Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: lEglLc6TZsSJ9TrGXWoJM4KpuiTKKTyba7+chFoUMUc=
Subject key identifier: 81:D0:68:B5:05:85:38:BB:74:AC:CF:84:A7:7B:60:49:56:7B:17:1E
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 019D33757AAF59579B60E93CB1D35D638167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 139F
Signing time: Sat 28 Mar 2026 08:00:30 +0000
Manifest this update: Sat 28 Mar 2026 08:00:30 +0000
Manifest next update: Sun 29 Mar 2026 08:00:30 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: 5Pa6DOjH8d8Zv7EmCiHfG6CtLIBzvEHzG0u1ywV2xSs=)
2: oglaQX4nFsIGr-Rok7QLUW7-tlM.roa (hash: s+KJpOp9hYCyRUjA+Of2ZWgASyr4epw2ZvVJ2zuqMSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:7a:af:59:57:9b:60:e9:3c:b1:d3:5d:63:81:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Mar 28 08:00:30 2026 GMT
Not After : Mar 29 08:00:30 2026 GMT
Subject: CN=81d068b5058538bb74accf84a77b6049567b171e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:19:ca:6b:ea:69:37:e2:73:f6:3d:98:74:
a4:4b:63:be:ff:07:ea:01:a4:f5:93:ac:71:68:23:
f1:b4:89:28:ed:de:0d:d6:4e:5d:0f:49:52:85:e9:
1e:fb:b6:74:32:1e:ec:62:9d:d5:6c:77:93:25:7b:
88:63:67:92:13:97:ad:f3:30:de:8c:92:f3:ad:22:
d6:8d:78:5c:b0:f3:5a:95:54:2a:8c:88:f2:78:c7:
9b:76:89:71:62:47:94:f4:30:3c:7d:96:0a:60:5a:
35:e4:f3:56:dc:93:9f:07:72:fc:36:5f:91:6e:dc:
a2:d2:4d:70:c1:3f:9f:5e:60:45:d2:76:b6:1e:72:
6c:b6:02:9e:ba:5e:59:35:1e:86:71:bd:f8:fd:b3:
47:2b:fc:f9:ae:c6:95:33:55:5b:f9:b0:be:21:6f:
bc:36:d2:f9:56:96:38:f0:00:fd:14:05:78:a2:eb:
b7:3f:da:a1:e3:d6:60:73:1e:15:30:a4:cd:d6:87:
3c:58:7f:31:98:64:a3:a6:42:a2:7a:9b:9f:ff:39:
0c:89:56:4f:7a:76:15:e9:3b:3a:41:61:e5:6d:ae:
ea:84:7a:0a:8a:af:dd:67:5a:71:0a:19:c7:b5:50:
21:9e:5f:87:a8:a5:17:76:80:ea:72:1a:88:d0:4b:
bb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D0:68:B5:05:85:38:BB:74:AC:CF:84:A7:7B:60:49:56:7B:17:1E
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2c:41:1c:b7:3e:d8:e7:96:28:d8:25:0a:de:c0:32:fe:18:
39:58:fe:99:17:01:05:21:42:7e:d8:79:46:02:31:08:f4:71:
bc:c5:3b:93:cf:52:92:9d:b2:bd:1c:5c:f8:d9:2a:2a:6f:9c:
1b:5d:d2:1b:f7:3b:fe:e6:32:07:ee:c5:26:ce:ef:55:08:63:
28:e2:45:2c:f0:f6:7e:21:03:d7:8e:b3:20:e8:4c:31:53:e0:
44:c0:f4:c4:85:c3:3d:ef:36:8c:44:7f:b8:4b:8e:7e:37:c2:
d5:67:fd:7e:41:0d:9f:a6:2e:e9:a3:1c:d6:bf:7e:a7:76:ae:
c4:66:7c:27:6d:3b:88:de:cb:39:05:c2:5a:76:e6:15:d5:19:
59:cb:73:8a:f4:94:39:10:c3:4f:05:19:b3:40:9d:d2:1e:be:
2a:94:4d:5c:d1:30:37:60:3f:0d:52:dd:c4:39:dc:91:a4:94:
15:f9:a3:e3:5b:46:84:1a:1c:96:d5:c7:32:e9:73:c8:9f:f7:
a8:bf:89:83:93:49:56:bb:fe:56:77:b8:1b:b5:00:a6:0c:5d:
d6:50:c5:f7:a8:5d:50:f1:f2:f8:8d:30:80:2b:37:a8:53:54:
da:bb:78:ad:e3:7c:29:38:bf:18:1e:df:18:c5:01:37:3d:73:
57:3d:c5:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zdXqvWVebYOk8sdNdY4FnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGUxYjkwZDUxMmNjMzQwMmY3NjE0MTQwNjI5Nzk1ZTRk
NGFjNGMwHhcNMjYwMzI4MDgwMDMwWhcNMjYwMzI5MDgwMDMwWjAzMTEwLwYDVQQD
Eyg4MWQwNjhiNTA1ODUzOGJiNzRhY2NmODRhNzdiNjA0OTU2N2IxNzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn4ZymvqaTfic/Y9mHSkS2O+/wfq
AaT1k6xxaCPxtIko7d4N1k5dD0lSheke+7Z0Mh7sYp3VbHeTJXuIY2eSE5et8zDe
jJLzrSLWjXhcsPNalVQqjIjyeMebdolxYkeU9DA8fZYKYFo15PNW3JOfB3L8Nl+R
btyi0k1wwT+fXmBF0na2HnJstgKeul5ZNR6Gcb34/bNHK/z5rsaVM1Vb+bC+IW+8
NtL5VpY48AD9FAV4ouu3P9qh49Zgcx4VMKTN1oc8WH8xmGSjpkKiepuf/zkMiVZP
enYV6Ts6QWHlba7qhHoKiq/dZ1pxChnHtVAhnl+HqKUXdoDqchqI0Eu7VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHQaLUFhTi7dKzPhKd7YElWexceMB8GA1UdIwQY
MBaAFNwOG5DVEsw0AvdhQUBil5Xk1KxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYt
MTZmNTJjZWE0ZWIxLzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYtMTZmNTJjZWE0ZWIx
LzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSxBHLc+
2OeWKNglCt7AMv4YOVj+mRcBBSFCfth5RgIxCPRxvMU7k89Skp2yvRxc+NkqKm+c
G13SG/c7/uYyB+7FJs7vVQhjKOJFLPD2fiED146zIOhMMVPgRMD0xIXDPe82jER/
uEuOfjfC1Wf9fkENn6Yu6aMc1r9+p3auxGZ8J207iN7LOQXCWnbmFdUZWctzivSU
ORDDTwUZs0Cd0h6+KpRNXNEwN2A/DVLdxDnckaSUFfmj41tGhBocltXHMulzyJ/3
qL+Jg5NJVrv+Vne4G7UApgxd1lDF96hdUPHy+I0wgCs3qFNU2rt4reN8KTi/GB7f
GMUBNz1zVz3FKA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 18:25:45 2026 by rpki-client