Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier: yb97VYoQLiRMJOLfINae8y4mrmqEYNzJw1RovwiQizY=
Subject key identifier: 09:87:5E:57:D2:3C:E2:1D:D2:B6:13:0E:9A:16:29:71:1E:A5:62:97
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 019D38D36284FB3F882B843D176F1DB2234F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number: 1443
Signing time: Sun 29 Mar 2026 09:01:10 +0000
Manifest this update: Sun 29 Mar 2026 09:01:10 +0000
Manifest next update: Mon 30 Mar 2026 09:01:10 +0000
Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: V/mrNFBGE3b7Mxr/xK5McpHdM/zn00Uo1nJr4mpNpMk=)
2: VcgWyeq648Gc4ahE2H4P_5An-Vk.roa (hash: lpEbA2Oc/IvvrSvQYZYfTGRO3+SQWqSCIH6JyIv+3/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:62:84:fb:3f:88:2b:84:3d:17:6f:1d:b2:23:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: Mar 29 09:01:10 2026 GMT
Not After : Mar 30 09:01:10 2026 GMT
Subject: CN=09875e57d23ce21dd2b6130e9a1629711ea56297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2c:fc:f9:f6:ad:99:a8:19:a6:1e:b2:48:95:
b2:2f:f4:d3:aa:75:e6:31:ba:a5:e5:d0:29:e7:15:
4f:b8:e4:60:2c:c0:98:52:c3:e5:ea:f7:33:ab:e3:
f8:22:fe:44:ef:89:4d:4d:52:56:48:60:83:d6:ae:
10:84:c3:0c:c6:71:32:ee:6f:26:77:0c:4f:92:28:
a1:ca:8c:9a:04:2c:ac:91:53:ed:45:0b:50:65:70:
c4:53:4b:9d:55:a0:bc:a2:97:c6:24:10:2c:2c:fc:
72:bb:55:3c:0d:5a:42:76:43:79:ac:ed:eb:40:4e:
0b:75:16:ed:c5:f2:e5:f6:47:c8:ad:41:44:c9:4e:
65:11:18:d8:10:df:f3:ad:7b:2e:2f:41:de:ce:92:
d1:d7:89:ab:0e:b6:2d:9b:da:d9:e4:ec:38:f6:e8:
49:c8:49:aa:b7:74:04:c8:f6:5f:ca:50:12:a1:d5:
8d:69:99:ca:db:ee:60:98:52:a2:5b:64:5a:2f:40:
5b:6d:b2:65:6c:0d:6e:81:44:d8:39:22:9a:c3:b7:
13:fc:65:8a:b2:b1:f9:35:65:5f:dc:df:3d:5a:0a:
0a:20:15:c9:16:3b:72:47:11:0c:a2:23:b7:b2:eb:
0a:8e:db:09:83:59:2f:47:9b:f1:8a:fa:55:ba:c0:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:87:5E:57:D2:3C:E2:1D:D2:B6:13:0E:9A:16:29:71:1E:A5:62:97
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:72:0e:84:a1:64:75:1e:c8:11:10:80:16:94:e7:8b:1f:dd:
66:2c:25:a9:12:40:c4:74:6c:2b:11:d2:e4:e8:48:ff:75:22:
3e:43:7e:35:44:df:78:7f:91:82:c7:ff:27:36:e7:1c:8a:67:
ac:77:58:d5:37:7b:cc:c7:01:cb:fe:f7:70:6b:11:ac:15:c6:
c1:8f:09:08:f7:05:ff:a2:0d:93:fb:99:78:99:12:62:9b:5a:
48:f5:58:79:ce:de:91:60:94:32:55:78:90:6a:ab:7f:d9:15:
50:e7:dd:09:0d:85:31:54:11:ff:8f:3e:21:7d:64:9d:5a:67:
09:b6:0f:7d:ba:0f:1c:83:91:3b:d9:93:f8:f4:d0:49:b9:11:
47:73:36:c9:3a:58:8b:93:af:ab:e9:35:e8:fb:c0:f7:2c:da:
e1:37:db:7d:ed:e1:69:c8:d1:7a:d9:5b:c5:e0:1c:3f:93:72:
39:18:46:dc:d4:5f:be:e7:27:72:c3:d6:a4:93:5b:20:53:75:
34:38:16:f3:4c:88:f6:49:69:ba:e1:a6:c2:7b:6b:2e:58:6f:
a8:f8:27:73:a4:25:63:4f:61:13:1a:cc:59:7c:be:76:43:11:
3e:3f:a0:5d:49:80:1f:4e:56:b9:c1:6f:53:b6:e4:20:e3:33:
55:d1:9d:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0402KE+z+IK4Q9F28dsiNPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjN2Q4ZWQ5ODQ0M2RlNmM2ODhkMTc0ZjFmMDA1NWJlNGRl
MTgyYTEwHhcNMjYwMzI5MDkwMTEwWhcNMjYwMzMwMDkwMTEwWjAzMTEwLwYDVQQD
EygwOTg3NWU1N2QyM2NlMjFkZDJiNjEzMGU5YTE2Mjk3MTFlYTU2Mjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Cz8+fatmagZph6ySJWyL/TTqnXm
Mbql5dAp5xVPuORgLMCYUsPl6vczq+P4Iv5E74lNTVJWSGCD1q4QhMMMxnEy7m8m
dwxPkiihyoyaBCyskVPtRQtQZXDEU0udVaC8opfGJBAsLPxyu1U8DVpCdkN5rO3r
QE4LdRbtxfLl9kfIrUFEyU5lERjYEN/zrXsuL0HezpLR14mrDrYtm9rZ5Ow49uhJ
yEmqt3QEyPZfylASodWNaZnK2+5gmFKiW2RaL0BbbbJlbA1ugUTYOSKaw7cT/GWK
srH5NWVf3N89WgoKIBXJFjtyRxEMoiO3susKjtsJg1kvR5vxivpVusCdGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmHXlfSPOId0rYTDpoWKXEepWKXMB8GA1UdIwQY
MBaAFNx9jtmEQ95saI0XTx8AVb5N4YKhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYt
YjgwMjA1MjgzMmNmLzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYtYjgwMjA1MjgzMmNm
LzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHIOhKFk
dR7IERCAFpTnix/dZiwlqRJAxHRsKxHS5OhI/3UiPkN+NUTfeH+Rgsf/JzbnHIpn
rHdY1Td7zMcBy/73cGsRrBXGwY8JCPcF/6INk/uZeJkSYptaSPVYec7ekWCUMlV4
kGqrf9kVUOfdCQ2FMVQR/48+IX1knVpnCbYPfboPHIORO9mT+PTQSbkRR3M2yTpY
i5Ovq+k16PvA9yza4Tfbfe3hacjRetlbxeAcP5NyORhG3NRfvucncsPWpJNbIFN1
NDgW80yI9klpuuGmwntrLlhvqPgnc6QlY09hExrMWXy+dkMRPj+gXUmAH05WucFv
U7bkIOMzVdGd3w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:08:14 2026 by rpki-client