Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: pViK883IyfN2hLgLixQxsJvTqwKJ+4Yoy+ffcEUtgRQ=
Subject key identifier: BC:4F:44:4F:C1:CA:B1:3A:CF:96:0A:F7:92:69:F4:1A:42:B7:92:58
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 019D39E54BBEF0612BFABE911480609FF8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 14:00:21 +0000
Manifest this update: Sun 29 Mar 2026 14:00:21 +0000
Manifest next update: Mon 30 Mar 2026 14:00:21 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: hGVaHUfLL1/Ss3hxUw3HTObLt6Pl5KmIQ03CWpub6eY=)
2: iKwLG1q1sDs9tvR7rIxpNbBHq4g.roa (hash: 5Al8Pm91tYMp0+j7fJGmguSqWX96C92TH8gJMDHEyyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:4b:be:f0:61:2b:fa:be:91:14:80:60:9f:f8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Mar 29 14:00:21 2026 GMT
Not After : Mar 30 14:00:21 2026 GMT
Subject: CN=bc4f444fc1cab13acf960af79269f41a42b79258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:4e:d0:07:f0:6f:1e:1c:04:d1:e2:30:0c:
74:f5:62:9c:2e:07:ba:2e:67:16:02:5f:37:d7:88:
fc:4a:42:3b:32:b3:9e:9a:b2:17:58:84:3d:76:4a:
4d:f1:58:fd:7e:e1:f5:7e:05:bf:e9:ca:ac:11:32:
0b:a1:1b:d4:66:00:aa:d6:d0:45:bf:a4:f1:10:92:
42:c3:40:00:6b:fd:6c:37:5d:9f:2e:21:0b:b8:d1:
dd:44:80:b6:ea:a6:ce:7a:99:81:36:26:03:c9:8c:
99:a4:49:b1:d7:94:50:8a:9b:70:14:af:22:4b:5a:
ee:fd:df:bf:c1:77:11:ff:69:0b:22:3d:23:7d:62:
94:b1:be:21:59:d9:14:6f:6f:a3:72:20:33:a9:d5:
ce:07:dc:b9:c5:de:da:37:de:64:46:f3:9a:1e:a6:
9a:39:74:f9:b3:c5:8f:98:b4:5e:ec:37:63:2e:f6:
75:0c:e2:9f:18:81:e4:22:92:ae:55:d7:0d:0f:3d:
60:51:99:bb:dd:13:7b:3f:ae:01:cd:76:78:73:c0:
d5:60:7c:ce:e5:29:52:91:23:91:9b:67:02:c4:ec:
8a:a4:8d:33:1a:7c:c6:d0:83:ee:fa:7c:78:40:09:
58:87:4f:bf:93:6f:bc:60:b0:91:77:4b:85:dd:b6:
de:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4F:44:4F:C1:CA:B1:3A:CF:96:0A:F7:92:69:F4:1A:42:B7:92:58
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:63:2b:1e:f4:d6:da:9a:e4:1d:23:55:ef:3f:d2:97:5d:cd:
59:0c:f8:79:84:3d:b5:84:f2:da:eb:8c:e2:ae:ec:72:63:ff:
65:38:2c:6b:d6:e5:a6:5b:44:70:68:91:b7:03:ee:f1:33:9d:
82:04:ed:fd:cb:72:30:5a:b0:05:a9:e2:1c:0c:d8:01:a9:9c:
c8:e1:bb:91:2d:bf:29:5d:0e:22:44:de:88:08:58:7a:69:63:
c7:41:de:05:05:35:68:29:aa:e8:8e:90:ad:4a:9b:12:0e:de:
3b:3f:65:d3:76:f4:5c:30:c4:b0:dd:38:9c:87:13:87:fb:74:
71:3a:4e:1d:27:78:66:e9:2e:b8:91:af:04:05:b1:99:b9:7a:
b5:3f:b1:cc:c3:79:33:10:22:c0:67:c3:11:26:fe:61:f1:6c:
5f:56:74:d7:f2:da:cc:d6:21:e6:bd:32:8e:cf:b2:c1:ed:a8:
ad:b0:f6:d4:ac:7b:9f:0b:2a:6c:ea:20:0b:74:87:f0:ba:85:
32:89:1b:d5:f6:f2:22:2c:a0:b9:d8:b7:fa:b1:ef:0e:92:29:
01:87:e5:2e:8c:b5:da:41:a0:e7:16:28:d9:86:11:41:03:0e:
c7:91:03:df:a8:79:3a:a9:a3:1f:56:8d:19:c7:b3:f5:e8:e0:
83:72:7b:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055Uu+8GEr+r6RFIBgn/i6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZWFkOTE5Yjg1YTEzMDUxZDAyMDhiN2UyOGRkY2NiMzk4
YjE0ZDYwHhcNMjYwMzI5MTQwMDIxWhcNMjYwMzMwMTQwMDIxWjAzMTEwLwYDVQQD
EyhiYzRmNDQ0ZmMxY2FiMTNhY2Y5NjBhZjc5MjY5ZjQxYTQyYjc5MjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuVO0Afwbx4cBNHiMAx09WKcLge6
LmcWAl8314j8SkI7MrOemrIXWIQ9dkpN8Vj9fuH1fgW/6cqsETILoRvUZgCq1tBF
v6TxEJJCw0AAa/1sN12fLiELuNHdRIC26qbOepmBNiYDyYyZpEmx15RQiptwFK8i
S1ru/d+/wXcR/2kLIj0jfWKUsb4hWdkUb2+jciAzqdXOB9y5xd7aN95kRvOaHqaa
OXT5s8WPmLRe7DdjLvZ1DOKfGIHkIpKuVdcNDz1gUZm73RN7P64BzXZ4c8DVYHzO
5SlSkSORm2cCxOyKpI0zGnzG0IPu+nx4QAlYh0+/k2+8YLCRd0uF3bbe7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxPRE/ByrE6z5YK95Jp9BpCt5JYMB8GA1UdIwQY
MBaAFN3q2Rm4WhMFHQIIt+KN3Ms5ixTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84ZWZmZTQtZWRiYi00ZGQ0LTg1ZDQt
NDhiOGI1YTliNDExLzEvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS84ZWZmZTQtZWRiYi00ZGQ0LTg1ZDQtNDhiOGI1YTliNDEx
LzEvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGMrHvTW
2prkHSNV7z/Sl13NWQz4eYQ9tYTy2uuM4q7scmP/ZTgsa9blpltEcGiRtwPu8TOd
ggTt/ctyMFqwBaniHAzYAamcyOG7kS2/KV0OIkTeiAhYemljx0HeBQU1aCmq6I6Q
rUqbEg7eOz9l03b0XDDEsN04nIcTh/t0cTpOHSd4ZukuuJGvBAWxmbl6tT+xzMN5
MxAiwGfDESb+YfFsX1Z01/LazNYh5r0yjs+ywe2orbD21Kx7nwsqbOogC3SH8LqF
Mokb1fbyIiygudi3+rHvDpIpAYflLoy12kGg5xYo2YYRQQMOx5ED36h5OqmjH1aN
Gcez9ejgg3J7yg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:01 2026 by rpki-client