Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
File: 3y3kqfK8Uj318Kf15DJJikLFX3A.mft (raw, json)
Hash identifier: lVK/IjLA3AEJEIEJZvRbqwOlfKtzWUL3q6BEm5HXbUQ=
Subject key identifier: 3B:07:95:C9:4C:42:51:0E:55:70:E6:0F:05:EA:55:88:16:00:D5:CF
Authority key identifier: DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
Certificate issuer: /CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Certificate serial: 019DCC3D87D83F5C8F02B80A0A8C01A86B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
Manifest number: 32
Signing time: Mon 27 Apr 2026 00:01:17 +0000
Manifest this update: Mon 27 Apr 2026 00:01:17 +0000
Manifest next update: Tue 28 Apr 2026 00:01:17 +0000
Files and hashes: 1: 3y3kqfK8Uj318Kf15DJJikLFX3A.crl (hash: RWNScoP8Bz+0EjIxd3sVDOINQlvTWugEip0gGWKDoag=)
2: 8XebNTiumaUWcLbgsrPRqEK7yJk.roa (hash: wIkMYGUwRkloiGV8zcV817/8WXtvc8qz+eDzExEQl48=)
3: SU9_tB5lwfHPL_4Kt4ROwFHlUMI.asa (hash: wN65KwAJllI0kxcg5tgjkk0Y4QH9uf/hvRTzQ2pTovk=)
4: xtsoV3YrVhm4MKDjfu3IvjG7q1g.roa (hash: qMRfu2o1bzSJ1p0UvgBKjKi65ckvS8nI12aCVQ8a6vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3d:87:d8:3f:5c:8f:02:b8:0a:0a:8c:01:a8:6b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Validity
Not Before: Apr 27 00:01:17 2026 GMT
Not After : Apr 28 00:01:17 2026 GMT
Subject: CN=3b0795c94c42510e5570e60f05ea55881600d5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:ef:65:5c:84:2b:0f:2e:62:0d:a8:2f:d0:
e3:f0:3a:2c:79:f6:cc:5a:6d:00:d2:b1:a2:16:96:
2d:df:aa:3c:df:8f:ec:b2:ec:f9:34:f8:fe:e8:8a:
ef:67:c8:70:8c:c9:28:99:d6:c4:d9:c1:5e:e6:7e:
26:b6:5d:7a:b9:96:31:79:c1:cc:5f:7d:93:e0:1c:
a2:9a:40:b3:f5:ec:f7:90:ad:49:73:17:57:39:43:
61:c5:6f:93:30:71:b4:07:d2:23:d2:68:06:66:f7:
21:5c:5d:79:b1:95:2c:cf:bc:7c:ba:9b:77:e9:07:
fb:1a:e3:34:73:7c:8e:65:26:b4:61:9d:c7:0f:33:
81:db:76:bd:d8:76:0a:fe:ad:93:a9:e1:1d:4c:da:
44:4b:ee:44:04:e2:26:a8:65:ce:35:85:1a:a7:f6:
45:3e:71:e5:93:f2:bf:eb:ee:1f:0c:ad:34:97:20:
f9:90:be:0a:cc:b1:41:5d:00:bd:85:63:45:2f:e9:
f2:8f:22:e2:0c:a9:4f:92:68:62:6f:1d:6b:80:13:
44:76:83:a7:41:b3:8e:26:4a:26:11:cd:d9:72:4d:
b7:14:35:54:b4:6a:73:fe:e3:77:d7:b4:04:80:21:
e4:b0:f2:1b:7e:12:a8:f5:5e:33:7a:15:68:16:38:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:07:95:C9:4C:42:51:0E:55:70:E6:0F:05:EA:55:88:16:00:D5:CF
X509v3 Authority Key Identifier:
keyid:DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:96:d3:f3:8f:08:0c:75:a6:4e:2f:ca:52:10:e6:0d:ba:dc:
e3:13:96:94:cf:02:37:39:35:5b:dd:e0:7d:0d:a1:b4:9d:ad:
5b:50:01:52:32:94:a7:4f:32:94:d8:2f:05:a4:52:56:cd:c0:
99:35:66:71:e4:c4:94:51:05:94:56:6a:eb:9f:c2:b8:59:41:
fc:0c:60:59:f6:0d:0d:02:38:64:da:f1:e4:13:62:f4:cd:80:
d7:9b:9a:f9:36:9d:0a:82:63:b4:e2:17:a4:b8:28:15:cf:57:
34:71:19:de:c0:5b:72:94:3d:6b:f1:96:41:bf:46:7c:9b:04:
d0:c7:6f:30:f6:1c:fa:3a:c2:53:fd:ba:40:3f:2f:37:6e:7d:
7e:33:b9:b3:2a:07:75:df:66:20:c9:08:0c:dc:b5:b0:31:36:
b1:02:88:d0:49:7a:91:f5:97:e6:77:43:d8:3d:89:e2:35:e7:
55:34:5a:53:3b:d2:43:c3:fc:ff:4d:af:64:bd:7d:73:ad:32:
45:ff:35:0d:30:76:17:72:c2:cc:07:be:a8:3b:70:dc:5f:70:
87:33:9c:dc:a4:77:0e:cb:dd:df:4e:73:56:c6:e6:7f:1e:9a:
76:9c:3a:52:56:93:79:b4:f1:fa:44:a4:f0:87:2f:17:fb:2d:
6d:22:2d:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3MPYfYP1yPArgKCowBqGtPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMmRlNGE5ZjJiYzUyM2RmNWYwYTdmNWU0MzI0OThhNDJj
NTVmNzAwHhcNMjYwNDI3MDAwMTE3WhcNMjYwNDI4MDAwMTE3WjAzMTEwLwYDVQQD
EygzYjA3OTVjOTRjNDI1MTBlNTU3MGU2MGYwNWVhNTU4ODE2MDBkNWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRnvZVyEKw8uYg2oL9Dj8DosefbM
Wm0A0rGiFpYt36o834/ssuz5NPj+6IrvZ8hwjMkomdbE2cFe5n4mtl16uZYxecHM
X32T4ByimkCz9ez3kK1JcxdXOUNhxW+TMHG0B9Ij0mgGZvchXF15sZUsz7x8upt3
6Qf7GuM0c3yOZSa0YZ3HDzOB23a92HYK/q2TqeEdTNpES+5EBOImqGXONYUap/ZF
PnHlk/K/6+4fDK00lyD5kL4KzLFBXQC9hWNFL+nyjyLiDKlPkmhibx1rgBNEdoOn
QbOOJkomEc3Zck23FDVUtGpz/uN317QEgCHksPIbfhKo9V4zehVoFjgBYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsHlclMQlEOVXDmDwXqVYgWANXPMB8GA1UdIwQY
MBaAFN8t5KnyvFI99fCn9eQySYpCxV9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3kza3FmSzhVajMxOEtmMTVESkppa0xGWDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hZjM2NjctZTM5My00Y2Y4LTk0YmIt
ZWNjODA2Nzc1MDMxLzEvM3kza3FmSzhVajMxOEtmMTVESkppa0xGWDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hZjM2NjctZTM5My00Y2Y4LTk0YmItZWNjODA2Nzc1MDMx
LzEvM3kza3FmSzhVajMxOEtmMTVESkppa0xGWDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspbT848I
DHWmTi/KUhDmDbrc4xOWlM8CNzk1W93gfQ2htJ2tW1ABUjKUp08ylNgvBaRSVs3A
mTVmceTElFEFlFZq65/CuFlB/AxgWfYNDQI4ZNrx5BNi9M2A15ua+TadCoJjtOIX
pLgoFc9XNHEZ3sBbcpQ9a/GWQb9GfJsE0MdvMPYc+jrCU/26QD8vN259fjO5syoH
dd9mIMkIDNy1sDE2sQKI0El6kfWX5ndD2D2J4jXnVTRaUzvSQ8P8/02vZL19c60y
Rf81DTB2F3LCzAe+qDtw3F9whzOc3KR3Dsvd305zVsbmfx6adpw6UlaTebTx+kSk
8IcvF/stbSIt1g==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:43:18 2026 by rpki-client