Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json)
Hash identifier: gl9DCIw6sjzMX6d7jDPvQMwLFfBmZJTbHF7Sd2ZkJiM=
Subject key identifier: 7C:DC:7F:54:FE:37:95:EF:43:C2:05:1C:D6:D9:8A:B2:EE:58:F1:7B
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 019E3185C5A9F011271060105236408501E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
Manifest number: 0C37
Signing time: Sat 16 May 2026 16:01:50 +0000
Manifest this update: Sat 16 May 2026 16:01:50 +0000
Manifest next update: Sun 17 May 2026 16:01:50 +0000
Files and hashes: 1: 1-h07jUm-02q1q7k5iFHSAwPoCOY.roa (hash: wYacQ3/0cWpPvmvpOGx2amNX3ChOHhpv2IkMIQcd1kU=)
2: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: uV5pr/RQO8tOPAVNhAMREqlsDe6sR7SKNrdswWB98Cc=)
3: 8n9eZIW7ANGT-kZFn82_ark7Uv4.roa (hash: iSzxnZr5liuYDapFFff4VPiBs6DGqwu/5GYq/65KGeY=)
4: MbxVurKYN8xqBXt4GCcNgnfIuiY.roa (hash: x3GDjgwgD1RnHIS+Ztov3aWczXJrFL3jnbKHq3Hp8xY=)
5: bUXJJvXZD8HG86LeZV98-RJ1Y8A.roa (hash: LD+kXEg0Yv3J8X5RNHtOf1eUf3fGuk+QTSdoYbzqlLc=)
6: dTkIbbfoGWiZWY2r_Gv0Qj6ef3o.roa (hash: PRmyS7FYnGqapGRXhdp+LVcWuV+Zrh/jHa9470RQd+c=)
7: jXnaEvzPAKlwUURcuri_2EY0APE.roa (hash: bJ2+8fTTeF2ubi8NQ1u0/9fvglhy+2tBtDJvXGWQnEM=)
8: qALn9gqzSG2sWHjlwEpfBVz6XHw.roa (hash: /P0a4k08c7gRHw6tH90mR+C7VwWiM7eRL8Ct7d9zsTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:c5:a9:f0:11:27:10:60:10:52:36:40:85:01:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: May 16 16:01:50 2026 GMT
Not After : May 17 16:01:50 2026 GMT
Subject: CN=7cdc7f54fe3795ef43c2051cd6d98ab2ee58f17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:15:0f:93:fc:a7:77:40:83:32:3a:51:ab:
09:0f:85:22:a7:03:08:a2:73:2a:50:8b:2c:cf:0e:
c4:3b:fd:65:cb:b1:11:64:86:58:06:22:c9:f1:6c:
ef:c4:06:4d:fa:85:8a:a7:ae:ad:f0:cc:e0:41:59:
b3:ba:96:3a:e9:32:d6:ed:32:dc:17:4d:57:76:62:
dd:d0:7a:bc:da:40:19:76:82:4d:18:64:87:7f:99:
05:a7:bb:bc:c2:a5:5b:a3:59:12:dd:69:29:24:60:
b2:6b:f7:77:69:ee:0b:6b:56:11:63:9c:73:f9:5d:
0e:7c:1b:52:21:2c:d4:b7:52:bd:18:44:a6:13:93:
66:6c:90:ee:52:97:09:75:8f:cb:13:9a:5b:2e:88:
21:d1:82:06:48:ed:93:4b:11:15:5a:d4:da:28:c1:
a9:fe:24:c0:8d:96:ca:c6:05:11:a1:e0:9d:3d:c7:
52:a5:c3:02:6f:43:a0:db:56:98:b3:b4:f5:82:c6:
38:ff:b2:10:83:d8:44:55:41:3d:7a:56:28:c9:a7:
51:85:ce:d3:25:12:fb:0f:94:cf:33:1b:dd:9c:35:
02:d0:26:8b:22:bf:b0:3a:46:78:ba:0c:72:b1:df:
d7:2b:a3:23:ad:fa:b4:75:20:4e:d0:bc:bf:18:6e:
3a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DC:7F:54:FE:37:95:EF:43:C2:05:1C:D6:D9:8A:B2:EE:58:F1:7B
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:b2:a5:36:fa:aa:81:91:f0:95:c4:30:e8:3c:44:aa:af:7e:
3e:cf:f6:9f:9c:12:3c:0a:a6:d9:c5:8d:2f:16:ff:70:ce:21:
fc:95:42:1d:bf:be:c3:8f:de:60:ee:9e:b6:5d:ef:93:cf:18:
0a:ad:29:a6:08:55:3e:f9:e6:39:a4:6a:c6:23:b5:b1:7a:ef:
40:ae:22:d8:8c:6d:17:42:43:ad:03:d8:7d:1f:54:b0:26:91:
9e:51:e6:3e:75:f7:c9:21:28:90:e6:8c:a7:e8:cf:f8:e4:a4:
68:f8:3e:cc:95:19:fb:ed:38:1a:ab:0b:a8:f5:8d:0d:f7:39:
66:e3:56:54:2b:bd:b1:f7:b0:44:e3:cc:bf:78:eb:90:4a:b8:
a9:10:59:d5:36:16:9a:af:63:ba:e1:ea:59:4e:97:23:f2:af:
d3:8c:83:e3:60:f3:77:0a:f9:e4:4b:fb:fd:18:e0:d5:f2:e6:
20:16:a3:c9:2f:6a:4c:59:d0:ef:e4:4b:0c:2b:28:b8:7c:3b:
a0:15:ee:6c:9c:cf:89:6d:2b:f3:5f:64:7d:c8:60:3b:0d:90:
fc:74:8f:2a:e4:d5:73:78:1f:2a:54:0b:93:b4:1c:77:56:68:
d8:6c:43:c6:a5:33:2e:ac:62:0f:96:15:da:cc:65:30:e8:db:
82:15:84:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhcWp8BEnEGAQUjZAhQHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMWRhZWNkMzBhZWI3NDY1MmJiZGRhNWRhZDk2NzZjZTQ4
OGFhNDkwHhcNMjYwNTE2MTYwMTUwWhcNMjYwNTE3MTYwMTUwWjAzMTEwLwYDVQQD
Eyg3Y2RjN2Y1NGZlMzc5NWVmNDNjMjA1MWNkNmQ5OGFiMmVlNThmMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMkVD5P8p3dAgzI6UasJD4UipwMI
onMqUIsszw7EO/1ly7ERZIZYBiLJ8WzvxAZN+oWKp66t8MzgQVmzupY66TLW7TLc
F01XdmLd0Hq82kAZdoJNGGSHf5kFp7u8wqVbo1kS3WkpJGCya/d3ae4La1YRY5xz
+V0OfBtSISzUt1K9GESmE5NmbJDuUpcJdY/LE5pbLogh0YIGSO2TSxEVWtTaKMGp
/iTAjZbKxgURoeCdPcdSpcMCb0Og21aYs7T1gsY4/7IQg9hEVUE9elYoyadRhc7T
JRL7D5TPMxvdnDUC0CaLIr+wOkZ4ugxysd/XK6Mjrfq0dSBO0Ly/GG46jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzcf1T+N5XvQ8IFHNbZirLuWPF7MB8GA1UdIwQY
MBaAFN0drs0wrrdGUrvdpdrZZ2zkiKpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct
MDYwYWMwODkwOTY2LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTctMDYwYWMwODkwOTY2
LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyrKlNvqq
gZHwlcQw6DxEqq9+Ps/2n5wSPAqm2cWNLxb/cM4h/JVCHb++w4/eYO6etl3vk88Y
Cq0ppghVPvnmOaRqxiO1sXrvQK4i2IxtF0JDrQPYfR9UsCaRnlHmPnX3ySEokOaM
p+jP+OSkaPg+zJUZ++04GqsLqPWNDfc5ZuNWVCu9sfewROPMv3jrkEq4qRBZ1TYW
mq9juuHqWU6XI/Kv04yD42Dzdwr55Ev7/Rjg1fLmIBajyS9qTFnQ7+RLDCsouHw7
oBXubJzPiW0r819kfchgOw2Q/HSPKuTVc3gfKlQLk7Qcd1Zo2GxDxqUzLqxiD5YV
2sxlMOjbghWELg==
-----END CERTIFICATE-----
Generated at Sat May 16 17:55:34 2026 by rpki-client