Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
File: 3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json)
Hash identifier: Q4TPuPvI/UvZFEqjkTYKHOvsaAZc3hJlVU1OD4FD7wE=
Subject key identifier: 74:A2:E7:E2:CF:0B:D8:CE:7D:03:B7:26:3E:29:12:15:4E:FD:9C:F1
Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
Certificate issuer: /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Certificate serial: 019D3564ACED1E12B6D86761A89733E18911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
Manifest number: 0D0E
Signing time: Sat 28 Mar 2026 17:01:23 +0000
Manifest this update: Sat 28 Mar 2026 17:01:23 +0000
Manifest next update: Sun 29 Mar 2026 17:01:23 +0000
Files and hashes: 1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: rTxcYAaSNBn0zdQ/ecuDnuqWRwzPk2PWIlMuyyWFWBo=)
2: 7gKbnCeEeFU9kgMWCw85IQnBGJs.roa (hash: BEos/oIubVJfuhxS0jxVgCoi+2xWKG0c7X3weGq3uEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:64:ac:ed:1e:12:b6:d8:67:61:a8:97:33:e1:89:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Validity
Not Before: Mar 28 17:01:23 2026 GMT
Not After : Mar 29 17:01:23 2026 GMT
Subject: CN=74a2e7e2cf0bd8ce7d03b7263e2912154efd9cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:c5:57:48:96:18:6d:63:84:e2:6a:61:28:
5e:ed:65:fe:59:41:6d:db:25:2b:4d:61:4d:2d:c7:
62:3f:6d:78:60:b1:49:59:78:6a:75:8e:94:69:65:
82:dc:f4:e9:fd:f3:33:ff:a3:ff:3f:fc:3e:4a:63:
c6:54:29:54:75:54:48:27:e4:22:e3:b8:9d:59:51:
d1:de:dd:15:49:08:88:9a:7d:7b:03:80:0b:87:2e:
05:b1:08:e5:64:b6:a1:67:63:39:d4:c8:26:32:f8:
b5:2b:f2:04:7f:f9:3b:a9:78:66:58:41:33:ee:c0:
db:34:a4:7f:b1:93:b1:1b:ce:64:e7:8b:21:f6:81:
65:1e:db:c3:d2:55:1f:9e:9e:ca:0f:a7:3d:5e:94:
d7:5e:19:e6:99:ed:92:1a:94:33:b4:82:37:c1:1e:
b6:03:87:79:86:f1:92:f6:d0:5c:a7:c9:b0:5b:89:
7c:f0:7f:de:8b:28:38:b5:9c:4c:62:63:3b:cb:44:
ff:08:e7:20:e9:60:70:0e:60:fc:ff:46:2e:7b:9f:
ec:44:99:ce:7a:9d:15:22:ff:db:4a:c7:17:d5:df:
60:d9:cd:d3:42:85:2f:74:17:9b:36:3f:e9:a3:ac:
41:b0:c5:87:e7:fe:e4:a6:00:b9:cb:e8:53:d9:1b:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A2:E7:E2:CF:0B:D8:CE:7D:03:B7:26:3E:29:12:15:4E:FD:9C:F1
X509v3 Authority Key Identifier:
keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:47:c4:3d:2f:69:df:a8:df:34:34:41:fe:8c:cd:1b:ab:b5:
a8:a8:db:a1:88:bf:7e:4a:91:e5:fe:5f:2d:37:1d:83:67:c1:
98:b2:8f:a8:20:f9:bb:cd:a9:af:26:44:0c:d7:c2:0a:63:74:
19:72:f1:86:41:49:22:c7:da:53:6d:9f:f5:a6:44:62:14:d9:
a0:94:3b:ed:e0:3a:b2:d2:f2:f2:fa:81:f7:9e:22:5f:8a:91:
c7:cf:32:7d:61:37:4a:44:08:b3:14:72:28:d5:3e:61:7d:52:
74:af:19:b0:fd:53:81:a8:2e:f1:3c:51:cd:2d:ff:77:4f:36:
7e:e8:1e:47:6e:73:1a:8f:96:a1:bc:57:76:8b:94:90:e2:45:
e5:a4:64:25:98:e1:3e:ec:35:ca:9f:ba:2f:b6:62:7c:89:b8:
33:ef:5a:60:ea:8c:76:71:a4:0e:5a:56:46:01:d9:ab:cd:45:
95:9d:45:a4:bd:7a:94:85:16:8d:53:86:b6:84:51:ec:0b:93:
2a:62:c2:21:ac:2a:98:40:ae:5c:c3:27:d7:c2:9b:96:43:22:
9c:22:c0:ca:f7:3b:94:a9:f4:12:c3:31:c1:ad:9c:f6:09:0d:
c3:05:49:e6:78:36:96:5b:e7:a5:5e:ca:7a:3d:e0:bc:bf:e7:
4a:7e:d7:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ01ZKztHhK22GdhqJcz4YkRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNWQyY2ZiZGI5ZDU4ZDU3NDBmZjM3NWEzMTViMzgyNTQ0
YTk0YWUwHhcNMjYwMzI4MTcwMTIzWhcNMjYwMzI5MTcwMTIzWjAzMTEwLwYDVQQD
Eyg3NGEyZTdlMmNmMGJkOGNlN2QwM2I3MjYzZTI5MTIxNTRlZmQ5Y2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunnFV0iWGG1jhOJqYShe7WX+WUFt
2yUrTWFNLcdiP214YLFJWXhqdY6UaWWC3PTp/fMz/6P/P/w+SmPGVClUdVRIJ+Qi
47idWVHR3t0VSQiImn17A4ALhy4FsQjlZLahZ2M51MgmMvi1K/IEf/k7qXhmWEEz
7sDbNKR/sZOxG85k54sh9oFlHtvD0lUfnp7KD6c9XpTXXhnmme2SGpQztII3wR62
A4d5hvGS9tBcp8mwW4l88H/eiyg4tZxMYmM7y0T/COcg6WBwDmD8/0Yue5/sRJnO
ep0VIv/bSscX1d9g2c3TQoUvdBebNj/po6xBsMWH5/7kpgC5y+hT2RufcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSi5+LPC9jOfQO3Jj4pEhVO/ZzxMB8GA1UdIwQY
MBaAFNxdLPvbnVjVdA/zdaMVs4JUSpSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wYjk5ZDktNWFlOS00YWE2LWEyZmMt
MTg0MjM0OGY1YzZjLzEvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8wYjk5ZDktNWFlOS00YWE2LWEyZmMtMTg0MjM0OGY1YzZj
LzEvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0fEPS9p
36jfNDRB/ozNG6u1qKjboYi/fkqR5f5fLTcdg2fBmLKPqCD5u82pryZEDNfCCmN0
GXLxhkFJIsfaU22f9aZEYhTZoJQ77eA6stLy8vqB954iX4qRx88yfWE3SkQIsxRy
KNU+YX1SdK8ZsP1Tgagu8TxRzS3/d082fugeR25zGo+WobxXdouUkOJF5aRkJZjh
Puw1yp+6L7ZifIm4M+9aYOqMdnGkDlpWRgHZq81FlZ1FpL16lIUWjVOGtoRR7AuT
KmLCIawqmECuXMMn18KblkMinCLAyvc7lKn0EsMxwa2c9gkNwwVJ5ng2llvnpV7K
ej3gvL/nSn7X6Q==
-----END CERTIFICATE-----
Generated at Sat Mar 28 21:44:45 2026 by rpki-client