Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: 27Slx5sJogCJhK5qKUhC3sC++ytEt+yYTyzUZWpQHqw=
Subject key identifier: 36:E6:8C:A9:51:D5:FB:48:70:67:7B:F0:4D:CC:49:D7:87:0D:8C:88
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 019F91A439B6459CDE3E5C3B9C5B8E3F7A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 01:01:26 +0000
Manifest this update: Fri 24 Jul 2026 01:01:26 +0000
Manifest next update: Sat 25 Jul 2026 01:01:26 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: ixWJ6L7M9TXXeTK0WfpaDoHJjjX2hx5H8pUrlavjdw8=)
2: 4nH4XfhimtA2VpYePD6iIqgS8jg.roa (hash: WzWjp5sYk3618sDtkEiRYCtG2GQQ5fgZA4Df9TxbCmE=)
3: Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa (hash: t8YcGZN/KfNS1zoLXEsPr4LvXKVj1kisjNpdPg7jWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:39:b6:45:9c:de:3e:5c:3b:9c:5b:8e:3f:7a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Jul 24 01:01:26 2026 GMT
Not After : Jul 25 01:01:26 2026 GMT
Subject: CN=36e68ca951d5fb4870677bf04dcc49d7870d8c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:00:75:62:99:54:f8:4b:e1:6b:34:ce:ef:
bf:bc:36:fa:c2:8a:fd:71:cc:0b:df:d5:cb:c9:20:
ed:1c:c8:37:be:51:37:e9:02:d1:09:cc:65:9b:bb:
5b:62:0f:6b:87:f1:d3:04:1b:77:8f:46:d3:3c:bd:
63:78:6f:05:76:db:01:f6:5d:f8:41:cc:46:42:82:
0c:3b:42:be:91:08:36:9f:81:02:6a:d7:af:86:f5:
5f:2c:d9:be:ca:11:16:13:d1:df:b9:9f:10:2a:98:
32:2e:77:3a:7f:5c:52:b7:ce:c2:13:5e:a0:45:ee:
97:b8:ef:8d:90:58:8a:37:3d:dc:b7:a1:65:29:6b:
79:b7:3f:1d:97:de:83:80:73:be:63:a9:66:7b:0a:
ff:2a:ae:e2:f4:c3:f6:da:e0:62:54:28:3e:c2:72:
86:8a:f7:c0:44:24:ab:eb:22:62:06:58:d2:fd:68:
22:2c:19:7b:79:05:c5:23:e9:f8:84:72:19:03:46:
bf:ed:b3:75:54:85:58:f8:5a:88:4d:7e:8f:be:9d:
fb:41:89:47:9b:ce:33:e2:04:17:66:aa:13:d1:2a:
58:8d:92:be:eb:4d:82:02:3c:93:d5:48:19:21:52:
bf:30:cd:b7:ef:6f:3a:0e:10:dc:33:38:a1:a9:e4:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E6:8C:A9:51:D5:FB:48:70:67:7B:F0:4D:CC:49:D7:87:0D:8C:88
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ca:9d:17:62:9d:fb:0e:0b:07:f6:e6:bd:37:ca:c7:b8:c3:
97:a6:61:3c:3a:c1:89:7a:0c:72:20:6f:69:21:f6:b5:6e:c5:
a2:9a:91:1f:9d:42:6d:72:b2:e5:f7:80:aa:eb:33:3d:41:f1:
7d:9d:88:04:b6:55:89:63:11:3a:0b:32:7f:e3:c4:30:bc:9c:
1c:65:a4:f9:11:be:0f:73:65:fe:ab:ef:fa:8b:8b:6e:5a:a5:
89:1c:10:bd:3b:3a:b2:95:23:8c:84:f9:76:6a:2b:57:11:21:
8d:c8:e0:1e:04:24:b6:77:3f:dc:09:0f:08:16:56:76:cb:5f:
e1:cd:f4:2d:50:4f:31:05:7e:9a:47:aa:dd:44:a2:39:17:7a:
10:b9:f5:ed:f1:35:ad:5e:91:b6:1c:82:2e:44:0f:96:99:df:
a8:80:b8:ee:a4:bb:8f:5f:69:72:97:32:03:15:8e:77:94:e2:
63:30:d2:d8:cc:2b:a4:54:78:55:45:12:99:7b:4d:d4:40:a3:
b8:8e:c7:38:7d:a7:49:ba:89:9f:94:1c:71:82:5b:6a:d6:44:
49:dd:f2:3e:28:7a:c7:ed:62:1c:8c:eb:10:a2:d5:04:a0:96:
7d:f1:23:2f:c2:cf:d2:4a:f0:d2:92:50:09:ca:13:aa:92:56:
d9:97:77:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RpDm2RZzePlw7nFuOP3p0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYTQ2ZWFhZTdhZWYyZjQ0ZmU2NjAxNjJiYjlkYzcwZDY1
MjVhZjEwHhcNMjYwNzI0MDEwMTI2WhcNMjYwNzI1MDEwMTI2WjAzMTEwLwYDVQQD
EygzNmU2OGNhOTUxZDVmYjQ4NzA2NzdiZjA0ZGNjNDlkNzg3MGQ4Yzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHsAdWKZVPhL4Ws0zu+/vDb6wor9
ccwL39XLySDtHMg3vlE36QLRCcxlm7tbYg9rh/HTBBt3j0bTPL1jeG8FdtsB9l34
QcxGQoIMO0K+kQg2n4ECatevhvVfLNm+yhEWE9HfuZ8QKpgyLnc6f1xSt87CE16g
Re6XuO+NkFiKNz3ct6FlKWt5tz8dl96DgHO+Y6lmewr/Kq7i9MP22uBiVCg+wnKG
ivfARCSr6yJiBljS/WgiLBl7eQXFI+n4hHIZA0a/7bN1VIVY+FqITX6Pvp37QYlH
m84z4gQXZqoT0SpYjZK+602CAjyT1UgZIVK/MM237286DhDcMzihqeSk/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbmjKlR1ftIcGd78E3MSdeHDYyIMB8GA1UdIwQY
MBaAFN6kbqrnrvL0T+ZgFiu53HDWUlrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEt
MWZhOWFjNTgwYjhlLzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEtMWZhOWFjNTgwYjhl
LzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMqdF2Kd
+w4LB/bmvTfKx7jDl6ZhPDrBiXoMciBvaSH2tW7FopqRH51CbXKy5feAquszPUHx
fZ2IBLZViWMROgsyf+PEMLycHGWk+RG+D3Nl/qvv+ouLblqliRwQvTs6spUjjIT5
dmorVxEhjcjgHgQktnc/3AkPCBZWdstf4c30LVBPMQV+mkeq3USiORd6ELn17fE1
rV6RthyCLkQPlpnfqIC47qS7j19pcpcyAxWOd5TiYzDS2MwrpFR4VUUSmXtN1ECj
uI7HOH2nSbqJn5QccYJbatZESd3yPih6x+1iHIzrEKLVBKCWffEjL8LP0krw0pJQ
CcoTqpJW2Zd3vA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:03 2026 by rpki-client