Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
File: 3IScc2nn5SxwUdIdunKYMIvpxCg.mft (raw, json)
Hash identifier: 5XZhQj6/l+85LxN+Q5HPr8BRanA7Wk1fWLbVe9tj5N0=
Subject key identifier: E1:1E:A3:E3:3D:F1:28:55:57:7B:8F:CE:D4:F5:F9:F9:83:F6:44:B0
Authority key identifier: DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
Certificate issuer: /CN=dc849c7369e7e52c7051d21dba7298308be9c428
Certificate serial: 019D39E5669EAD8B1791E864D6081D765AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 14:00:28 +0000
Manifest this update: Sun 29 Mar 2026 14:00:28 +0000
Manifest next update: Mon 30 Mar 2026 14:00:28 +0000
Files and hashes: 1: 3IScc2nn5SxwUdIdunKYMIvpxCg.crl (hash: aXTpTAAuVFZCds02JBzg5dHnz+sVOvQOQJ8/kC5pvMU=)
2: EVEUejBUxMAFSM5mcutAdBHE7R0.roa (hash: qHDy6GnHP2/o9uXwJYd4YuP8Cxkyp2quR/Jtu60lrfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:66:9e:ad:8b:17:91:e8:64:d6:08:1d:76:5a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc849c7369e7e52c7051d21dba7298308be9c428
Validity
Not Before: Mar 29 14:00:28 2026 GMT
Not After : Mar 30 14:00:28 2026 GMT
Subject: CN=e11ea3e33df12855577b8fced4f5f9f983f644b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:48:f1:af:98:67:c5:7b:80:07:19:42:08:9f:
bb:52:d6:68:86:b9:e3:e2:6e:01:3b:27:0a:9b:3d:
bb:78:c4:77:4a:49:6c:dc:52:c4:fd:50:38:bf:f5:
6a:2b:c8:4f:86:38:19:d8:40:5c:a6:c2:8e:31:0f:
e2:c7:b9:9a:ec:6f:92:2b:6f:37:23:63:d4:4f:83:
21:e5:36:9a:af:17:ce:2c:b7:27:fe:be:0e:91:f4:
69:f5:3c:53:a0:6f:cd:1f:59:c7:f1:c2:7d:8b:63:
e0:94:78:3b:e3:ad:0b:70:a3:7c:3a:5e:ce:94:94:
01:67:84:c1:33:b0:a1:a5:ef:73:c4:17:49:3e:19:
74:04:0a:59:c3:19:9e:e0:c0:5c:34:5d:5d:39:5d:
75:59:01:f5:ca:15:29:36:3e:5e:79:cd:3b:a0:40:
9f:aa:e9:eb:6c:0f:8d:6b:70:67:17:ad:ab:6c:b9:
9d:fc:d8:ec:dc:b2:f8:b2:3c:2f:2b:40:bf:bc:b8:
4f:87:a2:b7:d0:3f:77:17:20:86:da:b4:68:07:59:
0f:cd:d3:2e:78:5d:88:fb:00:e3:9b:f9:fc:af:1d:
2e:d7:b7:6c:e4:c7:f0:93:c5:80:b5:20:ea:6b:7b:
e2:4c:52:5d:b2:d8:d9:4f:0f:fa:c1:9f:a9:2c:2f:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1E:A3:E3:3D:F1:28:55:57:7B:8F:CE:D4:F5:F9:F9:83:F6:44:B0
X509v3 Authority Key Identifier:
keyid:DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f5:9b:98:dc:40:5c:1f:64:f3:76:eb:db:ec:8c:90:e1:8b:
0d:84:1c:f8:06:15:87:95:07:fc:d1:7e:c8:9d:8b:d6:a3:64:
d1:b4:ba:b6:2e:9c:3e:2e:20:07:8d:12:a9:f3:6e:56:e8:9d:
47:c8:cb:56:fa:f1:44:1c:d1:18:59:38:d9:c7:36:fe:9f:96:
3a:b3:75:a0:0b:40:25:5d:f7:ce:fe:ba:d9:65:e9:f9:bd:17:
91:50:57:c4:bd:b2:6f:01:d3:42:bc:02:86:ea:f5:f5:00:fe:
ca:fa:52:ae:92:d4:7d:46:d2:bf:66:dc:3d:79:e7:5f:fb:0c:
d2:6b:8a:57:28:d9:4a:66:18:c6:99:27:03:07:38:98:65:d7:
2b:87:fb:4b:04:eb:bf:9a:b0:a5:74:08:f7:19:15:d9:c6:10:
b2:16:27:c4:07:f9:37:47:18:ad:24:2f:99:d0:40:6b:50:51:
1b:d2:e1:96:dd:1e:fe:78:af:7d:20:c7:e7:87:8a:56:d0:c1:
d5:76:35:ea:1a:16:5f:28:97:11:33:b6:47:ab:80:b1:2d:3b:
ef:54:aa:1e:60:91:8d:0e:fb:5e:f4:23:18:fe:3f:7e:66:6e:
f5:47:76:cb:87:e5:ff:f7:e3:78:1c:87:33:65:50:c5:8a:44:
80:d7:73:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055WaerYsXkehk1ggddlq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODQ5YzczNjllN2U1MmM3MDUxZDIxZGJhNzI5ODMwOGJl
OWM0MjgwHhcNMjYwMzI5MTQwMDI4WhcNMjYwMzMwMTQwMDI4WjAzMTEwLwYDVQQD
EyhlMTFlYTNlMzNkZjEyODU1NTc3YjhmY2VkNGY1ZjlmOTgzZjY0NGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ujxr5hnxXuABxlCCJ+7UtZohrnj
4m4BOycKmz27eMR3Skls3FLE/VA4v/VqK8hPhjgZ2EBcpsKOMQ/ix7ma7G+SK283
I2PUT4Mh5TaarxfOLLcn/r4OkfRp9TxToG/NH1nH8cJ9i2PglHg7460LcKN8Ol7O
lJQBZ4TBM7Chpe9zxBdJPhl0BApZwxme4MBcNF1dOV11WQH1yhUpNj5eec07oECf
qunrbA+Na3BnF62rbLmd/Njs3LL4sjwvK0C/vLhPh6K30D93FyCG2rRoB1kPzdMu
eF2I+wDjm/n8rx0u17ds5Mfwk8WAtSDqa3viTFJdstjZTw/6wZ+pLC+7jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEeo+M98ShVV3uPztT1+fmD9kSwMB8GA1UdIwQY
MBaAFNyEnHNp5+UscFHSHbpymDCL6cQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYmU4Y2YtMDdlYy00N2NiLThmNjMt
ZDNhMDZkMWY1YjRiLzEvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xYmU4Y2YtMDdlYy00N2NiLThmNjMtZDNhMDZkMWY1YjRi
LzEvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvWbmNxA
XB9k83br2+yMkOGLDYQc+AYVh5UH/NF+yJ2L1qNk0bS6ti6cPi4gB40SqfNuVuid
R8jLVvrxRBzRGFk42cc2/p+WOrN1oAtAJV33zv662WXp+b0XkVBXxL2ybwHTQrwC
hur19QD+yvpSrpLUfUbSv2bcPXnnX/sM0muKVyjZSmYYxpknAwc4mGXXK4f7SwTr
v5qwpXQI9xkV2cYQshYnxAf5N0cYrSQvmdBAa1BRG9Lhlt0e/nivfSDH54eKVtDB
1XY16hoWXyiXETO2R6uAsS0771SqHmCRjQ77XvQjGP4/fmZu9Ud2y4fl//fjeByH
M2VQxYpEgNdz8Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:27 2026 by rpki-client