Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
File: 7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft (raw, json)
Hash identifier: tw6NKBltfC3Sc8UEBJpAwFw2rb34bv/uHLt6jLstNVg=
Subject key identifier: 3B:64:01:F4:3E:EE:27:61:9C:37:C5:FC:F1:D6:43:81:10:CE:31:DD
Authority key identifier: EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3
Certificate issuer: /CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
Certificate serial: 019F8F7FA5E19324358FE278370FCEED056F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:02:15 +0000
Manifest this update: Thu 23 Jul 2026 15:02:15 +0000
Manifest next update: Fri 24 Jul 2026 15:02:15 +0000
Files and hashes: 1: 2Zslfn__QIhx6OX48_NKfIqrzSc.roa (hash: VYnOK+rc+xOxyoEFqSm+yquuiXcM9YH3Y4gu3Gh6hXg=)
2: 7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl (hash: LoPOzY+NQb3KofHTA+QxWvR7TMxGnK3edf1yWAVE12c=)
3: fADQ3jZuaPMPWjx2vDouL3uORA4.roa (hash: n2GZxiMIy0rKBVR1WP0lesxtr0/b5gUI+URghcDViu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:a5:e1:93:24:35:8f:e2:78:37:0f:ce:ed:05:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
Validity
Not Before: Jul 23 15:02:15 2026 GMT
Not After : Jul 24 15:02:15 2026 GMT
Subject: CN=3b6401f43eee27619c37c5fcf1d6438110ce31dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:3d:71:b5:ef:6d:36:84:25:d1:85:08:65:
4c:ba:2b:9a:00:65:39:bd:1f:ba:7f:ee:09:f2:89:
18:f7:63:b6:14:5d:97:2f:8a:c7:16:7b:1f:cf:e5:
88:9e:47:e6:d9:11:ef:15:d1:78:7b:75:b5:1e:4d:
f6:c1:c4:7f:97:5d:79:40:57:36:0f:0f:b3:ff:05:
9c:38:ce:33:71:37:44:03:96:01:36:ab:80:8a:1e:
57:b3:ba:53:52:7e:35:dd:0f:96:5d:66:02:ba:45:
b6:6e:33:e0:d7:6d:af:1e:03:09:cf:56:66:55:e3:
0e:5f:b1:88:84:c1:3a:14:fd:21:ed:a6:03:3f:78:
d1:c2:12:47:b1:76:22:01:f9:ba:a4:b5:9f:63:e4:
f1:82:db:d1:02:7f:05:14:03:bb:a8:17:ac:7b:27:
4a:41:e4:89:42:60:ed:dc:58:89:ca:cc:6c:dd:31:
1d:cd:25:cc:d6:3d:74:d8:1a:3e:36:78:89:1e:e5:
cd:bb:6b:a1:fc:33:e0:3e:5a:cf:6d:1a:42:f9:31:
c6:ae:90:6d:14:ba:ae:8f:18:f0:02:e4:89:55:6f:
ed:f2:22:bc:e4:f4:06:e4:fa:12:98:a6:64:20:ae:
fd:64:99:e9:ec:01:03:7a:52:cf:fa:97:b5:86:bd:
43:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:64:01:F4:3E:EE:27:61:9C:37:C5:FC:F1:D6:43:81:10:CE:31:DD
X509v3 Authority Key Identifier:
keyid:EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e9:3e:a9:72:73:d3:3f:9d:2b:3a:08:7b:e5:61:0f:25:f9:
97:6f:e8:dc:cc:5c:7c:19:32:a6:df:cc:1c:b9:76:ea:41:09:
04:d0:91:4f:e7:31:40:18:d1:2e:d5:a8:1d:0a:fc:01:31:2e:
49:18:5c:25:e7:74:2b:84:34:b8:77:8a:d1:93:71:84:e1:07:
ae:92:87:ad:f4:c3:1a:09:f4:55:8e:fe:3c:02:ee:b0:9f:31:
f3:4a:a1:78:07:05:84:dd:d2:7a:96:2b:ab:b6:70:bc:67:29:
a7:7f:97:bb:2d:c3:4d:6f:2d:d5:f9:df:da:89:dd:73:88:c4:
72:b6:1f:da:bf:c3:39:c4:c4:8a:99:f3:b4:4d:7f:3b:a5:d5:
ec:56:7e:68:9e:3a:bb:30:e9:20:cf:91:2b:98:c1:b6:3a:9e:
99:81:eb:b0:23:63:71:7f:3e:2b:04:95:4b:7c:7b:68:0f:08:
77:27:05:97:86:03:4c:3d:e7:42:64:44:ac:de:4f:d4:f1:11:
05:1c:9f:34:7a:ad:96:a9:2c:f7:12:6b:65:1a:d9:d2:80:1a:
06:70:1b:96:bf:3a:19:61:df:e7:8b:1a:e4:13:74:bb:4e:cf:
81:0b:f8:18:8e:3d:12:16:2b:44:01:ea:93:92:c3:c7:a8:83:
de:21:bf:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf6XhkyQ1j+J4Nw/O7QVvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODJhM2U5MmMwOTY0YTI2YzBjMDkxYTBmMTVkMmRkOTVm
NDgxYjMwHhcNMjYwNzIzMTUwMjE1WhcNMjYwNzI0MTUwMjE1WjAzMTEwLwYDVQQD
EygzYjY0MDFmNDNlZWUyNzYxOWMzN2M1ZmNmMWQ2NDM4MTEwY2UzMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYY9cbXvbTaEJdGFCGVMuiuaAGU5
vR+6f+4J8okY92O2FF2XL4rHFnsfz+WInkfm2RHvFdF4e3W1Hk32wcR/l115QFc2
Dw+z/wWcOM4zcTdEA5YBNquAih5Xs7pTUn413Q+WXWYCukW2bjPg122vHgMJz1Zm
VeMOX7GIhME6FP0h7aYDP3jRwhJHsXYiAfm6pLWfY+TxgtvRAn8FFAO7qBeseydK
QeSJQmDt3FiJysxs3TEdzSXM1j102Bo+NniJHuXNu2uh/DPgPlrPbRpC+THGrpBt
FLqujxjwAuSJVW/t8iK85PQG5PoSmKZkIK79ZJnp7AEDelLP+pe1hr1DXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtkAfQ+7idhnDfF/PHWQ4EQzjHdMB8GA1UdIwQY
MBaAFO6Co+ksCWSibAwJGg8V0t2V9IGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29LajZTd0paS0pzREFrYUR4WFMzWlgwZ2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kOTAyY2EtY2RmMy00ZjI5LWIyMzIt
NzI0MjZkOTI2MDFiLzEvN29LajZTd0paS0pzREFrYUR4WFMzWlgwZ2JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kOTAyY2EtY2RmMy00ZjI5LWIyMzItNzI0MjZkOTI2MDFi
LzEvN29LajZTd0paS0pzREFrYUR4WFMzWlgwZ2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjek+qXJz
0z+dKzoIe+VhDyX5l2/o3MxcfBkypt/MHLl26kEJBNCRT+cxQBjRLtWoHQr8ATEu
SRhcJed0K4Q0uHeK0ZNxhOEHrpKHrfTDGgn0VY7+PALusJ8x80qheAcFhN3SepYr
q7ZwvGcpp3+Xuy3DTW8t1fnf2ondc4jEcrYf2r/DOcTEipnztE1/O6XV7FZ+aJ46
uzDpIM+RK5jBtjqemYHrsCNjcX8+KwSVS3x7aA8IdycFl4YDTD3nQmRErN5P1PER
BRyfNHqtlqks9xJrZRrZ0oAaBnAblr86GWHf54sa5BN0u07PgQv4GI49EhYrRAHq
k5LDx6iD3iG/LA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:18 2026 by rpki-client