Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: xQ4jc3mpElqqS2xa3w87tBmRvUiWZM9RTOIo+TKg6ac=
Subject key identifier: A4:FF:FC:9A:59:29:E5:78:5D:28:BA:83:4C:36:50:3C:53:C5:62:41
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 019F91355CDCF559E28DC12B91A62DF91339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 19D3
Signing time: Thu 23 Jul 2026 23:00:21 +0000
Manifest this update: Thu 23 Jul 2026 23:00:21 +0000
Manifest next update: Fri 24 Jul 2026 23:00:21 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: AaGuUfy2tPsrx7fZLV69xT3wkFwAa5gLtDKHADdyU1A=)
2: W5GHuBmScEfpIPAhuqgylrz1a6Q.roa (hash: iVf+MqYMn6D3or0TDUJHTOHK/dGQL5UOldNHGxN0jow=)
3: tH4NdKGms5TfcW6T3wq-xPP5lao.roa (hash: RAFP/ByUPYbvzL7CQ6hq0JZ4+gFCb5J71aCNcV4HRvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:5c:dc:f5:59:e2:8d:c1:2b:91:a6:2d:f9:13:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Jul 23 23:00:21 2026 GMT
Not After : Jul 24 23:00:21 2026 GMT
Subject: CN=a4fffc9a5929e5785d28ba834c36503c53c56241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6c:68:90:c8:d3:ff:9d:95:1e:f8:24:f6:b2:
ee:86:49:e9:6f:ba:5a:29:92:2e:cd:df:5e:22:ce:
a8:18:ef:da:11:83:da:aa:61:a6:3c:6a:f4:90:09:
30:63:b9:c7:e4:f3:70:79:31:9f:83:89:a9:39:b3:
f2:4a:21:ad:b0:82:84:35:7b:a3:e7:3d:4f:55:de:
25:a3:af:92:1a:a5:11:f6:e6:e1:ae:81:97:6b:77:
70:cc:52:f9:f7:d5:93:f2:7d:f3:17:9b:5d:e4:d3:
28:ab:26:3c:b8:6b:7b:33:c3:07:ce:79:4e:97:ee:
53:95:0c:4a:13:91:99:eb:94:23:5a:fa:3c:05:19:
db:60:39:92:53:03:67:2f:91:c2:81:8e:ed:5e:f2:
36:4b:0b:e6:21:ee:eb:7e:f4:6a:ff:59:40:60:65:
c7:9f:61:4d:47:11:da:cc:b2:be:c2:8f:51:82:c3:
ea:a5:b4:f8:29:ee:15:fc:36:68:3a:fa:ee:8f:3e:
a2:b3:ed:ac:75:51:6d:02:1f:89:43:49:e9:83:34:
0a:98:15:7c:8a:21:f9:9d:cb:19:3b:66:db:d5:36:
73:21:c0:d0:23:81:1e:c2:31:f9:6d:9d:63:cf:b3:
db:d8:6a:b5:51:a4:35:ef:a7:c0:f3:eb:a8:c5:1f:
37:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FF:FC:9A:59:29:E5:78:5D:28:BA:83:4C:36:50:3C:53:C5:62:41
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:65:4e:53:bd:f1:bf:9b:e8:73:e8:a6:d5:fb:13:b4:92:9a:
77:a3:38:d2:80:3a:ef:a5:eb:04:2d:1d:d4:dd:c9:79:5a:8d:
71:d8:43:87:84:12:e1:c8:73:ed:dc:12:2e:49:4c:51:a3:f8:
b5:63:8a:cc:2d:38:59:4a:5a:91:b9:4e:b8:9b:a3:23:87:9b:
f4:87:fd:bb:8b:d4:6e:1d:b6:66:4f:6b:92:20:40:5c:1a:70:
f5:cf:13:76:31:70:e5:a0:c1:82:2b:37:9f:c3:e2:b3:70:2d:
04:53:33:96:71:72:52:0f:e0:5a:61:d5:90:55:b7:1e:ea:8c:
50:02:bb:78:45:b8:ce:ac:28:35:e7:e1:7e:a6:7d:6e:a7:79:
28:81:64:70:2a:9a:36:2a:ae:fb:34:96:6d:fb:0e:ca:c4:e6:
72:f1:11:50:ea:b9:8b:6d:33:d8:dc:dc:6c:d8:6d:2c:97:f1:
6b:fb:74:4f:6a:63:6a:3a:61:88:21:56:29:ab:f0:20:43:5b:
01:53:fb:b4:0f:92:b7:1c:bd:0b:f5:ad:82:c5:12:2e:34:69:
be:d5:e4:9f:98:04:8d:99:a5:c2:00:64:41:49:b4:97:cc:af:
6d:1e:17:bc:fd:2e:c1:da:0b:0a:8c:06:6f:67:65:13:4e:9b:
fe:5e:42:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNVzc9VnijcErkaYt+RM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMjdiOTM5OTM0YTJjYzIwNmZmYmE2YmNlOWM5MGZkY2Jh
MzljNzEwHhcNMjYwNzIzMjMwMDIxWhcNMjYwNzI0MjMwMDIxWjAzMTEwLwYDVQQD
EyhhNGZmZmM5YTU5MjllNTc4NWQyOGJhODM0YzM2NTAzYzUzYzU2MjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWxokMjT/52VHvgk9rLuhknpb7pa
KZIuzd9eIs6oGO/aEYPaqmGmPGr0kAkwY7nH5PNweTGfg4mpObPySiGtsIKENXuj
5z1PVd4lo6+SGqUR9ubhroGXa3dwzFL599WT8n3zF5td5NMoqyY8uGt7M8MHznlO
l+5TlQxKE5GZ65QjWvo8BRnbYDmSUwNnL5HCgY7tXvI2SwvmIe7rfvRq/1lAYGXH
n2FNRxHazLK+wo9RgsPqpbT4Ke4V/DZoOvrujz6is+2sdVFtAh+JQ0npgzQKmBV8
iiH5ncsZO2bb1TZzIcDQI4EewjH5bZ1jz7Pb2Gq1UaQ176fA8+uoxR83owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKT//JpZKeV4XSi6g0w2UDxTxWJBMB8GA1UdIwQY
MBaAFN8nuTmTSizCBv+6a86ckP3Lo5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0Njgt
NmVkNTRkM2ZlNGY0LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0NjgtNmVkNTRkM2ZlNGY0
LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGVOU73x
v5voc+im1fsTtJKad6M40oA676XrBC0d1N3JeVqNcdhDh4QS4chz7dwSLklMUaP4
tWOKzC04WUpakblOuJujI4eb9If9u4vUbh22Zk9rkiBAXBpw9c8TdjFw5aDBgis3
n8Pis3AtBFMzlnFyUg/gWmHVkFW3HuqMUAK7eEW4zqwoNefhfqZ9bqd5KIFkcCqa
Niqu+zSWbfsOysTmcvERUOq5i20z2NzcbNhtLJfxa/t0T2pjajphiCFWKavwIENb
AVP7tA+Stxy9C/WtgsUSLjRpvtXkn5gEjZmlwgBkQUm0l8yvbR4XvP0uwdoLCowG
b2dlE06b/l5C2Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:14 2026 by rpki-client