Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: 7ZFX205/a+97xelD+esJHMRciZjUFAPFLt3W5pK48ME=
Subject key identifier: BB:B7:2C:92:48:72:03:7E:DF:F6:01:94:72:77:4A:7F:2D:E6:55:08
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 019D38D3C871F590F2AB3444DA1063F21D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0DB6
Signing time: Sun 29 Mar 2026 09:01:36 +0000
Manifest this update: Sun 29 Mar 2026 09:01:36 +0000
Manifest next update: Mon 30 Mar 2026 09:01:36 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: WobDqbG3E+eX9o30bcZoCAfDqEi4Kv1hBgA3SOXyM8E=)
2: KUy8l_kE9Ez8yOXsZsPg_xu8U88.roa (hash: Q8NXv7/aGohuJqdBeBqSqaYcBq21Vr5wijgoX0wzMFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c8:71:f5:90:f2:ab:34:44:da:10:63:f2:1d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Mar 29 09:01:36 2026 GMT
Not After : Mar 30 09:01:36 2026 GMT
Subject: CN=bbb72c924872037edff6019472774a7f2de65508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:95:41:2c:99:cb:37:75:a9:42:95:90:2f:f1:
7d:fc:1a:74:12:26:eb:dd:4a:ec:85:91:4c:45:04:
55:20:63:8a:a2:35:5f:f9:82:0c:50:3f:93:cc:8d:
4e:64:36:01:ff:ac:80:86:01:31:45:df:f1:e2:02:
92:fb:a3:5e:bd:29:c2:11:6e:43:8c:f2:38:93:d0:
a8:0b:f7:0b:2f:64:40:57:8c:6f:89:47:f1:89:38:
3f:a7:72:c4:9c:17:2d:95:ed:42:fa:23:ce:0a:ab:
1b:01:c3:29:69:69:47:32:c0:dc:4b:d7:ca:40:27:
88:e3:74:ad:f3:d9:d0:29:72:37:7a:c0:2f:07:ff:
9c:a2:52:70:cc:36:9a:0c:89:ac:41:b2:18:5b:65:
8d:7a:11:cc:f8:a6:c2:bd:f8:0f:47:6f:26:5e:1b:
56:c4:29:a4:3e:26:6a:9f:fd:06:59:b9:4a:e4:f9:
a4:3a:3c:bf:d8:b6:30:09:4c:21:31:a1:38:45:69:
21:1e:29:e2:33:06:e0:02:2d:8c:da:12:9a:be:33:
bd:f2:8a:cd:db:e5:1d:54:e0:6f:77:a2:c2:41:09:
b2:80:44:59:d4:85:7a:0c:55:05:41:29:e6:2a:ce:
58:96:3b:72:4f:41:57:8e:55:f2:f6:4b:3b:21:af:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B7:2C:92:48:72:03:7E:DF:F6:01:94:72:77:4A:7F:2D:E6:55:08
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9c:a4:e8:d8:ae:58:cc:de:6e:97:52:c7:b9:b2:9f:cb:d3:
c9:19:45:cc:40:c4:f0:52:14:d9:5c:71:65:0d:99:56:65:8b:
bd:03:49:89:ae:ee:c8:6b:62:c0:8e:a0:48:75:61:36:b6:7d:
65:63:c2:91:af:d2:7b:e7:f6:5e:2c:5b:7c:94:c6:13:74:b3:
fc:ff:c9:29:9a:54:f9:d9:bd:b1:3b:c8:7f:67:89:b6:86:47:
bc:3c:fe:9f:c1:2d:c9:5e:b5:7e:c7:8d:59:2b:f5:9c:d0:20:
5c:36:ae:16:37:e8:db:69:af:49:62:7a:91:62:74:25:ac:29:
2d:49:20:24:64:3c:94:dd:02:d3:78:3f:d5:f0:5b:12:bf:12:
b9:f9:92:22:2b:16:88:9a:f3:0d:33:d4:71:97:05:27:e4:3d:
a0:72:e8:77:74:5f:f7:9b:d1:11:cf:3a:a0:e4:d8:73:c5:78:
99:21:8d:64:d8:96:88:95:98:9e:34:d8:9c:d4:13:a6:c6:04:
48:5f:3d:d1:fb:aa:ca:e3:3a:c0:59:d4:9e:cd:c7:d7:40:c4:
db:c4:13:0b:6f:d5:a5:bd:a6:0e:27:7b:ce:56:9a:78:26:ef:
3f:a1:3e:2d:e0:96:d3:ed:3f:0a:aa:d2:90:eb:a4:eb:04:70:
69:55:d5:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0408hx9ZDyqzRE2hBj8h1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYzc1NmFmNzdkYWZlYmNhMTA2ODRkNjg1NTZiYWFjZDcx
NzM2MTcwHhcNMjYwMzI5MDkwMTM2WhcNMjYwMzMwMDkwMTM2WjAzMTEwLwYDVQQD
EyhiYmI3MmM5MjQ4NzIwMzdlZGZmNjAxOTQ3Mjc3NGE3ZjJkZTY1NTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5VBLJnLN3WpQpWQL/F9/Bp0Eibr
3UrshZFMRQRVIGOKojVf+YIMUD+TzI1OZDYB/6yAhgExRd/x4gKS+6NevSnCEW5D
jPI4k9CoC/cLL2RAV4xviUfxiTg/p3LEnBctle1C+iPOCqsbAcMpaWlHMsDcS9fK
QCeI43St89nQKXI3esAvB/+colJwzDaaDImsQbIYW2WNehHM+KbCvfgPR28mXhtW
xCmkPiZqn/0GWblK5PmkOjy/2LYwCUwhMaE4RWkhHiniMwbgAi2M2hKavjO98orN
2+UdVOBvd6LCQQmygERZ1IV6DFUFQSnmKs5YljtyT0FXjlXy9ks7Ia+o2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLu3LJJIcgN+3/YBlHJ3Sn8t5lUIMB8GA1UdIwQY
MBaAFN7HVq932v68oQaE1oVWuqzXFzYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3NkV3IzZmFfcnloQm9UV2hWYTZyTmNYTmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MWI4MmItY2RlMC00YWY2LTk1MmMt
N2UwYzdkMzUyNjcxLzEvM3NkV3IzZmFfcnloQm9UV2hWYTZyTmNYTmhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS80MWI4MmItY2RlMC00YWY2LTk1MmMtN2UwYzdkMzUyNjcx
LzEvM3NkV3IzZmFfcnloQm9UV2hWYTZyTmNYTmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJyk6Niu
WMzebpdSx7myn8vTyRlFzEDE8FIU2VxxZQ2ZVmWLvQNJia7uyGtiwI6gSHVhNrZ9
ZWPCka/Se+f2XixbfJTGE3Sz/P/JKZpU+dm9sTvIf2eJtoZHvDz+n8EtyV61fseN
WSv1nNAgXDauFjfo22mvSWJ6kWJ0JawpLUkgJGQ8lN0C03g/1fBbEr8SufmSIisW
iJrzDTPUcZcFJ+Q9oHLod3Rf95vREc86oOTYc8V4mSGNZNiWiJWYnjTYnNQTpsYE
SF890fuqyuM6wFnUns3H10DE28QTC2/Vpb2mDid7zlaaeCbvP6E+LeCW0+0/CqrS
kOuk6wRwaVXVVw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:33 2026 by rpki-client