Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
File: 3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json)
Hash identifier: NThjTv19tfOYsl5emOvC1u6b55vhPu/ekTdXU8eKOdg=
Subject key identifier: C8:E2:A2:F7:FE:45:5F:D1:03:33:5A:3B:1C:6D:FC:E7:0A:8B:7B:4C
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 019F90FEFAADDA92292C04147AE76F2217ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
Manifest number: 19D7
Signing time: Thu 23 Jul 2026 22:00:57 +0000
Manifest this update: Thu 23 Jul 2026 22:00:57 +0000
Manifest next update: Fri 24 Jul 2026 22:00:57 +0000
Files and hashes: 1: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: wSyf4v5+1p7prcUROdHmfkClrZAplutNolYfZwTr2XI=)
2: 7ApA8WxkyyTSEZSRVpbKLbbn2sg.roa (hash: DzvO5U7AL0VdjxVsRB1zB0EdRmiss6g/L1DoqaojTAE=)
3: Z0Ol55vmano2z06uUQknUo3QoTc.roa (hash: GkLsLJIYqmg4q6xamUbvEEG9iujsWjsYcEaYmXK7cLE=)
4: _0EsaxZOC_EidYm5nqVbMGv-gwk.roa (hash: iTzRHJQiIkKsfX5vIK1gvYNgM5gQ+IPUGEhDEQTXUs8=)
5: mOZvAMLraqykK52-jzGD-yHlcnw.roa (hash: HgyR01q3fui7+YF0vuXYroeZjeOmGgCJNhWLmBZNBqI=)
6: r_0py4YALAEcOOi0tvRe1NDcIA4.roa (hash: acy4ZAe5LvQuy/j1nyMxhW+v2g0V51OQVWm9ef7WTLI=)
7: u02qpN14w4yhn2ctE44FwFlaayw.roa (hash: Y86Ae8inVsAjiKn8VpEwH1tTqB45gvur7i/GdDAq5IM=)
8: u5cJRJ9wBpMrZ8hhLyY9W8QCvMY.roa (hash: iB97I/PNWHuFo231JJX1gPfe7U6KqJLM6Q8cz9KMcfM=)
9: xJmLpZQSUqn2p0sl4yH-zTjLxSU.roa (hash: 3C0CJjezLxbHBKLVQeKBHPmtT1qFFsnDxafe76+pogU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:fa:ad:da:92:29:2c:04:14:7a:e7:6f:22:17:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Jul 23 22:00:57 2026 GMT
Not After : Jul 24 22:00:57 2026 GMT
Subject: CN=c8e2a2f7fe455fd103335a3b1c6dfce70a8b7b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d8:1f:29:aa:43:f2:c2:3a:a3:f9:4a:b1:2c:
7e:a0:71:9b:d4:c7:65:8c:39:f3:33:54:bc:a2:c1:
d6:56:c9:91:84:b8:62:84:db:2f:dd:0e:bd:84:e0:
63:12:a9:a1:d8:f6:bc:c3:10:71:1d:73:c9:02:04:
95:f7:49:c2:7a:cd:1f:7f:e3:d0:93:93:91:1d:65:
a6:ee:7f:f9:e8:a2:4c:10:fe:0c:8e:eb:c5:8c:f9:
34:72:f9:a0:0e:81:4d:e0:bc:c1:f4:23:86:40:8a:
cc:6f:bc:fa:9e:af:ac:6d:6d:1f:3e:ce:03:73:7b:
0f:86:9c:79:30:e1:fe:a9:32:d5:72:e4:c7:7a:d8:
20:d9:cd:e5:f7:2e:96:4b:5e:e0:50:51:cd:e3:ae:
6e:ef:c4:68:08:8b:f2:9f:8d:07:57:c1:ac:98:d8:
a8:11:b1:80:0f:84:5b:c1:a6:4a:7b:95:4c:1d:a5:
e7:8b:89:0d:17:a9:62:64:e6:47:f9:6c:05:a3:0f:
8c:b6:1d:36:6a:31:12:4c:f2:c1:00:25:be:fd:02:
53:40:a8:71:5c:d7:1d:e3:5a:4d:22:d5:6a:ca:3e:
c6:7a:3f:7d:a2:cb:ff:6b:35:24:ae:b9:01:df:a3:
c0:ba:eb:2e:55:0c:fe:ca:cc:6e:23:74:3e:74:fe:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E2:A2:F7:FE:45:5F:D1:03:33:5A:3B:1C:6D:FC:E7:0A:8B:7B:4C
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d6:28:e8:12:f5:0c:a1:66:3d:72:be:64:ca:f9:b0:8c:13:
c1:63:4f:27:16:8d:48:a2:05:4b:fd:d6:dc:36:9a:29:f7:db:
46:78:bf:d4:92:57:36:5e:d2:50:ed:9b:1f:e6:af:2b:e5:9c:
18:f4:6a:9d:4e:51:ff:10:19:b1:88:15:96:ec:68:f5:45:e0:
25:ca:63:3b:c9:57:71:c8:7b:28:6e:b9:68:c0:79:b5:c8:77:
ce:c6:ad:6e:14:74:20:9b:b9:a8:c7:dd:71:62:2a:c1:69:6e:
54:df:df:00:5d:47:fd:f9:ce:cf:5b:37:fc:90:b7:a7:7e:1d:
b2:a8:a2:8b:69:56:b1:44:4f:f1:35:b9:07:da:f2:58:48:b6:
52:db:8e:26:9f:e1:af:df:0a:8f:81:2a:a2:22:68:bd:5d:e9:
6d:4c:ea:ba:b2:82:33:68:cc:d6:41:f0:a2:e4:62:bb:62:9d:
03:95:91:29:f1:36:19:a1:a8:42:33:9f:50:4c:4d:21:1c:eb:
ac:f8:e5:57:56:ad:53:57:7b:c4:69:ab:fa:06:a6:c3:05:45:
80:3c:d6:f5:0a:f0:60:4e:d4:3f:79:bf:ad:a2:1b:cf:71:74:
21:06:67:0a:22:4f:7f:50:62:e4:08:bb:e4:19:ae:01:33:4c:
cb:9e:ff:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/vqt2pIpLAQUeudvIhftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz
Zjc5MzAwHhcNMjYwNzIzMjIwMDU3WhcNMjYwNzI0MjIwMDU3WjAzMTEwLwYDVQQD
EyhjOGUyYTJmN2ZlNDU1ZmQxMDMzMzVhM2IxYzZkZmNlNzBhOGI3YjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tgfKapD8sI6o/lKsSx+oHGb1Mdl
jDnzM1S8osHWVsmRhLhihNsv3Q69hOBjEqmh2Pa8wxBxHXPJAgSV90nCes0ff+PQ
k5ORHWWm7n/56KJMEP4MjuvFjPk0cvmgDoFN4LzB9COGQIrMb7z6nq+sbW0fPs4D
c3sPhpx5MOH+qTLVcuTHetgg2c3l9y6WS17gUFHN465u78RoCIvyn40HV8GsmNio
EbGAD4RbwaZKe5VMHaXni4kNF6liZOZH+WwFow+Mth02ajESTPLBACW+/QJTQKhx
XNcd41pNItVqyj7Gej99osv/azUkrrkB36PAuusuVQz+ysxuI3Q+dP7/OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjiovf+RV/RAzNaOxxt/OcKi3tMMB8GA1UdIwQY
MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt
MDBiY2Q5YjkxYzFiLzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi
LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNYo6BL1
DKFmPXK+ZMr5sIwTwWNPJxaNSKIFS/3W3DaaKffbRni/1JJXNl7SUO2bH+avK+Wc
GPRqnU5R/xAZsYgVluxo9UXgJcpjO8lXcch7KG65aMB5tch3zsatbhR0IJu5qMfd
cWIqwWluVN/fAF1H/fnOz1s3/JC3p34dsqiii2lWsURP8TW5B9ryWEi2UtuOJp/h
r98Kj4EqoiJovV3pbUzqurKCM2jM1kHwouRiu2KdA5WRKfE2GaGoQjOfUExNIRzr
rPjlV1atU1d7xGmr+gamwwVFgDzW9QrwYE7UP3m/raIbz3F0IQZnCiJPf1Bi5Ai7
5BmuATNMy57/dQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:17 2026 by rpki-client