Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
File: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json)
Hash identifier: 1ZJGKjoKhrginhG7u+meyX+UqRAVhHBi5BQ0xNDbdzU=
Subject key identifier: 75:09:22:74:D7:57:45:B0:A5:2B:B1:28:AD:CF:10:44:39:DB:72:E1
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial: 019D382E0AA8D0579044CBCFD5DC870E821C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
Manifest number: 13EB
Signing time: Sun 29 Mar 2026 06:00:34 +0000
Manifest this update: Sun 29 Mar 2026 06:00:34 +0000
Manifest next update: Mon 30 Mar 2026 06:00:34 +0000
Files and hashes: 1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: 3zmO8JrCEaO2tFMtQ5aXu2WDXzh6eJ3D40A27Vgx42U=)
2: FT--4t0eY_HMytLIaG7T71X7cUo.roa (hash: 095emcTK3nDAck/cjTBbtBo2FJ9TXj6HZHetumiraec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0a:a8:d0:57:90:44:cb:cf:d5:dc:87:0e:82:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
Validity
Not Before: Mar 29 06:00:34 2026 GMT
Not After : Mar 30 06:00:34 2026 GMT
Subject: CN=75092274d75745b0a52bb128adcf104439db72e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:b5:6c:d6:f1:2a:ec:69:6a:b3:15:65:51:
80:c6:e7:e6:60:90:b6:18:53:ed:fe:a2:6c:83:84:
bd:b8:1c:1a:f9:b9:27:87:cb:df:f2:98:d0:b8:a5:
a7:5e:82:5f:0b:ea:c4:c5:fe:66:10:8b:26:5a:ae:
5f:0e:7d:73:a4:ea:0e:af:b5:df:2f:d0:39:ff:c6:
03:a8:0d:5c:78:ed:b7:85:07:00:52:ce:dd:35:a7:
b9:5a:e2:72:2f:3f:a8:36:7f:30:88:8b:ad:48:51:
33:f6:f0:c0:85:7b:b9:c5:41:36:79:08:2a:4b:78:
d2:07:e2:8e:80:40:d6:50:2f:54:1e:fe:89:4a:63:
75:c4:19:9a:bd:77:d7:8b:41:f2:ef:1b:9d:d3:8e:
ca:bb:73:2b:95:a4:47:58:a5:e9:14:66:8c:10:87:
4e:af:55:f7:47:cc:9e:2b:88:d5:d9:d9:ab:ef:8b:
be:09:6f:c8:57:bf:75:b6:30:74:39:1e:c1:07:cf:
86:8c:8e:3e:b2:29:83:94:1e:ec:45:71:7b:47:58:
25:68:67:0a:bc:c6:6e:87:4b:5b:f2:a5:03:ed:88:
9d:04:51:00:25:d1:d0:06:49:80:f0:25:ad:a2:0c:
e4:fd:46:0b:00:12:a6:d0:1a:89:fb:ac:02:b0:e0:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:09:22:74:D7:57:45:B0:A5:2B:B1:28:AD:CF:10:44:39:DB:72:E1
X509v3 Authority Key Identifier:
keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1e:e4:c9:fd:f2:3d:81:61:7b:ec:41:df:b2:a8:6b:13:bb:
02:a0:36:2f:7c:56:eb:a8:22:5f:88:2e:b9:2e:f7:64:25:54:
5d:c0:70:d9:02:51:9b:ce:12:59:57:90:9b:5c:21:f2:d1:72:
cf:ab:3a:0d:45:ed:56:ed:cb:fa:8f:73:13:3b:a1:62:6d:27:
44:7e:c4:81:cd:bf:db:e2:d7:3f:d4:8b:82:20:57:db:ae:b9:
a1:9f:11:6e:0e:0b:eb:94:e1:78:c9:7d:f1:73:a2:8f:15:63:
42:6d:6d:24:f6:8a:2e:4f:f4:54:19:da:80:cb:f1:2b:e9:63:
ec:2e:63:cd:1d:cc:d9:fd:ad:b8:cc:42:e9:5a:2a:c4:8e:f5:
5d:23:0c:28:0f:37:57:94:2f:ef:d7:81:80:8d:1f:7a:a7:6a:
bd:4d:53:07:55:b5:f1:ad:2a:5b:bf:28:b9:52:05:b1:f5:d0:
b0:cf:f8:b6:82:cf:e0:db:01:0f:5a:a0:96:71:58:01:a8:8a:
d7:9b:b5:36:ed:3b:d7:ad:5b:76:f7:17:85:c1:35:bc:10:0f:
c7:fe:00:fc:4f:36:b4:3e:bd:86:fd:21:60:2d:33:f3:72:7e:
78:73:d4:8e:c2:3f:ca:6c:52:6f:e1:18:ca:88:a2:3d:c1:6c:
cc:92:f1:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lgqo0FeQRMvP1dyHDoIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmE4Njg2M2M1NTg2NTcwMDYzNGUxMTM1ZTYxN2U0MDc5
YWY4YjkwHhcNMjYwMzI5MDYwMDM0WhcNMjYwMzMwMDYwMDM0WjAzMTEwLwYDVQQD
Eyg3NTA5MjI3NGQ3NTc0NWIwYTUyYmIxMjhhZGNmMTA0NDM5ZGI3MmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5W1bNbxKuxparMVZVGAxufmYJC2
GFPt/qJsg4S9uBwa+bknh8vf8pjQuKWnXoJfC+rExf5mEIsmWq5fDn1zpOoOr7Xf
L9A5/8YDqA1ceO23hQcAUs7dNae5WuJyLz+oNn8wiIutSFEz9vDAhXu5xUE2eQgq
S3jSB+KOgEDWUC9UHv6JSmN1xBmavXfXi0Hy7xud047Ku3MrlaRHWKXpFGaMEIdO
r1X3R8yeK4jV2dmr74u+CW/IV791tjB0OR7BB8+GjI4+simDlB7sRXF7R1glaGcK
vMZuh0tb8qUD7YidBFEAJdHQBkmA8CWtogzk/UYLABKm0BqJ+6wCsOAfRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUJInTXV0WwpSuxKK3PEEQ523LhMB8GA1UdIwQY
MBaAFNz6hoY8VYZXAGNOETXmF+QHmvi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MDc2YTItMjk1Zi00NWVjLWI3Yzgt
YzVjOWM2ODliNzQ1LzEvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83MDc2YTItMjk1Zi00NWVjLWI3YzgtYzVjOWM2ODliNzQ1
LzEvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbh7kyf3y
PYFhe+xB37KoaxO7AqA2L3xW66giX4guuS73ZCVUXcBw2QJRm84SWVeQm1wh8tFy
z6s6DUXtVu3L+o9zEzuhYm0nRH7Egc2/2+LXP9SLgiBX2665oZ8Rbg4L65TheMl9
8XOijxVjQm1tJPaKLk/0VBnagMvxK+lj7C5jzR3M2f2tuMxC6VoqxI71XSMMKA83
V5Qv79eBgI0feqdqvU1TB1W18a0qW78ouVIFsfXQsM/4toLP4NsBD1qglnFYAaiK
15u1Nu07161bdvcXhcE1vBAPx/4A/E82tD69hv0hYC0z83J+eHPUjsI/ymxSb+EY
yoiiPcFszJLxaw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:26 2026 by rpki-client