Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
File: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft (raw, json)
Hash identifier: mN9VtkWnhUQlpXu6C6T6hhRhABVn2OPSWkcKobPPWzU=
Subject key identifier: 4A:8A:F2:E9:53:C9:7F:B2:B9:49:B3:4E:99:30:ED:EF:3F:4C:02:EF
Authority key identifier: DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
Certificate issuer: /CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Certificate serial: 019F90C7DE5A6A297207A973AC7773071F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 21:00:45 +0000
Manifest this update: Thu 23 Jul 2026 21:00:45 +0000
Manifest next update: Fri 24 Jul 2026 21:00:45 +0000
Files and hashes: 1: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl (hash: YQ+8Eea9ClYurRuUHvegtdPq+94mREQs1uO8zomYjYg=)
2: Db0vWV10PDdNvJlPrQIc334_tN8.roa (hash: c9vHRsLZpkXkOA11QWT95eyXoTQe6iY901YAkf3L6Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:de:5a:6a:29:72:07:a9:73:ac:77:73:07:1f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Validity
Not Before: Jul 23 21:00:45 2026 GMT
Not After : Jul 24 21:00:45 2026 GMT
Subject: CN=4a8af2e953c97fb2b949b34e9930edef3f4c02ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:40:d2:80:92:0e:cc:70:ed:ec:ff:b8:79:
13:5e:ca:49:5a:a0:46:29:1d:31:a6:b5:5b:77:75:
8f:8b:8e:d4:98:bc:de:92:d1:10:2d:7e:2c:23:b2:
08:fc:1d:29:a6:42:d8:7b:87:24:26:72:d8:77:77:
44:ef:28:c1:4f:92:84:39:4c:b9:da:37:16:f2:39:
72:f2:bc:08:50:b4:f8:e3:ae:ac:2c:ee:77:b6:c1:
52:b8:05:dc:c8:c8:63:71:b6:d4:e7:4b:f1:cd:11:
58:ff:e8:44:42:19:97:f3:13:68:ed:72:b8:bb:70:
f2:80:ca:68:a3:72:3b:92:ad:96:30:ab:81:d5:43:
b4:38:f5:82:80:b3:b1:31:55:bc:96:ce:9a:c0:74:
b3:48:c6:0e:9c:fc:f4:be:89:d8:04:d8:78:c4:1f:
c0:1e:bb:d7:01:20:af:45:ec:1b:8b:99:70:4d:24:
8d:3b:db:0a:e3:ec:bf:99:92:3a:1c:78:be:82:36:
1a:98:ad:5a:7d:34:c2:7d:8e:c8:d2:d5:c2:86:cf:
ed:e7:9c:c5:42:4a:b0:38:0d:36:83:c5:d4:aa:dd:
69:15:42:c9:f7:ad:de:87:0f:fd:17:85:5e:1e:99:
12:9b:63:7c:88:41:00:76:b4:da:12:2e:26:1c:ae:
bc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8A:F2:E9:53:C9:7F:B2:B9:49:B3:4E:99:30:ED:EF:3F:4C:02:EF
X509v3 Authority Key Identifier:
keyid:DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:38:d2:cf:80:e7:c9:bf:2c:10:02:50:35:34:33:e0:92:33:
aa:b5:96:b1:f6:78:c3:07:6c:bb:57:d0:46:93:04:f0:14:3a:
6e:34:7f:30:f5:c7:cc:6b:dd:77:d6:43:14:ec:08:71:ae:f2:
e8:1d:e4:7d:19:2f:67:a5:35:9d:92:b9:c4:cd:a2:ae:e5:82:
12:cb:7a:fb:f3:e9:68:0c:1b:c4:11:9a:48:dd:a7:35:58:e9:
4b:fc:66:cf:64:d9:d4:8c:2b:e7:0e:a3:32:a9:4f:bf:93:73:
24:35:02:80:54:81:42:e4:37:d2:d6:1e:e9:17:de:45:20:56:
83:fd:59:3e:2e:d8:e4:2d:0d:23:db:04:23:7f:38:31:6e:83:
75:46:97:7a:d2:f4:2a:f2:37:f7:c9:76:0a:f1:ea:74:02:6c:
64:87:b0:01:b0:14:c3:17:71:6d:eb:36:f1:45:4b:7e:b3:09:
c3:7c:f0:b5:bb:5b:bf:23:a0:70:9f:2a:c2:ba:45:df:69:da:
bf:ed:09:56:7d:04:22:a8:42:0b:3f:e2:71:33:e6:01:c0:d3:
c7:1d:eb:31:f8:44:9c:7d:08:ab:a1:9c:4b:7d:8e:b0:02:20:
c7:5b:24:47:9c:64:e4:b6:49:7b:6e:82:5f:5b:6e:c0:1b:4a:
b2:fe:d9:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx95aailyB6lzrHdzBx9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlODA0YzljOGE0MzM5N2QxNjc3OWFhOTM0ZjcwNjczODhm
YzdkN2MwHhcNMjYwNzIzMjEwMDQ1WhcNMjYwNzI0MjEwMDQ1WjAzMTEwLwYDVQQD
Eyg0YThhZjJlOTUzYzk3ZmIyYjk0OWIzNGU5OTMwZWRlZjNmNGMwMmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphRA0oCSDsxw7ez/uHkTXspJWqBG
KR0xprVbd3WPi47UmLzektEQLX4sI7II/B0ppkLYe4ckJnLYd3dE7yjBT5KEOUy5
2jcW8jly8rwIULT4466sLO53tsFSuAXcyMhjcbbU50vxzRFY/+hEQhmX8xNo7XK4
u3DygMpoo3I7kq2WMKuB1UO0OPWCgLOxMVW8ls6awHSzSMYOnPz0vonYBNh4xB/A
HrvXASCvRewbi5lwTSSNO9sK4+y/mZI6HHi+gjYamK1afTTCfY7I0tXChs/t55zF
QkqwOA02g8XUqt1pFULJ963ehw/9F4VeHpkSm2N8iEEAdrTaEi4mHK68DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqK8ulTyX+yuUmzTpkw7e8/TALvMB8GA1UdIwQY
MBaAFN6ATJyKQzl9FneaqTT3BnOI/H18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM29CTW5JcERPWDBXZDVxcE5QY0djNGo4Zlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85NjI1NGMtZmMwZS00ZjU4LTk1ZTIt
YWY0ZTUyNDFiZjIwLzEvM29CTW5JcERPWDBXZDVxcE5QY0djNGo4Zlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC85NjI1NGMtZmMwZS00ZjU4LTk1ZTItYWY0ZTUyNDFiZjIw
LzEvM29CTW5JcERPWDBXZDVxcE5QY0djNGo4Zlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDjSz4Dn
yb8sEAJQNTQz4JIzqrWWsfZ4wwdsu1fQRpME8BQ6bjR/MPXHzGvdd9ZDFOwIca7y
6B3kfRkvZ6U1nZK5xM2iruWCEst6+/PpaAwbxBGaSN2nNVjpS/xmz2TZ1Iwr5w6j
MqlPv5NzJDUCgFSBQuQ30tYe6RfeRSBWg/1ZPi7Y5C0NI9sEI384MW6DdUaXetL0
KvI398l2CvHqdAJsZIewAbAUwxdxbes28UVLfrMJw3zwtbtbvyOgcJ8qwrpF32na
v+0JVn0EIqhCCz/icTPmAcDTxx3rMfhEnH0Iq6GcS32OsAIgx1skR5xk5LZJe26C
X1tuwBtKsv7ZBw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:06 2026 by rpki-client