Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
File: 3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft (raw, json)
Hash identifier: 2u3Ra0SgbdWrYgmxl5x4jcqM+AqsGoquGcSrrpk/m44=
Subject key identifier: 55:85:8B:F3:D3:DE:29:16:3A:91:FB:19:6E:03:79:AD:A3:1E:A7:41
Authority key identifier: DC:1F:52:90:76:F4:51:ED:9E:0B:22:2C:CE:35:DB:C9:7C:BD:C5:1B
Certificate issuer: /CN=dc1f529076f451ed9e0b222cce35dbc97cbdc51b
Certificate serial: 019D3865E9EC45B19A6D693DF083CF427BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
Manifest number: 0102
Signing time: Sun 29 Mar 2026 07:01:36 +0000
Manifest this update: Sun 29 Mar 2026 07:01:36 +0000
Manifest next update: Mon 30 Mar 2026 07:01:36 +0000
Files and hashes: 1: 3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl (hash: cc6VER3NNO7rVVJjjko1rRnI2U18MlGKPSpaWBA/hv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e9:ec:45:b1:9a:6d:69:3d:f0:83:cf:42:7b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1f529076f451ed9e0b222cce35dbc97cbdc51b
Validity
Not Before: Mar 29 07:01:36 2026 GMT
Not After : Mar 30 07:01:36 2026 GMT
Subject: CN=55858bf3d3de29163a91fb196e0379ada31ea741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:de:e9:90:ed:96:4b:f8:38:4f:87:00:d1:6c:
b4:c1:c7:97:1f:bd:28:35:7c:6f:1d:ff:3d:e9:de:
e3:b0:e5:7c:ad:86:42:e9:fd:16:93:d1:2f:6c:92:
64:33:91:8e:f9:84:2c:98:7d:a4:b1:9a:05:a8:f8:
2c:ea:0a:aa:c7:df:96:83:26:18:8d:13:44:7a:4f:
6f:4e:a4:32:6b:19:b7:d6:64:d7:30:6b:4b:e6:82:
25:b4:f7:db:47:6f:98:81:e1:3a:bf:f1:4d:b3:59:
83:88:55:ec:e2:22:f4:0c:14:eb:bf:80:59:46:15:
27:52:79:42:42:df:4e:52:14:58:b0:74:82:b9:27:
f3:a7:4a:9d:7c:99:e3:25:9d:e3:7d:c3:66:fa:08:
d1:d9:0d:7a:a9:cd:f4:fb:87:df:b8:bf:fd:02:f1:
5c:1c:61:3c:b5:06:a0:fa:71:bf:72:68:dd:f4:0b:
a8:ee:1f:9d:a6:11:89:7e:fa:5e:61:72:50:1e:77:
61:12:a2:7a:4a:b2:78:db:83:a0:00:29:35:9a:6c:
c3:56:82:5c:1f:52:4f:ef:4a:00:a8:63:62:22:75:
93:90:6d:b6:b4:35:97:d1:ac:a9:71:7e:60:a8:71:
7e:d5:9a:2c:1c:09:42:40:b9:c3:a8:c2:69:e6:ea:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:85:8B:F3:D3:DE:29:16:3A:91:FB:19:6E:03:79:AD:A3:1E:A7:41
X509v3 Authority Key Identifier:
keyid:DC:1F:52:90:76:F4:51:ED:9E:0B:22:2C:CE:35:DB:C9:7C:BD:C5:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d4:4e:65:de:7c:4d:9f:8d:b0:50:4e:b9:12:3e:5f:da:8f:
c4:fd:3b:d6:db:7a:10:28:fd:bf:0c:68:b3:15:b5:d5:3c:b2:
7a:cf:47:12:b2:40:28:fb:6a:09:dc:39:ca:06:bc:31:38:ea:
a8:c8:2f:00:2d:78:d0:1f:5f:07:5c:a2:9e:27:13:c7:c5:cd:
98:b2:13:95:0e:86:d2:95:58:bc:84:80:ad:36:20:11:c5:94:
5e:06:60:35:11:e4:e7:56:04:50:74:ac:94:48:f0:e1:0e:a6:
7c:53:6d:a6:fc:b7:c2:b1:9d:b6:ad:f1:e3:c0:87:4e:ed:c9:
67:b7:f5:99:49:ba:1d:05:46:0a:44:ae:13:2b:51:f5:ed:dd:
52:6e:cb:9c:cf:47:a2:4e:53:85:9d:a0:90:e7:dc:cc:ad:f1:
7e:63:56:fc:05:37:7b:36:ed:8c:99:d2:b2:e2:e0:03:1b:00:
a5:6e:63:11:94:fa:8d:64:c0:21:64:4b:3a:9e:c5:42:2a:26:
8a:b5:08:ac:5c:22:0e:00:bc:3a:50:b2:45:37:a6:47:f5:94:
72:ce:71:a4:81:1f:1e:e1:59:6f:e7:06:f6:2c:4e:25:bb:7b:
de:59:3c:a1:90:e7:82:54:94:1d:f3:da:86:a8:b8:82:45:d8:
12:b6:fc:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZensRbGabWk98IPPQnv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMWY1MjkwNzZmNDUxZWQ5ZTBiMjIyY2NlMzVkYmM5N2Ni
ZGM1MWIwHhcNMjYwMzI5MDcwMTM2WhcNMjYwMzMwMDcwMTM2WjAzMTEwLwYDVQQD
Eyg1NTg1OGJmM2QzZGUyOTE2M2E5MWZiMTk2ZTAzNzlhZGEzMWVhNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld7pkO2WS/g4T4cA0Wy0wceXH70o
NXxvHf896d7jsOV8rYZC6f0Wk9EvbJJkM5GO+YQsmH2ksZoFqPgs6gqqx9+WgyYY
jRNEek9vTqQyaxm31mTXMGtL5oIltPfbR2+YgeE6v/FNs1mDiFXs4iL0DBTrv4BZ
RhUnUnlCQt9OUhRYsHSCuSfzp0qdfJnjJZ3jfcNm+gjR2Q16qc30+4ffuL/9AvFc
HGE8tQag+nG/cmjd9Auo7h+dphGJfvpeYXJQHndhEqJ6SrJ424OgACk1mmzDVoJc
H1JP70oAqGNiInWTkG22tDWX0aypcX5gqHF+1ZosHAlCQLnDqMJp5upsuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWFi/PT3ikWOpH7GW4Dea2jHqdBMB8GA1UdIwQY
MBaAFNwfUpB29FHtngsiLM4128l8vcUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0I5U2tIYjBVZTJlQ3lJc3pqWGJ5WHk5eFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iMmNmMTctOWQyNy00NzdhLTg1N2It
MmJlYmJmMTBkZDJiLzEvM0I5U2tIYjBVZTJlQ3lJc3pqWGJ5WHk5eFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iMmNmMTctOWQyNy00NzdhLTg1N2ItMmJlYmJmMTBkZDJi
LzEvM0I5U2tIYjBVZTJlQ3lJc3pqWGJ5WHk5eFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdROZd58
TZ+NsFBOuRI+X9qPxP071tt6ECj9vwxosxW11Tyyes9HErJAKPtqCdw5yga8MTjq
qMgvAC140B9fB1yinicTx8XNmLITlQ6G0pVYvISArTYgEcWUXgZgNRHk51YEUHSs
lEjw4Q6mfFNtpvy3wrGdtq3x48CHTu3JZ7f1mUm6HQVGCkSuEytR9e3dUm7LnM9H
ok5ThZ2gkOfczK3xfmNW/AU3ezbtjJnSsuLgAxsApW5jEZT6jWTAIWRLOp7FQiom
irUIrFwiDgC8OlCyRTemR/WUcs5xpIEfHuFZb+cG9ixOJbt73lk8oZDnglSUHfPa
hqi4gkXYErb8Sg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:30 2026 by rpki-client