Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: yw9sQsmi16icLXFPb/yRzrLRjh33jhygfbdVMFI1YUo=
Subject key identifier: 5D:A6:0A:C5:39:A7:4A:D7:C3:DC:89:3B:47:DE:91:FF:10:6D:E6:B3
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 019F905A15DC7E481CBA19D6C3236FE9F8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 13AC
Signing time: Thu 23 Jul 2026 19:00:50 +0000
Manifest this update: Thu 23 Jul 2026 19:00:50 +0000
Manifest next update: Fri 24 Jul 2026 19:00:50 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: Gs2Z99yvSyQ/CgwZwKZ3aMjdE/LNVotxb/RUb7C+YQU=)
2: 5NCPJAHZuuvT_Y3OLL7H8HuHVKg.roa (hash: Bkja5xY8wPIuCivflgBr5uP8e0j+G2X5xzd/ng/E16A=)
3: D6_vhrKcdm3SeocdHjY0RSl6kYk.roa (hash: 7HV4a9Y3R1hQs2yh9xBaiZSckY1ztfOLxpIEor4i7PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:15:dc:7e:48:1c:ba:19:d6:c3:23:6f:e9:f8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Jul 23 19:00:50 2026 GMT
Not After : Jul 24 19:00:50 2026 GMT
Subject: CN=5da60ac539a74ad7c3dc893b47de91ff106de6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:65:2d:ce:88:43:a4:f0:d2:7f:ff:4a:5b:
0b:5a:2f:d9:cc:f3:83:13:aa:db:fe:f3:c5:19:7f:
b2:01:03:ed:75:1d:27:cb:da:cb:97:5e:e9:8d:3f:
b8:b4:5e:33:d2:36:3e:ae:6b:57:68:79:6b:67:6f:
85:b3:69:11:da:23:17:3d:c3:bf:53:74:38:65:be:
aa:86:5d:ff:98:4b:07:1c:56:9e:c7:61:71:0e:78:
0d:05:0f:f7:d1:aa:d2:0e:fa:0c:79:9f:54:05:92:
0b:ac:58:b3:5d:6a:b7:05:04:11:93:aa:84:c9:4b:
a4:00:f0:81:70:1a:4a:6b:8b:60:cc:e6:a6:b3:61:
9d:44:7d:46:c2:da:05:bf:5b:16:d8:f0:1e:fe:74:
fb:bc:35:a9:1e:6e:cc:f9:f4:36:8e:a4:d2:12:77:
32:81:99:76:8a:60:81:fd:0d:ad:9d:a1:3b:05:95:
94:2b:68:e4:26:08:ae:38:a4:36:8a:4e:94:78:02:
5d:bd:4a:85:75:dc:b9:98:00:54:c1:c0:e7:61:2f:
a0:ec:fd:35:30:b2:ea:bf:bd:d3:42:cf:14:a3:b0:
8d:ac:65:cf:8e:04:9e:d5:0c:eb:15:4a:12:87:f9:
e2:bf:ca:f7:1a:26:39:fc:b3:14:c9:95:25:d9:f6:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A6:0A:C5:39:A7:4A:D7:C3:DC:89:3B:47:DE:91:FF:10:6D:E6:B3
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:16:9a:cb:1d:02:ec:8f:92:f4:15:e4:c6:15:09:17:6b:7d:
e1:e4:bd:b0:a8:df:a3:df:18:74:d4:a1:bd:d2:77:9d:e6:43:
16:40:9d:8b:31:4e:b5:80:3c:a9:25:a6:1e:f1:9a:cf:15:ef:
25:43:a9:70:54:04:26:f5:3f:6d:8f:a9:1e:e4:9a:7d:2c:bc:
d6:88:d6:f8:0d:a3:1e:53:2a:1a:3e:87:fc:90:3d:52:97:3c:
22:27:43:f7:b6:c2:cc:8a:bc:92:ed:7a:18:3e:5e:0e:7c:97:
1f:1a:06:f8:d2:8a:41:8a:33:9e:1d:48:56:01:21:06:e2:d6:
e2:82:99:95:1c:d6:53:fc:1b:d7:38:21:fc:56:27:f1:e3:ab:
b8:22:7f:8a:17:de:71:d9:6d:e7:e7:b1:ab:8c:21:3b:1b:69:
70:19:d8:b1:f7:f2:e5:eb:51:e4:31:0f:14:87:19:0e:98:66:
3c:6e:9f:55:50:f5:af:01:a3:1d:b0:2c:99:1c:dc:ff:32:32:
c4:bc:1e:ea:61:9f:ec:a0:34:62:09:40:48:da:b4:c8:4d:68:
0e:ae:3b:28:ad:76:bc:2d:23:66:5e:42:fb:42:74:b2:91:16:
e4:10:db:4e:09:e4:8b:be:5c:b2:7e:0a:35:7e:e5:a6:13:1f:
b4:37:90:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWhXcfkgcuhnWwyNv6fi5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTRhNDI5ZTY2NThhYmI3MGEzNzkyYzE3MmQ3ZWQ2MmVi
OGZhMjYwHhcNMjYwNzIzMTkwMDUwWhcNMjYwNzI0MTkwMDUwWjAzMTEwLwYDVQQD
Eyg1ZGE2MGFjNTM5YTc0YWQ3YzNkYzg5M2I0N2RlOTFmZjEwNmRlNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2ZlLc6IQ6Tw0n//SlsLWi/ZzPOD
E6rb/vPFGX+yAQPtdR0ny9rLl17pjT+4tF4z0jY+rmtXaHlrZ2+Fs2kR2iMXPcO/
U3Q4Zb6qhl3/mEsHHFaex2FxDngNBQ/30arSDvoMeZ9UBZILrFizXWq3BQQRk6qE
yUukAPCBcBpKa4tgzOams2GdRH1GwtoFv1sW2PAe/nT7vDWpHm7M+fQ2jqTSEncy
gZl2imCB/Q2tnaE7BZWUK2jkJgiuOKQ2ik6UeAJdvUqFddy5mABUwcDnYS+g7P01
MLLqv73TQs8Uo7CNrGXPjgSe1QzrFUoSh/niv8r3GiY5/LMUyZUl2fbaSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2mCsU5p0rXw9yJO0fekf8QbeazMB8GA1UdIwQY
MBaAFN4UpCnmZYq7cKN5LBctftYuuPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEt
MDVkOWMxY2Q3NDI1LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEtMDVkOWMxY2Q3NDI1
LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhaayx0C
7I+S9BXkxhUJF2t94eS9sKjfo98YdNShvdJ3neZDFkCdizFOtYA8qSWmHvGazxXv
JUOpcFQEJvU/bY+pHuSafSy81ojW+A2jHlMqGj6H/JA9Upc8IidD97bCzIq8ku16
GD5eDnyXHxoG+NKKQYoznh1IVgEhBuLW4oKZlRzWU/wb1zgh/FYn8eOruCJ/ihfe
cdlt5+exq4whOxtpcBnYsffy5etR5DEPFIcZDphmPG6fVVD1rwGjHbAsmRzc/zIy
xLwe6mGf7KA0YglASNq0yE1oDq47KK12vC0jZl5C+0J0spEW5BDbTgnki75csn4K
NX7lphMftDeQkw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:18 2026 by rpki-client