Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json)
Hash identifier: amTIb050sXoR1KaSsgS0mMVwX6w7R2vXjZU4aFUCF+w=
Subject key identifier: 9D:F3:A3:B9:26:F4:6D:DB:03:92:81:30:85:35:12:6C:A2:0D:E6:51
Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Certificate serial: 019D386653D4CBE7485C48E5F3609C9CB07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
Manifest number: 0AA1
Signing time: Sun 29 Mar 2026 07:02:03 +0000
Manifest this update: Sun 29 Mar 2026 07:02:03 +0000
Manifest next update: Mon 30 Mar 2026 07:02:03 +0000
Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: qfQHJP7CxY7KfucxbIhC7waXuFXZHvvY+Cwy7vDaBRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:53:d4:cb:e7:48:5c:48:e5:f3:60:9c:9c:b0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Validity
Not Before: Mar 29 07:02:03 2026 GMT
Not After : Mar 30 07:02:03 2026 GMT
Subject: CN=9df3a3b926f46ddb039281308535126ca20de651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ad:9a:ec:56:4e:57:3b:f7:e6:f2:14:9b:67:
aa:ae:fb:3f:86:d3:9c:b3:88:41:02:fa:7f:58:84:
0b:5f:b6:06:14:a1:b2:2f:bc:f2:d0:e7:af:a5:1a:
08:5d:2f:de:99:02:15:5b:f3:f8:78:52:0a:b2:1d:
54:18:a5:14:db:17:90:6d:bf:0f:31:94:f5:51:64:
fd:a5:35:76:48:ae:20:35:b8:e2:55:2f:16:ff:1a:
35:8b:1d:fc:60:20:24:67:ba:56:bd:3d:1f:f0:03:
e1:33:98:01:5a:7a:ef:21:9f:f9:4e:0d:85:2c:68:
be:5a:38:b5:e7:f2:34:da:65:d2:3e:97:72:6f:17:
ab:ff:e1:63:6b:d0:a0:6e:9b:1d:2f:2d:75:5b:63:
30:cb:9e:e2:d8:47:6e:05:ec:66:6b:a6:20:cc:ae:
ad:70:f1:83:14:66:31:22:5e:7f:6d:1c:a4:9a:fe:
74:4a:09:1e:55:4d:9d:57:0d:94:6d:e5:42:aa:d7:
80:a1:00:02:a0:f8:01:d2:c5:c3:e7:ad:7f:25:a0:
00:3e:f2:13:17:85:5c:b0:fd:28:c5:56:ec:fb:ef:
03:f0:e1:47:21:26:90:56:34:36:1f:8f:ba:12:8f:
0a:b6:06:af:56:c6:8c:39:de:8f:b2:fe:f0:5f:4e:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F3:A3:B9:26:F4:6D:DB:03:92:81:30:85:35:12:6C:A2:0D:E6:51
X509v3 Authority Key Identifier:
keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9d:1e:4b:27:53:d8:f4:e9:fb:84:35:a0:bd:38:c2:98:77:
a0:b3:b9:2e:5a:be:e8:a0:22:e5:5a:31:79:d3:7f:18:3c:fc:
a0:52:66:b7:b9:72:7d:7f:1c:f9:78:b0:9a:19:44:a0:eb:91:
a7:b1:ef:e0:4b:c4:b6:19:5a:96:46:81:af:2c:7f:63:a1:14:
9f:b2:33:56:02:10:9a:95:3c:eb:94:54:41:f7:6a:8c:c8:d4:
38:90:db:62:02:71:47:84:5f:17:ab:30:6c:15:49:90:0b:cc:
73:b9:94:38:96:19:57:6e:28:ca:03:70:cb:b7:1d:b5:50:90:
99:b0:f3:5e:22:c5:c6:38:96:c8:58:3d:bf:5b:59:8a:e4:b7:
ea:89:8c:6c:4a:76:19:fa:e5:e5:ce:09:d2:c7:b3:1f:a6:6b:
d6:1d:4a:ec:42:cf:8b:c2:e5:81:c0:10:14:4b:be:96:c4:02:
1a:39:10:c3:b3:b3:56:e1:42:0e:72:b1:7a:0c:31:ab:c4:0c:
21:81:fa:a4:cf:3b:73:6d:eb:88:e3:2e:72:35:f0:4b:7f:f1:
24:44:31:f1:b0:be:11:31:e8:41:02:c0:a0:ba:c2:29:38:ff:
fd:90:3b:37:58:32:75:98:b7:e9:f3:fd:73:c0:0f:3b:61:53:
e7:4b:46:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZlPUy+dIXEjl82CcnLB9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MmRmZWNiYjQzMTcwMjk3OTYxYTIxYjdlNWI0YTNjNDdk
ZTA5NWIwHhcNMjYwMzI5MDcwMjAzWhcNMjYwMzMwMDcwMjAzWjAzMTEwLwYDVQQD
Eyg5ZGYzYTNiOTI2ZjQ2ZGRiMDM5MjgxMzA4NTM1MTI2Y2EyMGRlNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq2a7FZOVzv35vIUm2eqrvs/htOc
s4hBAvp/WIQLX7YGFKGyL7zy0OevpRoIXS/emQIVW/P4eFIKsh1UGKUU2xeQbb8P
MZT1UWT9pTV2SK4gNbjiVS8W/xo1ix38YCAkZ7pWvT0f8APhM5gBWnrvIZ/5Tg2F
LGi+Wji15/I02mXSPpdybxer/+Fja9CgbpsdLy11W2Mwy57i2EduBexma6YgzK6t
cPGDFGYxIl5/bRykmv50SgkeVU2dVw2UbeVCqteAoQACoPgB0sXD561/JaAAPvIT
F4VcsP0oxVbs++8D8OFHISaQVjQ2H4+6Eo8KtgavVsaMOd6Psv7wX047pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3zo7km9G3bA5KBMIU1EmyiDeZRMB8GA1UdIwQY
MBaAFKUt/su0MXApeWGiG35bSjxH3glbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUt
YmQ1NzkwYTJiYTUwLzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUtYmQ1NzkwYTJiYTUw
LzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZ0eSydT
2PTp+4Q1oL04wph3oLO5Llq+6KAi5VoxedN/GDz8oFJmt7lyfX8c+XiwmhlEoOuR
p7Hv4EvEthlalkaBryx/Y6EUn7IzVgIQmpU865RUQfdqjMjUOJDbYgJxR4RfF6sw
bBVJkAvMc7mUOJYZV24oygNwy7cdtVCQmbDzXiLFxjiWyFg9v1tZiuS36omMbEp2
Gfrl5c4J0sezH6Zr1h1K7ELPi8LlgcAQFEu+lsQCGjkQw7OzVuFCDnKxegwxq8QM
IYH6pM87c23riOMucjXwS3/xJEQx8bC+ETHoQQLAoLrCKTj//ZA7N1gydZi36fP9
c8APO2FT50tGaw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:46 2026 by rpki-client