Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
File: 3GbYudONW7Gc-gxGRLRSk9Hotvo.mft (raw, json)
Hash identifier: ROfmRclXNRzAo9pqldbeQUg6cQWFm9Ym9Wn73OtY5DU=
Subject key identifier: 2A:6E:58:5E:59:52:49:A7:61:88:F8:1E:FB:01:46:59:DC:5B:BF:2A
Authority key identifier: DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
Certificate issuer: /CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Certificate serial: 019F9436D64E43AC01874D1FF8044D05C879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 13:00:49 +0000
Manifest this update: Fri 24 Jul 2026 13:00:49 +0000
Manifest next update: Sat 25 Jul 2026 13:00:49 +0000
Files and hashes: 1: 3GbYudONW7Gc-gxGRLRSk9Hotvo.crl (hash: K2oLAlsNXVq5qoscPzg7Q4GFnlHnj9gV7wTyi2W7YKs=)
2: FFrrJg1f7sBn9CMNkWOHWkncPKA.roa (hash: RRbiIEi7LB7ItO/8kZqYNCorz0xLwEEZeK7jHRHtAV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:d6:4e:43:ac:01:87:4d:1f:f8:04:4d:05:c8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Validity
Not Before: Jul 24 13:00:49 2026 GMT
Not After : Jul 25 13:00:49 2026 GMT
Subject: CN=2a6e585e595249a76188f81efb014659dc5bbf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:5d:df:a3:5d:1f:60:98:10:5c:43:b6:25:
4c:42:26:40:eb:b3:2a:30:86:b0:b5:5c:07:76:18:
6b:ea:e2:09:d6:f2:fc:d0:d0:27:d4:6a:90:af:f3:
a5:9f:89:cd:b4:1e:a6:75:82:72:b9:c6:ec:bc:88:
3e:bf:08:06:4c:0e:10:27:73:7c:e4:f0:71:8e:0b:
a7:fd:e2:ca:1b:89:47:1f:c6:c3:e8:f1:55:3e:8d:
ac:aa:1b:9b:56:4d:6c:59:c9:81:8a:55:15:fe:52:
92:74:49:d9:9f:45:5a:f3:0c:fc:9a:d0:22:89:a8:
16:a8:b8:55:a3:70:b4:99:01:9b:f3:a1:2a:e2:db:
32:f0:7b:00:05:0d:49:33:c9:d5:a0:c7:2b:ae:0f:
d3:02:f8:d3:36:4e:3a:c0:72:91:0f:30:35:5a:c8:
55:78:42:bb:e9:97:6e:19:28:c3:b1:55:04:0a:1a:
b1:12:16:de:f1:0e:d0:4d:af:e4:54:a8:c4:78:fe:
b3:54:83:9b:8c:b9:63:bd:ec:66:2e:9b:fd:f7:77:
f5:3f:a4:63:1f:bc:66:10:4e:25:e6:c6:a6:40:2a:
bf:8a:d3:79:9a:47:3b:57:6c:42:90:0f:1e:69:30:
91:b3:47:80:d1:62:a1:69:61:90:67:9a:3a:d0:67:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6E:58:5E:59:52:49:A7:61:88:F8:1E:FB:01:46:59:DC:5B:BF:2A
X509v3 Authority Key Identifier:
keyid:DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0d:7b:30:11:85:a3:ff:43:63:ee:de:fd:73:70:07:73:2f:
ce:34:9f:ab:eb:9b:24:34:07:15:6c:7c:e0:72:3b:1b:c5:4b:
97:cc:a3:ce:a3:57:c0:61:64:e8:d7:dc:29:56:0c:e2:92:b8:
5c:30:78:01:25:c6:40:91:73:ad:97:22:ee:cb:7e:d7:f2:38:
c5:b2:fb:5e:0d:17:ed:0c:ad:28:c7:1c:c0:f8:2a:79:67:46:
8d:cd:ef:dd:99:5e:0a:b9:6a:83:f3:b0:27:81:8d:4a:40:6d:
cc:94:1c:3e:11:a8:5a:aa:5d:15:a8:e8:b5:aa:d9:7d:8f:34:
84:00:e2:34:b5:b6:c3:a8:61:f6:39:00:00:f6:19:d7:7d:e9:
72:9b:36:95:c9:bf:21:62:76:b5:ee:28:ee:66:10:5b:dd:6e:
a7:33:3d:cf:e5:f4:1b:bc:79:15:8b:ca:be:7c:27:a7:45:1f:
52:27:e5:b9:5c:f3:f3:f0:e3:e9:83:d6:7b:b4:21:86:4d:4c:
14:87:61:a1:06:02:7f:d4:60:85:dd:ad:aa:82:9d:c1:22:1d:
2e:49:0f:e8:b6:07:f3:87:54:eb:8e:0b:f7:17:64:ed:20:80:
6b:51:dc:61:18:83:dc:d4:c7:5a:00:89:ca:a9:48:27:f6:29:
e2:84:09:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNtZOQ6wBh00f+ARNBch5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjZkOGI5ZDM4ZDViYjE5Y2ZhMGM0NjQ0YjQ1MjkzZDFl
OGI2ZmEwHhcNMjYwNzI0MTMwMDQ5WhcNMjYwNzI1MTMwMDQ5WjAzMTEwLwYDVQQD
EygyYTZlNTg1ZTU5NTI0OWE3NjE4OGY4MWVmYjAxNDY1OWRjNWJiZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBFd36NdH2CYEFxDtiVMQiZA67Mq
MIawtVwHdhhr6uIJ1vL80NAn1GqQr/Oln4nNtB6mdYJyucbsvIg+vwgGTA4QJ3N8
5PBxjgun/eLKG4lHH8bD6PFVPo2sqhubVk1sWcmBilUV/lKSdEnZn0Va8wz8mtAi
iagWqLhVo3C0mQGb86Eq4tsy8HsABQ1JM8nVoMcrrg/TAvjTNk46wHKRDzA1WshV
eEK76ZduGSjDsVUEChqxEhbe8Q7QTa/kVKjEeP6zVIObjLljvexmLpv993f1P6Rj
H7xmEE4l5samQCq/itN5mkc7V2xCkA8eaTCRs0eA0WKhaWGQZ5o60GcUIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpuWF5ZUkmnYYj4HvsBRlncW78qMB8GA1UdIwQY
MBaAFNxm2LnTjVuxnPoMRkS0UpPR6Lb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0diWXVkT05XN0djLWd4R1JMUlNrOUhvdHZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xNGY2ODQtMDQ1My00NjI1LTk2NmUt
NDc3MWQxYTRkZGYwLzEvM0diWXVkT05XN0djLWd4R1JMUlNrOUhvdHZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8xNGY2ODQtMDQ1My00NjI1LTk2NmUtNDc3MWQxYTRkZGYw
LzEvM0diWXVkT05XN0djLWd4R1JMUlNrOUhvdHZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqg17MBGF
o/9DY+7e/XNwB3MvzjSfq+ubJDQHFWx84HI7G8VLl8yjzqNXwGFk6NfcKVYM4pK4
XDB4ASXGQJFzrZci7st+1/I4xbL7Xg0X7QytKMccwPgqeWdGjc3v3ZleCrlqg/Ow
J4GNSkBtzJQcPhGoWqpdFajotarZfY80hADiNLW2w6hh9jkAAPYZ133pcps2lcm/
IWJ2te4o7mYQW91upzM9z+X0G7x5FYvKvnwnp0UfUifluVzz8/Dj6YPWe7Qhhk1M
FIdhoQYCf9Rghd2tqoKdwSIdLkkP6LYH84dU644L9xdk7SCAa1HcYRiD3NTHWgCJ
yqlIJ/Yp4oQJmg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:49:37 2026 by rpki-client