Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: wSY/13tYs6i0okNWpQiDeZQ82Xbke0tV6hBv98/cUxk=
Subject key identifier: 93:BE:64:49:1D:9B:10:AA:34:FC:F9:D4:C1:7F:5A:0B:46:2E:41:F1
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 019D3909BD251D61C5D96F633C36574226A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:32 +0000
Manifest this update: Sun 29 Mar 2026 10:00:32 +0000
Manifest next update: Mon 30 Mar 2026 10:00:32 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: kwI4nHutA5rPjiFblzdaBj23Vejpdl0TkXxrjpnIC1s=)
2: 3zlYESujx6iqyh6hQsCczNEcHfA.roa (hash: giiowx0wopsav1ocUyq7di4cnnYmyvwdPI251v0t4Nk=)
3: SQYU9I8icjC1PnXxoUMPA7hZuuQ.roa (hash: os/3JTQZo5v32/YUHuB42SkbCkSG8rkSt1h0Yz40ENE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:bd:25:1d:61:c5:d9:6f:63:3c:36:57:42:26:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Mar 29 10:00:32 2026 GMT
Not After : Mar 30 10:00:32 2026 GMT
Subject: CN=93be64491d9b10aa34fcf9d4c17f5a0b462e41f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:eb:37:67:c6:65:25:14:b4:66:c1:b9:59:
2c:0b:b1:5d:90:b4:0b:69:fb:13:9e:12:c0:81:7d:
8e:54:70:95:a1:78:ce:96:76:cf:6d:ff:b7:19:01:
ba:08:36:34:c5:66:05:72:f2:3d:63:c6:ef:43:1f:
d0:5d:85:90:6c:1b:34:0c:5d:a2:7c:29:86:98:fa:
0b:7d:36:2e:80:ef:08:26:ef:20:cc:bc:c6:48:ef:
cb:f6:db:67:e6:f5:7d:69:2e:8f:e4:d0:10:ab:36:
8f:9d:20:c7:3c:57:c8:7a:80:23:58:f5:49:b1:e6:
ea:99:dd:52:e2:f8:11:b1:3e:fb:01:5c:9d:4f:5a:
4c:f4:5b:5b:b5:65:ce:7e:a0:a1:68:b7:dd:36:b7:
95:22:fc:a3:82:7e:68:b0:9a:32:4b:e4:95:76:71:
63:2a:a7:01:a9:5b:d5:fe:66:4f:15:e2:51:f8:90:
30:fd:88:65:f3:70:bd:2f:8d:12:7f:2a:3c:2c:27:
dd:91:63:00:8d:97:bd:3d:57:d6:a0:47:69:e2:53:
15:6c:6b:47:a9:27:7f:e6:15:58:c9:ae:18:de:eb:
bd:46:d4:c6:70:a9:41:5c:0a:2f:30:4a:e2:13:52:
2c:49:b9:e4:af:3c:a8:89:41:ac:7e:9c:86:19:e1:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BE:64:49:1D:9B:10:AA:34:FC:F9:D4:C1:7F:5A:0B:46:2E:41:F1
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e9:9c:dd:f1:bd:ae:77:7f:21:0a:43:6c:80:60:bb:7c:0a:
07:e9:33:1d:4d:de:95:ee:5f:dc:24:56:a6:bf:ae:a4:92:75:
e4:b2:3d:2e:e5:80:82:f6:d3:1c:b2:37:13:8d:27:e9:70:b5:
44:74:77:43:4f:43:c9:9f:1d:3b:06:17:92:74:05:9e:8f:c5:
c7:31:01:c3:6d:fa:d6:79:bb:9d:bb:a4:07:c2:77:7e:10:cd:
de:e1:b0:03:0b:c5:1f:d7:f7:41:9c:25:3f:ba:b2:13:4c:a0:
7d:54:44:75:2c:ae:7d:e9:0e:2f:be:93:4d:65:bf:24:c4:2b:
69:85:73:0e:57:36:eb:f2:74:20:16:7f:7e:7c:ba:7a:a4:19:
53:7b:5b:b5:a0:0e:eb:33:c6:fd:94:29:b2:9d:7c:ae:76:a1:
51:78:6d:e4:1a:ca:66:58:e0:d8:be:32:73:4c:f6:4a:d6:f0:
c2:38:6f:79:06:c0:8c:b8:40:a4:73:97:f7:42:c3:0b:5f:9b:
4b:42:70:d9:34:17:5b:fd:10:38:80:d0:a4:ab:8a:65:78:3a:
cd:fe:32:bb:b3:e9:16:d3:e5:09:97:7b:7c:72:c9:a0:db:a0:
62:21:8e:ce:83:c5:8d:a2:1b:be:47:29:26:e8:13:74:35:66:
cf:7b:5e:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cb0lHWHF2W9jPDZXQiagMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjFkZjU5OGY0YThmM2EyZDA3NGNjYjZmNmQxNmI1NGQx
ZDExMWMwHhcNMjYwMzI5MTAwMDMyWhcNMjYwMzMwMTAwMDMyWjAzMTEwLwYDVQQD
Eyg5M2JlNjQ0OTFkOWIxMGFhMzRmY2Y5ZDRjMTdmNWEwYjQ2MmU0MWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8brN2fGZSUUtGbBuVksC7FdkLQL
afsTnhLAgX2OVHCVoXjOlnbPbf+3GQG6CDY0xWYFcvI9Y8bvQx/QXYWQbBs0DF2i
fCmGmPoLfTYugO8IJu8gzLzGSO/L9ttn5vV9aS6P5NAQqzaPnSDHPFfIeoAjWPVJ
sebqmd1S4vgRsT77AVydT1pM9FtbtWXOfqChaLfdNreVIvyjgn5osJoyS+SVdnFj
KqcBqVvV/mZPFeJR+JAw/Yhl83C9L40Sfyo8LCfdkWMAjZe9PVfWoEdp4lMVbGtH
qSd/5hVYya4Y3uu9RtTGcKlBXAovMEriE1IsSbnkrzyoiUGsfpyGGeHx6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJO+ZEkdmxCqNPz51MF/WgtGLkHxMB8GA1UdIwQY
MBaAFN3x31mPSo86LQdMy29tFrVNHREcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZIZldZOUtqem90QjB6TGIyMFd0VTBkRVJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82YjhiY2UtNTg0Yy00OTJjLWJkN2Ut
ZDBmMzFiYzkzMDc5LzEvM2ZIZldZOUtqem90QjB6TGIyMFd0VTBkRVJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82YjhiY2UtNTg0Yy00OTJjLWJkN2UtZDBmMzFiYzkzMDc5
LzEvM2ZIZldZOUtqem90QjB6TGIyMFd0VTBkRVJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOmc3fG9
rnd/IQpDbIBgu3wKB+kzHU3ele5f3CRWpr+upJJ15LI9LuWAgvbTHLI3E40n6XC1
RHR3Q09DyZ8dOwYXknQFno/FxzEBw2361nm7nbukB8J3fhDN3uGwAwvFH9f3QZwl
P7qyE0ygfVREdSyufekOL76TTWW/JMQraYVzDlc26/J0IBZ/fny6eqQZU3tbtaAO
6zPG/ZQpsp18rnahUXht5BrKZljg2L4yc0z2StbwwjhveQbAjLhApHOX90LDC1+b
S0Jw2TQXW/0QOIDQpKuKZXg6zf4yu7PpFtPlCZd7fHLJoNugYiGOzoPFjaIbvkcp
JugTdDVmz3te/A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:34 2026 by rpki-client