Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft
File: 3LvdnN1oHwNDXWI8gxkw8ifwub8.mft (raw, json)
Hash identifier: wWyF9NAadz+ck4H1DVsWUUraucAZ7fZMNXPUC+NyKps=
Subject key identifier: B3:26:C4:AF:25:59:FE:F7:7B:88:25:F2:1D:5B:A3:80:96:70:E1:9A
Authority key identifier: DC:BB:DD:9C:DD:68:1F:03:43:5D:62:3C:83:19:30:F2:27:F0:B9:BF
Certificate issuer: /CN=dcbbdd9cdd681f03435d623c831930f227f0b9bf
Certificate serial: 019D3909E1154AC0A5E449D98E9C91AB0FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LvdnN1oHwNDXWI8gxkw8ifwub8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft
Manifest number: E6
Signing time: Sun 29 Mar 2026 10:00:41 +0000
Manifest this update: Sun 29 Mar 2026 10:00:41 +0000
Manifest next update: Mon 30 Mar 2026 10:00:41 +0000
Files and hashes: 1: 3LvdnN1oHwNDXWI8gxkw8ifwub8.crl (hash: Ua0gjdLzrruQ1yDslTsCDagUfMUEXaDJQ9GTILVHa68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LvdnN1oHwNDXWI8gxkw8ifwub8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e1:15:4a:c0:a5:e4:49:d9:8e:9c:91:ab:0f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbbdd9cdd681f03435d623c831930f227f0b9bf
Validity
Not Before: Mar 29 10:00:41 2026 GMT
Not After : Mar 30 10:00:41 2026 GMT
Subject: CN=b326c4af2559fef77b8825f21d5ba3809670e19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:db:75:fd:63:6d:67:81:b5:3b:24:a7:96:bd:
4e:e6:b1:2a:d8:9b:35:e3:2a:6d:f5:21:6a:6c:5a:
2b:bc:f7:79:1b:1b:b7:66:95:8c:cc:88:f7:5d:0d:
95:ad:1f:5f:3a:57:99:6c:9c:43:38:0b:7e:69:69:
dd:7a:b1:05:2b:50:03:db:03:7b:80:dd:b5:44:59:
e2:33:90:18:a0:bf:3c:89:05:c5:c8:30:78:c1:e3:
a1:c7:af:bb:2f:73:f2:ca:4b:01:10:82:28:f4:da:
5e:57:37:15:b7:d5:73:6a:b9:c8:99:ce:80:56:45:
2b:69:07:92:50:53:19:5b:ff:19:1b:86:db:15:45:
77:a3:4d:dd:61:d7:1f:ae:e2:55:bb:c7:ca:5d:6d:
22:95:3f:36:a7:7e:d4:5a:ae:76:b4:30:06:12:48:
29:e7:0d:89:04:b4:ea:22:80:44:67:0c:df:d8:23:
13:0b:ac:4d:01:33:4f:95:ea:d6:59:dc:34:ff:5a:
5b:fc:a4:dc:f3:fa:5d:ca:ca:5c:f6:62:a1:c2:23:
8c:31:13:8f:fd:62:4e:3a:68:9c:c3:27:33:cd:d2:
38:7a:ff:d7:c7:26:e3:5d:47:7f:c4:6c:e7:a7:1d:
96:8d:6a:33:ea:2e:7f:11:d3:a4:5e:54:5f:21:5e:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:26:C4:AF:25:59:FE:F7:7B:88:25:F2:1D:5B:A3:80:96:70:E1:9A
X509v3 Authority Key Identifier:
keyid:DC:BB:DD:9C:DD:68:1F:03:43:5D:62:3C:83:19:30:F2:27:F0:B9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LvdnN1oHwNDXWI8gxkw8ifwub8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:57:88:31:97:b5:88:08:c6:99:bc:4a:e5:fc:0c:f7:83:19:
14:be:27:bd:d4:d9:ad:6e:dd:0e:f3:28:bf:44:38:5e:98:67:
7b:d1:0d:00:23:97:7f:e1:be:52:d3:c7:61:64:67:c6:cf:11:
ce:0a:ed:97:75:cf:dd:6e:ef:d8:81:9d:a0:24:35:2f:81:3b:
f1:d0:32:49:8b:e3:ce:2b:35:4b:d9:4f:c4:2c:20:78:47:eb:
4b:28:9b:46:da:bf:e9:cb:a9:41:7c:ba:e4:a0:87:71:d3:58:
06:f1:48:1b:ac:54:a3:78:7f:46:67:77:d9:f6:46:5e:a9:10:
f7:ac:56:a9:7e:8d:3f:29:12:11:4f:87:c3:e4:b8:ad:74:44:
9a:fb:01:2c:44:16:56:f6:97:00:8a:6a:80:85:3a:f0:92:b3:
e9:60:75:9c:15:77:ac:34:7d:9a:31:6e:b1:66:6d:49:f3:53:
c7:28:8d:b3:94:15:8a:64:db:ac:18:87:35:c8:00:15:41:d2:
d7:1f:61:a2:49:aa:e0:c9:63:f2:6f:71:9e:f9:8d:78:4f:92:
fb:1f:f7:26:93:ef:3c:de:14:f8:05:e6:12:47:1b:85:20:80:
48:05:09:2a:25:ce:9a:10:ff:0e:57:27:6e:7d:10:a4:86:ed:
fb:23:22:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CeEVSsCl5EnZjpyRqw+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYmJkZDljZGQ2ODFmMDM0MzVkNjIzYzgzMTkzMGYyMjdm
MGI5YmYwHhcNMjYwMzI5MTAwMDQxWhcNMjYwMzMwMTAwMDQxWjAzMTEwLwYDVQQD
EyhiMzI2YzRhZjI1NTlmZWY3N2I4ODI1ZjIxZDViYTM4MDk2NzBlMTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9t1/WNtZ4G1OySnlr1O5rEq2Js1
4ypt9SFqbForvPd5Gxu3ZpWMzIj3XQ2VrR9fOleZbJxDOAt+aWnderEFK1AD2wN7
gN21RFniM5AYoL88iQXFyDB4weOhx6+7L3PyyksBEIIo9NpeVzcVt9VzarnImc6A
VkUraQeSUFMZW/8ZG4bbFUV3o03dYdcfruJVu8fKXW0ilT82p37UWq52tDAGEkgp
5w2JBLTqIoBEZwzf2CMTC6xNATNPlerWWdw0/1pb/KTc8/pdyspc9mKhwiOMMROP
/WJOOmicwyczzdI4ev/XxybjXUd/xGznpx2WjWoz6i5/EdOkXlRfIV7B8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMmxK8lWf73e4gl8h1bo4CWcOGaMB8GA1UdIwQY
MBaAFNy73ZzdaB8DQ11iPIMZMPIn8Lm/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0x2ZG5OMW9Id05EWFdJOGd4a3c4aWZ3dWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84YWFhNTQtNDMxNS00OGQ0LTlmN2Et
ODk4NDY1ODJjYmFkLzEvM0x2ZG5OMW9Id05EWFdJOGd4a3c4aWZ3dWI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy84YWFhNTQtNDMxNS00OGQ0LTlmN2EtODk4NDY1ODJjYmFk
LzEvM0x2ZG5OMW9Id05EWFdJOGd4a3c4aWZ3dWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFeIMZe1
iAjGmbxK5fwM94MZFL4nvdTZrW7dDvMov0Q4Xphne9ENACOXf+G+UtPHYWRnxs8R
zgrtl3XP3W7v2IGdoCQ1L4E78dAySYvjzis1S9lPxCwgeEfrSyibRtq/6cupQXy6
5KCHcdNYBvFIG6xUo3h/Rmd32fZGXqkQ96xWqX6NPykSEU+Hw+S4rXREmvsBLEQW
VvaXAIpqgIU68JKz6WB1nBV3rDR9mjFusWZtSfNTxyiNs5QVimTbrBiHNcgAFUHS
1x9hokmq4Mlj8m9xnvmNeE+S+x/3JpPvPN4U+AXmEkcbhSCASAUJKiXOmhD/Dlcn
bn0QpIbt+yMiuw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:12 2026 by rpki-client