Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: xnsWzUYUQQuyHFI0UsvMjDIhh9PYyEshOkal5+WC+aQ=
Subject key identifier: BA:6F:14:A9:68:50:F6:94:65:6A:62:FA:F5:37:08:3E:38:BA:AB:5D
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 019F8F7FA097A5C9E8F0F67B9B5EB58529C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 03EA
Signing time: Thu 23 Jul 2026 15:02:13 +0000
Manifest this update: Thu 23 Jul 2026 15:02:13 +0000
Manifest next update: Fri 24 Jul 2026 15:02:13 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: 3tjyLZOAZ4hr6QG4Y89eTjpeb8lFV1jCZWkL0zprU5o=)
2: UcfLZ7L91GVWjLGWEYmlJV2c10o.roa (hash: uVZ/PpG6ROCuILZTxmMA8qXeD47uyabcF2INsekoGNc=)
3: n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa (hash: 2wd1XBjZMp+nPiV7QP5P7/6ushDvOEw3Nbs3DojVSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:a0:97:a5:c9:e8:f0:f6:7b:9b:5e:b5:85:29:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Jul 23 15:02:13 2026 GMT
Not After : Jul 24 15:02:13 2026 GMT
Subject: CN=ba6f14a96850f694656a62faf537083e38baab5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:00:08:6b:e5:93:0b:de:9b:db:95:6f:fc:
44:c2:0e:b6:8f:09:fb:fe:1d:b5:4f:5d:65:c9:bb:
b2:b3:07:e5:f5:32:16:63:1c:b5:64:f7:a6:cf:04:
c9:2d:c8:0a:35:48:b5:9d:a0:3d:61:cf:da:1b:80:
c2:fc:1d:ef:7b:bf:fb:13:16:46:91:2f:05:56:80:
4b:13:5f:ee:7f:69:b8:a7:7a:62:68:49:e1:cd:19:
d4:65:e8:9b:1b:db:6b:be:86:93:b9:12:42:ea:6e:
0b:34:a1:1e:55:9f:9f:f2:12:44:b6:f2:ea:31:bb:
b5:6f:ac:31:51:d8:8d:b7:fd:2f:4b:4a:a9:9e:56:
dd:48:1e:0c:91:1f:ce:11:9a:d5:8b:a4:8e:00:99:
32:da:a6:44:2d:7f:0d:8a:80:bf:26:e0:ce:ef:7f:
6c:36:08:f4:5b:2d:4a:b4:58:bc:c2:98:ec:3c:c1:
a7:be:91:c2:27:03:e8:b9:b2:53:f9:30:2f:18:66:
ff:7a:00:5d:a1:d6:3d:f8:60:5d:99:c0:01:73:cd:
fa:8d:6b:b4:99:80:be:8c:14:c5:73:c3:e5:c5:de:
0a:90:86:7d:81:af:cc:b5:fa:99:e9:0d:f4:c2:ea:
d6:e2:94:b2:c2:c2:d0:f3:09:3b:76:bf:88:c6:d1:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6F:14:A9:68:50:F6:94:65:6A:62:FA:F5:37:08:3E:38:BA:AB:5D
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e9:0c:45:0d:c3:12:23:55:16:87:b5:cb:7d:f0:e7:20:39:
91:62:ce:fa:32:52:65:bb:34:5e:b9:54:9e:56:9d:ab:55:31:
1f:05:cb:03:f4:90:fc:5e:77:11:33:94:12:c8:c5:c4:77:34:
dc:8c:b6:95:a2:19:eb:5c:f1:68:6d:16:e8:54:3b:3c:91:23:
0c:b4:4e:bc:c7:3a:2a:63:3f:5d:c7:1e:2a:2e:5d:79:2c:a0:
6e:73:cd:cf:55:e7:97:24:fd:b3:04:e7:83:77:bd:f8:78:b4:
04:da:ac:d1:e2:35:88:b0:e7:d5:7e:1a:0c:35:69:a3:66:df:
ae:6a:ba:8f:8d:aa:f2:b7:32:00:77:b0:10:2e:de:72:33:ce:
45:7e:88:75:6b:36:bc:3c:84:75:12:76:e1:45:1d:ba:b7:39:
4a:4f:65:fa:b8:94:72:ff:bc:d7:f8:50:38:6f:d4:59:f6:f6:
3e:c5:35:83:b9:14:88:5b:ae:6d:13:ef:2e:03:72:2b:20:6a:
34:46:cd:72:80:39:2b:d1:59:ea:13:15:f5:91:90:44:36:ef:
e4:36:84:cc:3c:95:86:e8:db:29:15:cc:70:d6:44:b4:94:32:
d0:f6:84:d3:d3:ac:2d:9f:b7:b3:69:f6:71:0d:df:b1:c3:d6:
48:39:b2:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf6CXpcno8PZ7m161hSnFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYTRhNTA3YWQxNTg2NWEwYjJlZWMwOWViYjRlNzU0NTdm
NDAxOGIwHhcNMjYwNzIzMTUwMjEzWhcNMjYwNzI0MTUwMjEzWjAzMTEwLwYDVQQD
EyhiYTZmMTRhOTY4NTBmNjk0NjU2YTYyZmFmNTM3MDgzZTM4YmFhYjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpAACGvlkwvem9uVb/xEwg62jwn7
/h21T11lybuyswfl9TIWYxy1ZPemzwTJLcgKNUi1naA9Yc/aG4DC/B3ve7/7ExZG
kS8FVoBLE1/uf2m4p3piaEnhzRnUZeibG9trvoaTuRJC6m4LNKEeVZ+f8hJEtvLq
Mbu1b6wxUdiNt/0vS0qpnlbdSB4MkR/OEZrVi6SOAJky2qZELX8NioC/JuDO739s
Ngj0Wy1KtFi8wpjsPMGnvpHCJwPoubJT+TAvGGb/egBdodY9+GBdmcABc836jWu0
mYC+jBTFc8Plxd4KkIZ9ga/MtfqZ6Q30wurW4pSywsLQ8wk7dr+IxtGDawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpvFKloUPaUZWpi+vU3CD44uqtdMB8GA1UdIwQY
MBaAFN6kpQetFYZaCy7sCeu051RX9AGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iNDkxZTAtMTk0MS00MjczLTlhMjUt
OTIyZTIyNDQ1OWZiLzEvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iNDkxZTAtMTk0MS00MjczLTlhMjUtOTIyZTIyNDQ1OWZi
LzEvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOkMRQ3D
EiNVFoe1y33w5yA5kWLO+jJSZbs0XrlUnladq1UxHwXLA/SQ/F53ETOUEsjFxHc0
3Iy2laIZ61zxaG0W6FQ7PJEjDLROvMc6KmM/XcceKi5deSygbnPNz1XnlyT9swTn
g3e9+Hi0BNqs0eI1iLDn1X4aDDVpo2bfrmq6j42q8rcyAHewEC7ecjPORX6IdWs2
vDyEdRJ24UUdurc5Sk9l+riUcv+81/hQOG/UWfb2PsU1g7kUiFuubRPvLgNyKyBq
NEbNcoA5K9FZ6hMV9ZGQRDbv5DaEzDyVhujbKRXMcNZEtJQy0PaE09OsLZ+3s2n2
cQ3fscPWSDmy1Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:22 2026 by rpki-client