Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: dHJ2GGyjkcshKg3sffIeqQqLpa6eDZma7i4bxY+FkeY=
Subject key identifier: D5:3B:42:6A:14:23:13:1F:40:44:E6:6B:00:B6:51:3B:D2:A1:01:DB
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 019D39AEC3A7A3FB97AFF572A678217DB7A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 1071
Signing time: Sun 29 Mar 2026 13:00:47 +0000
Manifest this update: Sun 29 Mar 2026 13:00:47 +0000
Manifest next update: Mon 30 Mar 2026 13:00:47 +0000
Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: 8j0iwhBFPDnd79nHyVEPno9ZIm+IMZ2456MW6y+DrQc=)
2: ZupcI2nbSj0kv3bOiTJw_7ju_nM.roa (hash: 8lfURhp4+6wvfeyaLwrd59nHvD9zLaiHI+8CWa149w4=)
3: uRzlID_nfuupcIGUXbHpyyUrxts.roa (hash: 5LvqBXGtCHTt2jvIwKxCsctM10tlaiQJ5CWlpcE9cx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c3:a7:a3:fb:97:af:f5:72:a6:78:21:7d:b7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Mar 29 13:00:47 2026 GMT
Not After : Mar 30 13:00:47 2026 GMT
Subject: CN=d53b426a1423131f4044e66b00b6513bd2a101db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:b8:58:47:dc:6d:f6:7d:aa:0a:00:c5:fc:
c8:b5:64:1f:f1:fc:ca:60:84:f9:ee:79:42:dc:cc:
eb:c9:6b:a2:8e:ea:6e:79:d4:8c:60:6c:b0:80:cb:
e0:e4:1f:53:3c:77:ee:91:94:59:7e:59:c7:17:1c:
1c:83:41:48:9b:bd:96:25:2d:14:50:b1:26:b2:5b:
d3:91:60:72:54:19:88:49:01:e5:a0:65:8d:80:9a:
51:70:31:f5:e9:01:db:67:72:e3:1d:90:29:b4:1b:
f4:c6:28:9e:a3:cc:a1:70:4f:f6:38:78:8c:85:31:
f3:1d:cd:49:9b:be:2d:b0:9f:bf:5d:07:fe:4a:9c:
2d:b9:4b:02:cc:72:c8:25:ec:ec:aa:7b:c1:50:1b:
89:f6:2f:ae:d8:35:9e:b6:dc:a9:f1:9d:13:bb:ea:
8b:60:12:4a:e7:13:95:91:d7:5f:a4:96:31:d7:04:
f4:27:57:88:65:2c:71:d2:a5:37:47:c6:34:25:d4:
94:4d:66:04:1a:4c:ea:b4:a6:27:0d:08:86:23:c8:
d4:63:11:14:1f:d6:1d:75:45:a4:19:50:23:32:f3:
52:b8:3c:8d:fc:82:5c:d2:94:83:2a:7d:2a:8a:01:
79:e9:c3:48:f6:19:c7:51:3b:24:44:ef:6d:dc:f2:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3B:42:6A:14:23:13:1F:40:44:E6:6B:00:B6:51:3B:D2:A1:01:DB
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:49:cb:d4:47:4d:fb:95:b0:68:ac:0e:89:88:18:f8:2a:79:
24:f9:63:01:2f:1a:fa:ae:03:7f:de:a3:9f:c6:ec:8a:4f:72:
63:2c:ac:ee:9c:a5:6d:e0:d1:9c:c0:6a:81:73:33:dc:4b:ed:
81:85:23:42:27:6e:62:1f:c5:a4:0b:40:05:37:b6:d9:66:12:
90:31:f7:a3:2e:b5:ea:87:75:cc:b9:cf:0a:ba:52:f5:53:79:
64:36:ea:74:c0:f9:fb:c8:c4:b7:33:98:7f:3c:0f:64:40:29:
55:cf:85:53:f1:32:20:e3:eb:ff:69:85:d0:52:e3:08:cc:2d:
ca:41:3f:c4:a8:00:79:99:42:3d:e5:43:fd:fb:6d:50:15:a2:
22:78:ab:cd:a3:55:d0:05:89:86:dc:1c:79:8c:57:49:54:03:
15:38:9f:ba:d9:9f:e0:78:f5:45:f8:56:8c:1d:59:75:dd:7d:
a1:b8:e4:46:98:49:7d:a9:a1:f8:37:5d:46:15:4d:90:e6:ea:
ce:a8:17:55:6a:58:e6:ed:f4:04:42:88:ff:e6:93:74:0f:a0:
53:47:b4:67:ba:c9:2c:16:17:dd:99:85:d8:6c:f0:3d:e9:fa:
ec:7c:3e:e6:39:e8:7e:25:0d:66:97:d2:31:75:c9:0d:8b:4b:
97:20:d3:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rsOno/uXr/VypnghfbemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjkxNzY0NWQ5ZDIyMDQzNWY5MWM3ZTQ2YzgxMTBjZjg5
YWNiZTQwHhcNMjYwMzI5MTMwMDQ3WhcNMjYwMzMwMTMwMDQ3WjAzMTEwLwYDVQQD
EyhkNTNiNDI2YTE0MjMxMzFmNDA0NGU2NmIwMGI2NTEzYmQyYTEwMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV24WEfcbfZ9qgoAxfzItWQf8fzK
YIT57nlC3MzryWuijupuedSMYGywgMvg5B9TPHfukZRZflnHFxwcg0FIm72WJS0U
ULEmslvTkWByVBmISQHloGWNgJpRcDH16QHbZ3LjHZAptBv0xiieo8yhcE/2OHiM
hTHzHc1Jm74tsJ+/XQf+SpwtuUsCzHLIJezsqnvBUBuJ9i+u2DWettyp8Z0Tu+qL
YBJK5xOVkddfpJYx1wT0J1eIZSxx0qU3R8Y0JdSUTWYEGkzqtKYnDQiGI8jUYxEU
H9YddUWkGVAjMvNSuDyN/IJc0pSDKn0qigF56cNI9hnHUTskRO9t3PIsfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNU7QmoUIxMfQETmawC2UTvSoQHbMB8GA1UdIwQY
MBaAFNxpF2RdnSIENfkcfkbIEQz4msvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2Et
NDI4YmU5MDA4ZmJhLzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2EtNDI4YmU5MDA4ZmJh
LzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUnL1EdN
+5WwaKwOiYgY+Cp5JPljAS8a+q4Df96jn8bsik9yYyys7pylbeDRnMBqgXMz3Evt
gYUjQiduYh/FpAtABTe22WYSkDH3oy616od1zLnPCrpS9VN5ZDbqdMD5+8jEtzOY
fzwPZEApVc+FU/EyIOPr/2mF0FLjCMwtykE/xKgAeZlCPeVD/fttUBWiInirzaNV
0AWJhtwceYxXSVQDFTifutmf4Hj1RfhWjB1Zdd19objkRphJfamh+DddRhVNkObq
zqgXVWpY5u30BEKI/+aTdA+gU0e0Z7rJLBYX3ZmF2GzwPen67Hw+5jnofiUNZpfS
MXXJDYtLlyDT6Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:52 2026 by rpki-client