Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: C8Z8/CcRp6HfKFhdZdAyp1mIHJYmGNJVvezjeEEbK60=
Subject key identifier: C0:8E:DC:2D:D3:77:7B:9D:C6:27:F2:F5:F6:DC:D9:E1:F1:8B:EE:41
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 019F92B611175672E78264B2AA04F4C55BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 06:00:33 +0000
Manifest this update: Fri 24 Jul 2026 06:00:33 +0000
Manifest next update: Sat 25 Jul 2026 06:00:33 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: qaA7pM54XJzDYgJwexMJdFjC4qe7KhD5AWg/rEhTrCY=)
2: 9abfo1dfe2i5VEGFeOCi-Yu11DQ.roa (hash: 4raYX1rjDm7gMpaOcfPnUtC02bJsDBACsNYhYrbdmZM=)
3: gxBj4mi9DTD-XtJhh92wnnFfI0c.roa (hash: aSdTaRESDnJDn6dr8aVPGxKTLYVHaS0mrAqCtrDcgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:11:17:56:72:e7:82:64:b2:aa:04:f4:c5:5b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Jul 24 06:00:33 2026 GMT
Not After : Jul 25 06:00:33 2026 GMT
Subject: CN=c08edc2dd3777b9dc627f2f5f6dcd9e1f18bee41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:f2:8e:3e:47:6b:89:11:05:10:49:ea:bf:
23:34:87:57:8a:c9:9d:9a:b1:35:56:d5:8f:23:8b:
72:a9:29:f1:89:19:31:00:98:6c:3e:c8:9d:85:2a:
72:18:90:f8:a7:e8:b0:59:ce:52:cc:51:67:d4:75:
2d:00:00:24:13:19:14:ae:c7:58:92:ce:e6:b1:85:
26:7c:73:3c:57:e8:d0:90:fe:28:14:fa:9e:76:b1:
29:fa:72:52:a1:16:e2:70:61:81:0a:40:f9:7c:b9:
41:c1:4f:8c:16:f7:dd:cb:89:7f:8c:96:69:80:02:
9e:08:dc:ce:33:b2:d8:70:53:04:54:3a:1f:09:ac:
96:bc:a8:55:46:46:40:55:f3:8f:ca:00:0b:5d:d7:
88:51:24:6a:b4:a9:60:02:11:98:cd:65:93:b6:1b:
c7:b2:82:e0:ee:a5:6e:e1:9b:9d:19:d3:cd:42:18:
70:cf:60:e1:8a:d1:f0:d6:77:56:ae:8b:98:3a:8a:
46:d2:ec:ff:22:46:b5:d2:83:4a:0f:0c:da:00:c3:
1b:7d:4b:8a:11:2e:6f:68:fa:12:86:20:37:9c:28:
ab:5c:fd:d8:bf:bb:19:64:32:3f:05:73:31:70:37:
84:09:13:96:9b:51:e6:12:b0:a5:b5:32:85:70:70:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8E:DC:2D:D3:77:7B:9D:C6:27:F2:F5:F6:DC:D9:E1:F1:8B:EE:41
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0c:17:e1:b7:52:db:ab:db:fc:cd:a4:8f:d5:b1:7e:fd:4b:
10:d7:b5:e3:da:37:ea:07:78:2e:86:db:b3:6a:1b:bc:4c:05:
55:94:fd:da:30:82:8f:7a:f2:a5:bc:d1:d4:c3:8b:f6:fe:f1:
93:3b:ae:ee:23:66:ce:e6:3d:e6:bc:ed:0e:d4:fa:ca:ae:a8:
02:f1:ef:ef:c3:bf:01:9f:23:cd:e3:18:bf:ce:86:3d:11:99:
48:d1:0c:a7:35:9f:c6:01:d3:74:15:e7:94:96:e2:e1:d1:80:
22:0e:de:23:19:e6:80:62:10:a5:45:ce:60:5b:6f:12:f7:cf:
92:0f:29:8e:94:bf:09:d8:b0:d1:23:4b:6f:ae:c2:16:30:97:
00:0d:a9:0f:7f:d0:33:6a:4c:9e:81:f4:ad:3f:a0:41:e8:18:
98:21:4a:63:82:8f:94:ef:29:1d:d5:b6:3b:f6:7d:c9:25:41:
46:52:d1:5f:9b:59:e0:a9:3b:8b:52:f6:a1:a7:df:27:9a:33:
84:62:25:ef:ec:9e:d2:ab:e9:fd:26:25:e5:1f:05:63:76:e9:
34:32:ec:ce:32:98:0d:25:b7:18:e1:9f:c6:dc:3a:36:05:43:
dd:5e:21:67:b6:af:4d:06:69:2a:bf:56:7d:f5:0d:20:e0:fd:
2e:83:bb:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SthEXVnLngmSyqgT0xVvlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZGNiMDJiNjFlM2ExNWVhYzM3M2I5OTJlMGUxYTY1NDVm
NjFlNTIwHhcNMjYwNzI0MDYwMDMzWhcNMjYwNzI1MDYwMDMzWjAzMTEwLwYDVQQD
EyhjMDhlZGMyZGQzNzc3YjlkYzYyN2YyZjVmNmRjZDllMWYxOGJlZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9byjj5Ha4kRBRBJ6r8jNIdXismd
mrE1VtWPI4tyqSnxiRkxAJhsPsidhSpyGJD4p+iwWc5SzFFn1HUtAAAkExkUrsdY
ks7msYUmfHM8V+jQkP4oFPqedrEp+nJSoRbicGGBCkD5fLlBwU+MFvfdy4l/jJZp
gAKeCNzOM7LYcFMEVDofCayWvKhVRkZAVfOPygALXdeIUSRqtKlgAhGYzWWTthvH
soLg7qVu4ZudGdPNQhhwz2DhitHw1ndWrouYOopG0uz/Ika10oNKDwzaAMMbfUuK
ES5vaPoShiA3nCirXP3Yv7sZZDI/BXMxcDeECROWm1HmErCltTKFcHBjeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCO3C3Td3udxify9fbc2eHxi+5BMB8GA1UdIwQY
MBaAFNzcsCth46FerDc7mS4OGmVF9h5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAt
NjY3NTg0Nzk4NjNlLzEvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAtNjY3NTg0Nzk4NjNl
LzEvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAwX4bdS
26vb/M2kj9Wxfv1LENe149o36gd4Lobbs2obvEwFVZT92jCCj3rypbzR1MOL9v7x
kzuu7iNmzuY95rztDtT6yq6oAvHv78O/AZ8jzeMYv86GPRGZSNEMpzWfxgHTdBXn
lJbi4dGAIg7eIxnmgGIQpUXOYFtvEvfPkg8pjpS/Cdiw0SNLb67CFjCXAA2pD3/Q
M2pMnoH0rT+gQegYmCFKY4KPlO8pHdW2O/Z9ySVBRlLRX5tZ4Kk7i1L2oaffJ5oz
hGIl7+ye0qvp/SYl5R8FY3bpNDLszjKYDSW3GOGfxtw6NgVD3V4hZ7avTQZpKr9W
ffUNIOD9LoO7rw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:13:32 2026 by rpki-client