Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
File: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json)
Hash identifier: ISUU7j5ltengWsKlC7Rs+Fxu0Nt34rLmWnjPTVLitYw=
Subject key identifier: 7A:7A:E4:C7:4E:09:69:D7:0B:EF:60:C8:BE:20:4A:99:26:CB:AB:46
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 019D3789ACEBC42C3E8AB6191CA5E0A4F6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
Manifest number: 1116
Signing time: Sun 29 Mar 2026 03:01:02 +0000
Manifest this update: Sun 29 Mar 2026 03:01:02 +0000
Manifest next update: Mon 30 Mar 2026 03:01:02 +0000
Files and hashes: 1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: G3v5HHI/8IJ5uF5k19RDqSSQkyTLPK7pEUk4X+R8Ffw=)
2: dteAII4Iq7XySyzr-x5j1Z9seS4.roa (hash: h1f5SaNN80CBxnaeqEfAaP7RXxTuX9SBPLL5E40G9hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:ac:eb:c4:2c:3e:8a:b6:19:1c:a5:e0:a4:f6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: Mar 29 03:01:02 2026 GMT
Not After : Mar 30 03:01:02 2026 GMT
Subject: CN=7a7ae4c74e0969d70bef60c8be204a9926cbab46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7b:87:fc:db:01:f6:6c:4f:55:f8:92:bb:6b:
fa:84:34:0b:5f:b8:52:80:49:61:00:32:3e:ec:41:
6f:59:72:7a:6e:e4:a2:39:a5:13:2a:44:88:20:8e:
b9:3d:50:f9:c1:bd:16:3f:aa:1c:f3:76:de:57:b4:
ca:39:d7:a1:37:1b:9a:71:c8:76:1f:ce:50:08:2a:
35:72:cc:53:10:a6:37:54:7e:0b:25:57:20:3e:58:
ac:34:3e:a0:71:32:dd:fb:65:69:ac:80:7e:7f:44:
12:dc:d4:a3:20:e4:b2:e4:a1:6c:16:ba:94:b2:2b:
4d:f9:8b:ee:0f:cd:93:c0:b2:d6:c9:10:9a:dc:73:
52:84:0e:a2:f5:2e:e8:16:f1:a0:23:52:5a:54:8e:
92:d7:b7:ec:dd:0d:3e:7c:5e:92:5b:a3:a3:11:99:
ee:c9:8e:6e:dd:e3:43:52:39:fe:11:a9:80:bd:f8:
55:60:1e:ba:18:af:23:4c:33:c8:fa:5b:b8:9d:a9:
04:c4:a3:8d:b4:10:22:7b:1b:14:67:20:65:67:77:
75:b2:b9:fc:ea:44:f5:5b:e4:a5:a0:bb:b0:fd:64:
85:c9:56:18:9f:d2:c3:af:5b:9c:8a:09:a5:88:55:
67:c3:f3:c7:f9:b5:e3:86:92:86:15:00:7f:44:aa:
a4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7A:E4:C7:4E:09:69:D7:0B:EF:60:C8:BE:20:4A:99:26:CB:AB:46
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:06:12:e9:a3:e4:49:78:b8:e6:e9:a1:83:7a:1a:ab:e4:60:
95:9e:84:5e:ac:6a:c9:b1:e5:31:0a:62:17:b1:49:fe:08:64:
73:b7:da:44:c0:1c:92:56:b6:ef:e7:ef:da:9c:61:17:0f:f4:
29:93:62:6f:cf:f9:22:bf:cc:d7:6b:d6:74:b6:05:02:9e:9a:
be:24:22:06:96:98:e0:ad:16:cb:f4:07:65:0d:19:83:a4:69:
7e:9a:61:97:67:d4:40:43:25:81:bf:b5:a8:d5:6b:68:aa:dd:
a1:91:c9:9a:d9:b1:5d:f0:6a:86:78:39:67:cf:49:72:c5:39:
2a:ba:e3:98:58:ef:c3:16:cd:9c:0d:df:ee:7b:e0:e2:99:94:
3f:bb:7f:56:c8:fc:eb:e5:43:dc:3c:dd:0e:39:59:33:4a:fb:
95:10:77:81:97:b8:21:22:6e:a5:64:ed:4d:c2:22:42:27:f6:
c2:10:f7:a2:b9:53:b2:2f:2e:d5:09:da:72:85:de:83:e3:64:
0d:43:2f:f2:c9:a3:b6:1a:75:66:03:7f:25:77:7a:50:dd:4f:
8a:93:9b:0a:7e:2b:53:06:4c:d1:c8:e9:e4:2c:00:14:cc:08:
0c:48:5b:9e:ef:13:1e:32:9e:2f:ac:fc:ab:d5:55:04:9f:06:
2b:a9:33:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iazrxCw+irYZHKXgpPbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNWFlY2JhMTAzYmIzYzBjMGU4ODRkNTIwZWIzODQ2NGQw
ZmE5MDMwHhcNMjYwMzI5MDMwMTAyWhcNMjYwMzMwMDMwMTAyWjAzMTEwLwYDVQQD
Eyg3YTdhZTRjNzRlMDk2OWQ3MGJlZjYwYzhiZTIwNGE5OTI2Y2JhYjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3uH/NsB9mxPVfiSu2v6hDQLX7hS
gElhADI+7EFvWXJ6buSiOaUTKkSIII65PVD5wb0WP6oc83beV7TKOdehNxuacch2
H85QCCo1csxTEKY3VH4LJVcgPlisND6gcTLd+2VprIB+f0QS3NSjIOSy5KFsFrqU
sitN+YvuD82TwLLWyRCa3HNShA6i9S7oFvGgI1JaVI6S17fs3Q0+fF6SW6OjEZnu
yY5u3eNDUjn+EamAvfhVYB66GK8jTDPI+lu4nakExKONtBAiexsUZyBlZ3d1srn8
6kT1W+SloLuw/WSFyVYYn9LDr1ucigmliFVnw/PH+bXjhpKGFQB/RKqkgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHp65MdOCWnXC+9gyL4gSpkmy6tGMB8GA1UdIwQY
MBaAFN5a7LoQO7PAwOiE1SDrOEZND6kDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xyc3VoQTdzOERBNklUVklPczRSazBQcVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81NWMxZjEtNjNhYi00MTQ1LWIxNTYt
ZTZhZWI5NDEzZjcyLzEvM2xyc3VoQTdzOERBNklUVklPczRSazBQcVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81NWMxZjEtNjNhYi00MTQ1LWIxNTYtZTZhZWI5NDEzZjcy
LzEvM2xyc3VoQTdzOERBNklUVklPczRSazBQcVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwYS6aPk
SXi45umhg3oaq+RglZ6EXqxqybHlMQpiF7FJ/ghkc7faRMAckla27+fv2pxhFw/0
KZNib8/5Ir/M12vWdLYFAp6aviQiBpaY4K0Wy/QHZQ0Zg6Rpfpphl2fUQEMlgb+1
qNVraKrdoZHJmtmxXfBqhng5Z89JcsU5KrrjmFjvwxbNnA3f7nvg4pmUP7t/Vsj8
6+VD3DzdDjlZM0r7lRB3gZe4ISJupWTtTcIiQif2whD3orlTsi8u1QnacoXeg+Nk
DUMv8smjthp1ZgN/JXd6UN1PipObCn4rUwZM0cjp5CwAFMwIDEhbnu8THjKeL6z8
q9VVBJ8GK6kzaA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:32 2026 by rpki-client