Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json)
Hash identifier: Vx620P0tlXFTAy8F2sV1/Pbaf/Zs8n85AosuWgNlg9w=
Subject key identifier: 1B:A8:E4:8E:B9:08:57:31:C9:C0:20:9E:C0:68:40:51:34:3F:6C:F7
Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Certificate serial: 019E3184BA46786E6E2B43A74B585DEDBE88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
Manifest number: 150A
Signing time: Sat 16 May 2026 16:00:42 +0000
Manifest this update: Sat 16 May 2026 16:00:42 +0000
Manifest next update: Sun 17 May 2026 16:00:42 +0000
Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: Ys3KknoPJKSOwy/fwGMsUrrbPdn7yVBzwhFqggQUIsE=)
2: rK_eXiPCuOjW-auhckDc_o9LpbU.roa (hash: 9zrMuRy0E1ETZnPDy8ZqKg+/z8n/i1oHLCCis26nPQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:84:ba:46:78:6e:6e:2b:43:a7:4b:58:5d:ed:be:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Validity
Not Before: May 16 16:00:42 2026 GMT
Not After : May 17 16:00:42 2026 GMT
Subject: CN=1ba8e48eb9085731c9c0209ec0684051343f6cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:f6:df:9c:b1:67:ae:d9:c8:26:3c:d1:db:
45:22:7a:8c:0a:6f:84:ba:74:ba:77:10:bf:32:ff:
e0:6a:be:fd:55:5d:9e:55:bc:95:c0:9a:b0:a8:77:
92:ce:7b:bb:39:0e:b9:b4:04:93:bd:73:2e:b4:35:
ab:39:d6:e8:4b:45:e5:10:a2:17:f8:8d:95:c6:3e:
8d:8c:ef:71:62:3c:47:d2:b2:ca:ef:32:ca:dd:56:
47:b1:77:45:f5:5e:25:bc:4a:22:ac:bc:92:ea:6e:
70:9f:ee:9b:4f:ea:57:54:0b:66:88:5d:42:6f:47:
39:a0:81:f6:ae:25:7a:42:9f:2d:45:3e:3a:07:97:
4c:05:2a:3e:4a:16:e0:9c:b8:bd:0c:72:e4:a8:ca:
c0:bc:1e:a5:42:e6:1d:6f:d0:4a:56:32:27:88:bc:
e2:96:80:c2:37:0f:86:70:bb:81:ea:fd:cb:00:c2:
01:36:ef:bd:e9:f3:68:6e:28:fc:26:4a:9f:53:cd:
22:3f:87:e3:ac:2e:ef:e0:4c:3e:9e:25:e1:51:20:
7a:e9:d0:c8:71:dc:7b:61:65:89:f5:2c:16:8e:c4:
2f:a4:6c:7c:fa:10:df:50:52:b0:2c:3a:3b:e0:47:
99:ca:a2:46:cf:b1:93:f2:58:60:37:f1:f9:13:72:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:E4:8E:B9:08:57:31:C9:C0:20:9E:C0:68:40:51:34:3F:6C:F7
X509v3 Authority Key Identifier:
keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:99:74:b2:14:7a:95:21:f1:00:2f:fb:d8:1b:f7:e5:6b:ad:
30:c8:55:8f:24:40:88:8a:db:b5:07:af:55:66:0d:59:59:48:
d1:2f:35:f8:d3:b9:4a:0d:9b:03:1f:71:ee:e7:28:08:68:e2:
0a:d8:c0:c5:42:13:cf:79:3d:3b:d0:38:d5:d1:ce:0b:40:77:
93:34:00:2a:51:b4:2b:e6:75:e2:99:8b:58:bd:1f:8b:00:80:
5f:22:4e:6b:38:c1:7f:0f:46:d1:0e:6c:e6:5d:7a:e9:b0:d6:
87:04:85:85:bf:aa:dd:6a:f4:c6:2a:1f:97:44:2e:46:ff:82:
72:33:d0:e5:8b:9b:d2:bb:ed:0a:cf:55:19:07:5a:9e:bf:26:
8b:34:41:89:1f:66:de:ec:4d:61:06:61:c3:28:4a:8a:a9:f8:
42:bb:b0:5b:bd:5d:a4:ad:0e:4c:d9:8c:89:b6:68:09:92:b4:
83:90:d3:ef:20:58:5e:9a:6b:5e:b9:31:b1:1b:07:8b:be:38:
94:45:b3:72:78:ed:04:2c:de:4c:4e:92:f7:ca:c6:b6:e9:d6:
b6:0b:f8:ad:d3:c2:8f:9b:25:f1:98:c7:50:2e:dd:10:13:5e:
76:6b:66:0e:b8:c3:07:3b:8f:98:76:1a:18:8f:ec:42:a4:05:
60:8b:d5:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhLpGeG5uK0OnS1hd7b6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTRmZTZjZGE5MGM5YWZlODA3NTkwZDJkNTAzNzRhNzZh
MjhlMTMwHhcNMjYwNTE2MTYwMDQyWhcNMjYwNTE3MTYwMDQyWjAzMTEwLwYDVQQD
EygxYmE4ZTQ4ZWI5MDg1NzMxYzljMDIwOWVjMDY4NDA1MTM0M2Y2Y2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz7235yxZ67ZyCY80dtFInqMCm+E
unS6dxC/Mv/gar79VV2eVbyVwJqwqHeSznu7OQ65tASTvXMutDWrOdboS0XlEKIX
+I2Vxj6NjO9xYjxH0rLK7zLK3VZHsXdF9V4lvEoirLyS6m5wn+6bT+pXVAtmiF1C
b0c5oIH2riV6Qp8tRT46B5dMBSo+ShbgnLi9DHLkqMrAvB6lQuYdb9BKVjIniLzi
loDCNw+GcLuB6v3LAMIBNu+96fNobij8JkqfU80iP4fjrC7v4Ew+niXhUSB66dDI
cdx7YWWJ9SwWjsQvpGx8+hDfUFKwLDo74EeZyqJGz7GT8lhgN/H5E3L2EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuo5I65CFcxycAgnsBoQFE0P2z3MB8GA1UdIwQY
MBaAFN8U/mzakMmv6AdZDS1QN0p2oo4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAt
ZGE3MzhhMzkwZjZlLzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAtZGE3MzhhMzkwZjZl
LzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJl0shR6
lSHxAC/72Bv35WutMMhVjyRAiIrbtQevVWYNWVlI0S81+NO5Sg2bAx9x7ucoCGji
CtjAxUITz3k9O9A41dHOC0B3kzQAKlG0K+Z14pmLWL0fiwCAXyJOazjBfw9G0Q5s
5l166bDWhwSFhb+q3Wr0xiofl0QuRv+CcjPQ5Yub0rvtCs9VGQdanr8mizRBiR9m
3uxNYQZhwyhKiqn4QruwW71dpK0OTNmMibZoCZK0g5DT7yBYXpprXrkxsRsHi744
lEWzcnjtBCzeTE6S98rGtunWtgv4rdPCj5sl8ZjHUC7dEBNedmtmDrjDBzuPmHYa
GI/sQqQFYIvVvw==
-----END CERTIFICATE-----
Generated at Sat May 16 17:55:57 2026 by rpki-client