Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
File: 3i6RcxXwqHiyH8E51JqCGq3cPJc.mft (raw, json)
Hash identifier: aeVpHrZGVRctrB16WxbiEDou4Meq426Eq2mqQTIuZwI=
Subject key identifier: 29:BC:0C:18:55:B4:1D:14:BF:80:0F:42:84:4A:CF:E0:7B:FC:A0:3B
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Certificate issuer: /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial: 019D39AF2BF1DB830932A28610F025FBDE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
Manifest number: 18A3
Signing time: Sun 29 Mar 2026 13:01:14 +0000
Manifest this update: Sun 29 Mar 2026 13:01:14 +0000
Manifest next update: Mon 30 Mar 2026 13:01:14 +0000
Files and hashes: 1: 3i6RcxXwqHiyH8E51JqCGq3cPJc.crl (hash: LiT1IyLqyuWZSYELXZmnRj5W9WwH67fv9Tjewa23RpQ=)
2: 7vheWt636zaXPWY7-s5DyNEvcCk.roa (hash: yHddO5nWyrrRYQwmZYLYDVw2iZ9LZ47A/NrBl7ewM1Q=)
3: GtwmzzfSMyQuHA5xN2h8yl_66bg.roa (hash: b0cWR0WKtHBGdUpy+EpGKcmMMtl7w7UTXQhFBWlOy0A=)
4: syWk75JGny34Q7aH7yGz8UWltwM.roa (hash: lGizpp26YDLi0eoTG2nJ/NGlhRSSauEEXdm5wIZ3bqo=)
5: yowCytNDfEjr6iMV6-jVqrYVTnY.roa (hash: Qecp8oYwO0klWaPBXtOGO2cs0a85Z+pJ/Flg2E7BAJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:2b:f1:db:83:09:32:a2:86:10:f0:25:fb:de:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Validity
Not Before: Mar 29 13:01:14 2026 GMT
Not After : Mar 30 13:01:14 2026 GMT
Subject: CN=29bc0c1855b41d14bf800f42844acfe07bfca03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:7d:af:9b:8f:41:70:27:b6:67:b3:d6:1f:
60:45:a9:e9:c1:38:6a:94:f5:fe:6c:6b:88:ac:83:
37:13:3f:e4:1c:cf:d3:93:46:b1:64:de:d9:2d:01:
03:c9:42:03:05:b9:35:1c:ec:99:2a:99:04:ca:b4:
c0:66:db:46:59:12:47:03:7d:01:16:79:a5:ec:5c:
aa:31:9e:8c:9c:ae:a2:ee:a1:a7:df:7c:7b:da:33:
38:fb:9d:0c:36:a7:e7:fa:95:20:74:65:8e:4a:ee:
90:3d:57:07:b5:55:39:17:36:1d:bf:fb:50:96:21:
bd:48:d0:60:6f:7e:1d:85:8f:06:f6:be:34:d3:8b:
b0:22:7b:7f:85:df:fe:c5:cf:9c:df:bb:8a:f5:0d:
68:f9:9d:fb:c7:45:62:73:45:9d:ba:b3:ca:04:71:
58:67:d3:aa:58:38:47:60:1b:36:af:65:2b:e9:a1:
ad:66:dd:85:d2:ff:4c:ba:41:4b:d9:fb:6c:33:23:
25:b2:1f:d7:c8:70:b0:37:56:c5:9e:bf:e0:96:77:
12:38:73:15:a9:0f:ce:e0:08:74:4f:09:35:b4:5f:
0a:28:d0:4e:e8:a9:29:f7:4a:78:51:4b:13:5a:74:
61:31:24:d7:d8:30:d4:83:f3:19:ad:bd:1d:3a:bf:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BC:0C:18:55:B4:1D:14:BF:80:0F:42:84:4A:CF:E0:7B:FC:A0:3B
X509v3 Authority Key Identifier:
keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ec:46:07:85:d4:92:c8:9c:7e:60:30:d6:55:03:04:1f:59:
9f:7e:15:51:33:2c:10:47:be:16:41:aa:04:ff:75:b0:08:f6:
b4:59:02:bf:10:c7:3b:45:68:cd:e3:f7:7e:31:8a:a1:44:78:
2d:65:9b:88:94:d1:1a:57:f6:0d:39:04:4f:3a:8c:cd:45:3e:
fd:6d:6f:22:78:7f:7d:6a:41:95:17:0e:c6:ea:fc:28:d8:1e:
ea:8d:4c:91:ed:6e:30:85:e5:5b:53:97:f3:18:6f:ad:e9:03:
c2:91:51:82:97:44:d0:9c:07:d9:d8:e5:bd:57:a1:a2:c4:e2:
1e:3b:a8:38:7d:34:b5:8e:f5:0f:bc:e8:6a:e3:81:f2:54:7a:
4a:6d:b4:75:ff:fd:ea:dd:7d:7e:53:60:78:32:c4:5b:5c:d7:
61:47:27:53:f1:52:49:f6:bb:a6:5e:f6:a7:2e:28:69:03:1b:
f2:bf:0f:e4:a8:ea:98:c1:a7:77:17:1e:4b:d2:7a:14:08:5b:
ef:bb:b4:9d:82:a1:3a:aa:3b:8a:e0:92:b6:58:c4:b1:2b:f8:
dc:e1:0c:53:72:a9:3c:c6:eb:e3:be:04:c6:d9:96:c9:8f:e5:
84:95:e4:a9:f6:45:20:5b:c8:7d:52:da:4b:d8:a2:11:66:de:
bb:5b:07:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05ryvx24MJMqKGEPAl+95dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMmU5MTczMTVmMGE4NzhiMjFmYzEzOWQ0OWE4MjFhYWRk
YzNjOTcwHhcNMjYwMzI5MTMwMTE0WhcNMjYwMzMwMTMwMTE0WjAzMTEwLwYDVQQD
EygyOWJjMGMxODU1YjQxZDE0YmY4MDBmNDI4NDRhY2ZlMDdiZmNhMDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvh9r5uPQXAntmez1h9gRanpwThq
lPX+bGuIrIM3Ez/kHM/Tk0axZN7ZLQEDyUIDBbk1HOyZKpkEyrTAZttGWRJHA30B
Fnml7FyqMZ6MnK6i7qGn33x72jM4+50MNqfn+pUgdGWOSu6QPVcHtVU5FzYdv/tQ
liG9SNBgb34dhY8G9r4004uwInt/hd/+xc+c37uK9Q1o+Z37x0Vic0WdurPKBHFY
Z9OqWDhHYBs2r2Ur6aGtZt2F0v9MukFL2ftsMyMlsh/XyHCwN1bFnr/glncSOHMV
qQ/O4Ah0Twk1tF8KKNBO6Kkp90p4UUsTWnRhMSTX2DDUg/MZrb0dOr9jrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCm8DBhVtB0Uv4APQoRKz+B7/KA7MB8GA1UdIwQY
MBaAFN4ukXMV8Kh4sh/BOdSaghqt3DyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYt
ZjhkNjVjOTgzNzQ0LzEvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYtZjhkNjVjOTgzNzQ0
LzEvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQexGB4XU
ksicfmAw1lUDBB9Zn34VUTMsEEe+FkGqBP91sAj2tFkCvxDHO0VozeP3fjGKoUR4
LWWbiJTRGlf2DTkETzqMzUU+/W1vInh/fWpBlRcOxur8KNge6o1Mke1uMIXlW1OX
8xhvrekDwpFRgpdE0JwH2djlvVehosTiHjuoOH00tY71D7zoauOB8lR6Sm20df/9
6t19flNgeDLEW1zXYUcnU/FSSfa7pl72py4oaQMb8r8P5KjqmMGndxceS9J6FAhb
77u0nYKhOqo7iuCStljEsSv43OEMU3KpPMbr474ExtmWyY/lhJXkqfZFIFvIfVLa
S9iiEWbeu1sHcA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:30 2026 by rpki-client