Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: h+EgrKxEludvK/c29m16En/eBZc7KsqqLR+jF/648Pk=
Subject key identifier: EA:36:2E:EE:C2:5B:A6:BA:E3:14:43:2B:40:0C:A7:AC:9E:F5:81:96
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 019D3752C1084CCCE8A9246E69A95C75E955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 1243
Signing time: Sun 29 Mar 2026 02:01:03 +0000
Manifest this update: Sun 29 Mar 2026 02:01:03 +0000
Manifest next update: Mon 30 Mar 2026 02:01:03 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: VxRnYPZq9IeNCjASBwO/v0wFJXIob1Z8tOHq+rfG+oA=)
2: m8pcNIGfAGz5wiEeCJ9aji1_KSY.roa (hash: SgAuRkWCSoQK2KWjI4kALGTvsxbiGO3Jz/Xs4XRVN3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:c1:08:4c:cc:e8:a9:24:6e:69:a9:5c:75:e9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Mar 29 02:01:03 2026 GMT
Not After : Mar 30 02:01:03 2026 GMT
Subject: CN=ea362eeec25ba6bae314432b400ca7ac9ef58196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:45:34:71:2d:f7:17:a0:b8:5d:35:10:06:
e7:5c:64:12:03:56:53:bf:ef:30:48:14:54:b5:69:
40:6e:50:5c:25:22:43:1b:23:04:41:d4:72:98:25:
0b:82:2c:e8:a9:51:cc:16:f8:20:68:e2:4d:34:ac:
94:2f:0a:5f:91:24:82:4a:9d:81:8a:11:46:59:be:
ea:82:fe:e5:e1:9e:a2:57:80:8a:a1:85:08:69:ef:
e1:b7:8a:3c:b6:8f:f1:7a:43:68:54:2c:3f:c1:1e:
d4:0a:1b:7c:4b:7a:03:38:8e:92:8a:21:90:c3:da:
9d:dd:12:03:a2:30:75:13:82:5b:37:4e:0e:91:30:
1f:37:e9:3d:e9:fb:3a:90:6b:92:30:b2:c4:ae:42:
c2:a1:7d:a5:7c:9e:43:33:7a:53:da:24:80:e5:bf:
fb:5d:bf:75:d3:b0:2a:ec:81:8e:bf:5f:56:2d:05:
45:b3:01:0d:78:6d:58:86:61:f1:fc:cb:3f:bd:27:
65:01:1f:b8:c1:0e:13:bb:17:95:a8:ac:e7:2e:60:
57:b2:c5:cb:6d:b7:87:57:4d:e9:c2:74:39:af:5a:
c1:35:75:b9:4d:2c:9d:f3:d5:78:dd:be:90:15:f6:
e6:47:45:e5:09:f3:cd:6f:db:20:7f:d1:e7:2d:24:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:36:2E:EE:C2:5B:A6:BA:E3:14:43:2B:40:0C:A7:AC:9E:F5:81:96
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d2:1f:ae:e3:d6:4e:41:4e:42:0d:fd:bb:b2:bd:e7:f7:6f:
06:d6:ef:01:39:c6:27:a2:80:b5:25:71:e2:93:ca:e1:be:62:
e5:25:4a:f3:3b:1a:ba:09:0e:57:fc:90:51:e8:6a:b7:92:5f:
61:e5:76:5b:bb:59:23:48:69:fd:a9:c6:40:04:dc:08:a6:b6:
07:b8:ab:12:00:30:a0:af:10:be:6c:59:53:cd:0f:d6:f9:1b:
fd:38:5b:a9:a8:d2:16:fa:1f:06:63:70:51:57:f3:d5:d1:32:
21:b4:7a:db:55:05:39:28:cc:16:8c:bb:66:5d:96:bc:f7:b9:
6f:e9:1a:f8:eb:f5:ef:1f:9b:95:1c:6f:5e:95:b3:20:62:96:
ca:ba:aa:fc:03:d5:c4:40:ed:c4:03:f9:8c:d6:70:b7:f1:42:
cc:37:b9:8f:86:37:c8:fe:bf:72:8f:a1:9d:d7:49:68:81:f8:
80:97:8e:ba:aa:ba:97:8b:04:94:f2:bc:a3:ac:a1:e4:e4:3b:
a0:d3:f6:5d:c1:de:5b:a3:cd:98:4b:ad:7c:67:99:a4:cb:d7:
b2:a2:88:44:0f:b5:a5:ed:f6:58:60:cc:96:e3:07:6d:c5:d1:
bf:9f:22:4a:f4:1e:2f:81:9f:1e:36:cf:af:c3:aa:ad:16:27:
10:14:7f:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UsEITMzoqSRuaalcdelVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZWM1Yzk0NWQwMzUzNWQ5NjczMDk1MTEwNTQ2YjFjOThl
NjE4NjAwHhcNMjYwMzI5MDIwMTAzWhcNMjYwMzMwMDIwMTAzWjAzMTEwLwYDVQQD
EyhlYTM2MmVlZWMyNWJhNmJhZTMxNDQzMmI0MDBjYTdhYzllZjU4MTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKZFNHEt9xeguF01EAbnXGQSA1ZT
v+8wSBRUtWlAblBcJSJDGyMEQdRymCULgizoqVHMFvggaOJNNKyULwpfkSSCSp2B
ihFGWb7qgv7l4Z6iV4CKoYUIae/ht4o8to/xekNoVCw/wR7UCht8S3oDOI6SiiGQ
w9qd3RIDojB1E4JbN04OkTAfN+k96fs6kGuSMLLErkLCoX2lfJ5DM3pT2iSA5b/7
Xb9107Aq7IGOv19WLQVFswENeG1YhmHx/Ms/vSdlAR+4wQ4TuxeVqKznLmBXssXL
bbeHV03pwnQ5r1rBNXW5TSyd89V43b6QFfbmR0XlCfPNb9sgf9HnLSSANwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOo2Lu7CW6a64xRDK0AMp6ye9YGWMB8GA1UdIwQY
MBaAFN/sXJRdA1NdlnMJURBUaxyY5hhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYt
ZGRkZGVmMjQxMjE2LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYtZGRkZGVmMjQxMjE2
LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENIfruPW
TkFOQg39u7K95/dvBtbvATnGJ6KAtSVx4pPK4b5i5SVK8zsaugkOV/yQUehqt5Jf
YeV2W7tZI0hp/anGQATcCKa2B7irEgAwoK8QvmxZU80P1vkb/ThbqajSFvofBmNw
UVfz1dEyIbR621UFOSjMFoy7Zl2WvPe5b+ka+Ov17x+blRxvXpWzIGKWyrqq/APV
xEDtxAP5jNZwt/FCzDe5j4Y3yP6/co+hnddJaIH4gJeOuqq6l4sElPK8o6yh5OQ7
oNP2XcHeW6PNmEutfGeZpMvXsqKIRA+1pe32WGDMluMHbcXRv58iSvQeL4GfHjbP
r8OqrRYnEBR/ZQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:53 2026 by rpki-client