcNMjYwMzI5MDkwMTM4WhcNMjYwMzMwMDkwMTM4WjAzMTEwLwYDVQQD
Eyg2YTNiN2Y3N2YwM2E2ZjAwM2MwZWJmODJhODliMTIyMjRiMWNhNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iGSELoh5F5/lkwdhN4G0TGTyCni
l4A4hkqRq6xOeebgWZiTijyTpx5v+UAhPMtibkOXuZ8bLvZhG70J5gFTxUlJMY9g
Yx31Lcafx4uxug70ut5AW21RbMS2cR+zEuHxSXYnk6gePW1JULRGA0DPh4CUx+Mn
XLVM60v35vjpCmV+87lN2NTATwh4voeopydSNINDBycyd0UJ/VhPV/IQlWD8DCJX
CdrySuxjCw9M1h+CrioaFM7d0lP8XdB7/TxuR7YCEdsok63xm/kIZM2NiOsHn/A/
xcvvwKbM4U5EOhlcafPUPwvQjPFA3MBtLTbMieVP346QHqQ3suVG6Vc02QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGo7f3fwOm8APA6/gqibEiJLHKcEMB8GA1UdIwQY
MBaAFKXN4gSjZp+Sge4fwdXySFQqgF4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGMzaUJLTm1uNUtCN2hfQjFmSklWQ3FBWGdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xYTNlMGEtOTAyZS00YzgwLTgzYzYt
N2JjMmY5Y2MxODUxLzEvcGMzaUJLTm1uNUtCN2hfQjFmSklWQ3FBWGdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8xYTNlMGEtOTAyZS00YzgwLTgzYzYtN2JjMmY5Y2MxODUx
LzEvcGMzaUJLTm1uNUtCN2hfQjFmSklWQ3FBWGdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6RbQiB8
PdL1HlDGLesjs7G+fmEdgAmh6MLlBsOrtfNYYKtVixEpxkjDHnjHGSz3YjErfZko
yCm89ysNWtUYPRxGIlEIhn/N/8QZ79xWSFgTKC4puxt8+B0vXmfsRV/Oq4HgfJw5
eyG7uds6xnf2BNnWzx9jhwefWjZ5fn/mPexRGnG4UKuAnPevMteRIg2yBLMKwCtP
JguS30lNBGaZeq66rpOV5vCq80ESsmJacssXFWg9Z4sdv/fUX+92zbJKllddX0cl
LL0BmWOhb7c68DKB1C2XSw/h3FltyeLXOZx1cKVYgZhcHwdDJMWCGw7dC4sqFvED
QDli7IaKEvY/Qw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:05 2026 by rpki-client