Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
File: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json)
Hash identifier: O88XxIBZSyshTVnvTpbV5bqwLstOA8yToSzfvxXk+OA=
Subject key identifier: FB:88:2D:AE:5B:31:EA:FB:CB:9A:5E:9C:DE:8F:C6:B0:B3:7F:EB:48
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Certificate issuer: /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial: 019D389C63D03F97D4E71359F348EC7C5868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:01:06 +0000
Manifest this update: Sun 29 Mar 2026 08:01:06 +0000
Manifest next update: Mon 30 Mar 2026 08:01:06 +0000
Files and hashes: 1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: FLRndO0mjShr0GVXTMc5Ob9JUYpSG2T+A6GI9cbB6L0=)
2: cQu8PWE2ED6TGgN91J-oSiBaGLU.roa (hash: FGQyS1Z2RCfk2kbunFiNxKz2rH/BrfGjCFskroiMdcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:63:d0:3f:97:d4:e7:13:59:f3:48:ec:7c:58:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Validity
Not Before: Mar 29 08:01:06 2026 GMT
Not After : Mar 30 08:01:06 2026 GMT
Subject: CN=fb882dae5b31eafbcb9a5e9cde8fc6b0b37feb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:e3:e1:e5:cd:96:56:33:93:09:a4:78:19:
cc:60:ea:5a:9e:ce:02:72:7b:e1:6c:eb:00:22:12:
17:89:34:ab:43:aa:8b:3e:2c:16:1e:8c:51:98:7e:
ba:3d:60:5c:b0:f2:5f:2d:34:eb:1f:1e:6c:0f:c1:
00:63:82:97:2f:ab:b1:ba:be:a3:8b:6b:18:db:82:
61:41:92:d8:0c:ce:cb:c1:35:58:6e:a9:9a:cd:4e:
b2:e6:9f:e7:6e:29:f2:a3:a0:70:da:b6:39:b0:6c:
04:44:58:00:ad:4d:7e:f6:72:32:39:f2:c6:21:04:
ad:5b:81:54:88:7f:7b:1c:f0:8f:73:94:19:55:42:
55:b9:b0:ab:34:8b:6d:71:2b:82:9a:c3:fc:7a:38:
da:60:b6:43:ae:72:8e:c9:3d:25:44:a7:48:73:f7:
66:ec:7d:53:aa:5c:d2:98:db:71:66:82:53:08:a9:
4a:d3:cc:d0:03:b1:fe:78:82:90:53:16:68:f0:3a:
f5:b5:54:7d:8f:bd:f5:e7:46:5e:e0:ef:c7:05:fe:
6d:79:d5:17:13:31:6b:8c:a4:50:f0:40:9f:93:9a:
d0:2a:a3:ff:b4:76:93:9c:c6:f5:4c:59:2c:44:78:
a4:a6:67:b3:1f:33:cd:c1:6c:04:75:0c:48:a3:bd:
bb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:88:2D:AE:5B:31:EA:FB:CB:9A:5E:9C:DE:8F:C6:B0:B3:7F:EB:48
X509v3 Authority Key Identifier:
keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:77:cb:49:17:34:9f:55:e8:37:9b:9a:fc:98:7f:eb:14:4d:
c7:2e:6a:30:4b:4a:d3:97:04:19:4f:d7:d4:47:9f:ff:db:7c:
bb:7d:21:82:7c:77:ca:9f:5b:6f:08:bf:96:41:99:f6:e6:39:
50:38:99:fa:34:ec:7c:70:02:30:11:19:84:0e:ab:6a:d3:b3:
d8:8a:07:a7:fd:d2:99:80:e7:cf:64:7b:85:45:e0:b8:53:5b:
ca:bb:b9:ae:9f:94:a8:25:a0:1d:2f:40:f6:6f:2f:b9:55:07:
77:de:e1:3f:fc:8a:a6:f2:0e:d2:46:e9:6c:21:2c:a5:83:4e:
52:5a:7c:9f:d0:27:e0:c6:d1:5a:b1:fa:06:4c:dd:04:10:dd:
17:d3:2e:86:33:c4:cd:83:2f:71:c2:82:8a:ff:81:14:ad:9c:
f4:73:c8:5a:3f:b3:61:d8:c0:f2:37:5a:f6:c7:cc:33:9d:81:
a9:9a:e3:bc:5e:54:9d:ca:10:a3:77:65:f7:74:c0:b2:01:cf:
85:3e:23:2c:98:b8:04:d6:2b:48:57:fc:7d:cb:d8:31:fd:40:
48:8c:75:dc:86:89:eb:a3:f8:98:e8:ad:4a:40:92:34:a6:e1:
2a:48:25:55:4b:e7:6d:ab:b1:e3:a5:1d:c4:93:a0:9b:69:d8:
db:58:87:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nGPQP5fU5xNZ80jsfFhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjA0NmI2ZTMwOWU5YTg2NjUyMmMyYTQwYzY2ZmZjNDJm
YmI4NDMwHhcNMjYwMzI5MDgwMTA2WhcNMjYwMzMwMDgwMTA2WjAzMTEwLwYDVQQD
EyhmYjg4MmRhZTViMzFlYWZiY2I5YTVlOWNkZThmYzZiMGIzN2ZlYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsufj4eXNllYzkwmkeBnMYOpans4C
cnvhbOsAIhIXiTSrQ6qLPiwWHoxRmH66PWBcsPJfLTTrHx5sD8EAY4KXL6uxur6j
i2sY24JhQZLYDM7LwTVYbqmazU6y5p/nbinyo6Bw2rY5sGwERFgArU1+9nIyOfLG
IQStW4FUiH97HPCPc5QZVUJVubCrNIttcSuCmsP8ejjaYLZDrnKOyT0lRKdIc/dm
7H1TqlzSmNtxZoJTCKlK08zQA7H+eIKQUxZo8Dr1tVR9j73150Ze4O/HBf5tedUX
EzFrjKRQ8ECfk5rQKqP/tHaTnMb1TFksRHikpmezHzPNwWwEdQxIo727ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuILa5bMer7y5penN6PxrCzf+tIMB8GA1UdIwQY
MBaAFN6wRrbjCemoZlIsKkDGb/xC+7hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kMjRiYzItNDJmMy00NmQ5LWJkZDkt
MWM5NDkyMjQ1Y2FiLzEvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9kMjRiYzItNDJmMy00NmQ5LWJkZDktMWM5NDkyMjQ1Y2Fi
LzEvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHfLSRc0
n1XoN5ua/Jh/6xRNxy5qMEtK05cEGU/X1Eef/9t8u30hgnx3yp9bbwi/lkGZ9uY5
UDiZ+jTsfHACMBEZhA6ratOz2IoHp/3SmYDnz2R7hUXguFNbyru5rp+UqCWgHS9A
9m8vuVUHd97hP/yKpvIO0kbpbCEspYNOUlp8n9An4MbRWrH6BkzdBBDdF9MuhjPE
zYMvccKCiv+BFK2c9HPIWj+zYdjA8jda9sfMM52BqZrjvF5UncoQo3dl93TAsgHP
hT4jLJi4BNYrSFf8fcvYMf1ASIx13IaJ66P4mOitSkCSNKbhKkglVUvnbaux46Ud
xJOgm2nY21iHNg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:03 2026 by rpki-client