Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
File: 3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json)
Hash identifier: e3UzyrjlyZsB4kMhhQs17C/vk3mwhnZXP5Yi+tSOjyY=
Subject key identifier: 73:22:29:DF:29:57:F0:EF:3B:4F:59:CF:5E:FD:1E:99:AD:37:04:58
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 019F9324289BE686CBD10FA0335E73FC0E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
Manifest number: 1325
Signing time: Fri 24 Jul 2026 08:00:48 +0000
Manifest this update: Fri 24 Jul 2026 08:00:48 +0000
Manifest next update: Sat 25 Jul 2026 08:00:48 +0000
Files and hashes: 1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: gHrMrZGsE4cql9bakYicskDFInxEntLXSvp66Hb3yug=)
2: 7OkmnPh3ynYj5y3_NgmBm3m_TO4.roa (hash: 76UePjEP+wElQI63EJrAUQNqnmL6+mG0ZmW2QHArepk=)
3: ICKtn9FiA8o1E110emXc1Z_9SHM.roa (hash: VFWWvtCtDRylV3Kwhn/OLe+sEMZLlpEgPe5DOIGJ9cA=)
4: bRiAj1-hf7sNdEiD1YkRkRllIpg.roa (hash: QwlE0RKPjkh4vpQe1ZoXKOsV7QKRd+qV+VA/PdPxz0M=)
5: iXgvCFVYLYuWNg_lY55_1JUdv1Y.roa (hash: sekPzygHUOkEd1ly9r7LBo/JOh0iiRtcIXhoK8Xl8WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:28:9b:e6:86:cb:d1:0f:a0:33:5e:73:fc:0e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Jul 24 08:00:48 2026 GMT
Not After : Jul 25 08:00:48 2026 GMT
Subject: CN=732229df2957f0ef3b4f59cf5efd1e99ad370458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:92:95:56:7a:7f:44:06:b0:f9:15:36:a2:
2c:eb:1e:75:8a:4a:bc:c7:a8:94:53:b3:25:4b:2c:
ab:fb:23:c1:19:a5:55:ef:c4:cc:c4:1e:c9:76:dc:
0e:c7:cb:c4:79:cb:21:5a:87:2a:23:10:90:4e:1f:
67:90:db:6e:7c:5f:fa:33:ac:1e:64:8b:51:df:db:
9a:74:a9:d0:9e:2c:00:3c:e7:3a:6f:1a:ce:09:0e:
e6:7a:e9:a9:9e:cd:29:50:47:0d:5c:17:7e:c5:f0:
4e:c6:68:05:3f:03:f1:50:1e:a7:d3:4c:04:bc:c2:
55:d2:4b:0f:55:a8:7c:9f:1d:2a:1a:88:87:30:cb:
05:75:8c:f0:5d:e3:0e:be:11:ca:0a:21:c2:27:07:
e9:47:af:b7:bd:d2:c2:cc:1c:01:f0:70:b1:f7:30:
c5:c9:48:2c:0e:05:78:42:d8:43:a6:1e:c4:f5:4a:
02:b3:d0:6f:99:a4:81:29:35:c9:8c:b9:03:51:ce:
30:67:1f:fb:69:18:5e:8e:cb:27:40:7d:2d:6c:a5:
d2:30:4e:2c:a5:37:a6:26:e7:25:7f:98:d4:14:22:
0a:a3:aa:82:50:c9:97:09:b8:92:0e:66:71:3a:21:
6d:3e:ca:f1:2e:a9:38:58:d9:9f:1a:51:65:bf:4e:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:22:29:DF:29:57:F0:EF:3B:4F:59:CF:5E:FD:1E:99:AD:37:04:58
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:4f:83:5a:61:e4:3a:cd:9d:8d:b8:ce:d5:22:a4:d3:8d:96:
bb:2f:45:40:7f:3a:07:91:0e:79:5a:84:84:37:25:ef:fe:24:
ee:59:bf:4d:35:14:6d:cf:5f:02:db:df:34:a1:7a:e8:0f:d7:
29:7c:7d:8d:de:bb:2a:cb:69:9b:c5:52:66:7d:b5:b0:bf:19:
27:85:25:3c:34:bc:ca:3f:1a:4f:19:7b:c2:43:11:3c:f7:1f:
fe:ba:c3:3f:49:9e:d4:cf:ec:69:2a:4a:4a:f2:ae:45:3f:c2:
89:7e:82:fe:5a:2a:3b:16:69:0b:5c:05:99:d7:88:c4:6b:05:
d3:ad:8a:47:b4:88:b6:58:e1:b1:99:b2:9b:1a:af:c7:da:45:
31:35:d2:66:9a:dc:57:fc:e6:2f:f3:4b:a9:b4:bd:05:e4:f6:
21:a3:39:4c:b8:15:ae:24:d5:ed:87:36:5a:13:ec:2e:ac:b4:
f3:ed:fb:38:26:b5:51:6d:d5:f2:36:1a:31:59:3c:e5:3a:61:
a6:d8:06:d1:e3:2f:2c:7d:b7:3b:d2:af:80:1c:71:c1:5c:3d:
b4:65:08:38:b7:fa:11:5a:a9:9c:b6:09:93:c7:2c:73:1d:f1:
c0:e7:fd:b9:3e:53:11:85:1e:e1:90:e0:5b:8b:38:ad:e6:6d:
31:da:c0:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJCib5obL0Q+gM15z/A5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDRlMTllMmJiNGU3MDIzY2MxYmExMGQ0OWI3NGVkZTRi
Zjg2NWMwHhcNMjYwNzI0MDgwMDQ4WhcNMjYwNzI1MDgwMDQ4WjAzMTEwLwYDVQQD
Eyg3MzIyMjlkZjI5NTdmMGVmM2I0ZjU5Y2Y1ZWZkMWU5OWFkMzcwNDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPCSlVZ6f0QGsPkVNqIs6x51ikq8
x6iUU7MlSyyr+yPBGaVV78TMxB7JdtwOx8vEecshWocqIxCQTh9nkNtufF/6M6we
ZItR39uadKnQniwAPOc6bxrOCQ7meumpns0pUEcNXBd+xfBOxmgFPwPxUB6n00wE
vMJV0ksPVah8nx0qGoiHMMsFdYzwXeMOvhHKCiHCJwfpR6+3vdLCzBwB8HCx9zDF
yUgsDgV4QthDph7E9UoCs9BvmaSBKTXJjLkDUc4wZx/7aRhejssnQH0tbKXSME4s
pTemJuclf5jUFCIKo6qCUMmXCbiSDmZxOiFtPsrxLqk4WNmfGlFlv04rTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMiKd8pV/DvO09Zz179HpmtNwRYMB8GA1UdIwQY
MBaAFNxE4Z4rtOcCPMG6ENSbdO3kv4ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjIt
NGM4MmFjZTcyYzg1LzEvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjItNGM4MmFjZTcyYzg1
LzEvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5U+DWmHk
Os2djbjO1SKk042Wuy9FQH86B5EOeVqEhDcl7/4k7lm/TTUUbc9fAtvfNKF66A/X
KXx9jd67Kstpm8VSZn21sL8ZJ4UlPDS8yj8aTxl7wkMRPPcf/rrDP0me1M/saSpK
SvKuRT/CiX6C/loqOxZpC1wFmdeIxGsF062KR7SItljhsZmymxqvx9pFMTXSZprc
V/zmL/NLqbS9BeT2IaM5TLgVriTV7Yc2WhPsLqy08+37OCa1UW3V8jYaMVk85Tph
ptgG0eMvLH23O9KvgBxxwVw9tGUIOLf6EVqpnLYJk8cscx3xwOf9uT5TEYUe4ZDg
W4s4reZtMdrAVQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:29:49 2026 by rpki-client