Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: xi3wkCm7ESorbYmNTC+hBQUJhXhSnDsqKKnkhVAEmSM=
Subject key identifier: 77:C2:96:C0:EA:35:76:EC:AD:6D:4B:C4:7C:7D:B7:69:68:A1:5C:9A
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 019F90912318CFA685781D1704563F914709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 1907
Signing time: Thu 23 Jul 2026 20:00:58 +0000
Manifest this update: Thu 23 Jul 2026 20:00:58 +0000
Manifest next update: Fri 24 Jul 2026 20:00:58 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: LYWycveA3aXBB4VK6RzUsRXI99j2ATqf0nw+vShMdOA=)
2: 6xKBRhcPGOW0-ef_87nk8nPvflA.roa (hash: ljMD+xiZ4YQ7UeRE1RQr2u8g+4zja/CKtgOQ244SoZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:23:18:cf:a6:85:78:1d:17:04:56:3f:91:47:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Jul 23 20:00:58 2026 GMT
Not After : Jul 24 20:00:58 2026 GMT
Subject: CN=77c296c0ea3576ecad6d4bc47c7db76968a15c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:5f:4b:ad:2d:f0:0c:51:bb:c2:6d:69:53:
e3:22:57:93:e7:e5:99:a2:84:3c:14:ca:8e:16:e6:
b9:af:9b:72:40:bd:db:46:e9:49:7e:2f:77:7d:97:
8d:c3:38:89:45:42:ed:a1:e7:69:fc:83:fc:e0:d9:
7a:49:12:a1:a4:25:37:7c:f5:00:cf:b6:c4:a3:83:
5a:9e:89:cd:bf:e1:ff:cd:82:66:fc:33:cc:4d:2b:
b5:19:5a:d8:e1:ce:87:96:95:a5:c3:f2:cb:3d:fb:
66:14:16:58:34:92:86:c4:52:8f:f6:af:84:03:2a:
f6:02:44:7f:f8:0c:c1:c8:d5:65:40:7d:93:f5:2b:
d8:28:0b:24:b0:f3:92:96:25:6f:14:59:20:44:e7:
59:bb:6e:f4:7c:bd:89:6e:1a:ce:b1:4c:df:9f:a7:
c2:07:df:cd:16:e0:42:b8:2b:ce:25:80:db:17:ef:
65:2a:f5:ea:b7:d4:ab:57:d7:54:18:f7:d8:4d:08:
a1:11:34:71:8e:2c:4f:ff:e9:2f:96:38:df:b7:86:
e3:8d:93:c0:83:96:b1:8a:ab:2c:79:35:70:51:d0:
31:31:35:fd:df:b4:dc:25:d6:89:3e:6c:42:14:c7:
84:27:f6:98:fc:0e:32:f2:26:06:e8:54:5c:8d:87:
61:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C2:96:C0:EA:35:76:EC:AD:6D:4B:C4:7C:7D:B7:69:68:A1:5C:9A
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c0:b5:e1:1d:7d:01:f3:b8:a2:8c:35:b2:8d:92:f4:ed:3c:
db:bd:ea:60:28:fc:86:aa:64:85:73:35:4d:6a:54:08:7d:a4:
2d:93:c8:8c:4a:69:9d:41:e8:8e:3b:ae:16:51:46:c4:5c:9d:
ca:f9:e7:a5:3a:f2:38:5a:4d:51:eb:6e:77:f3:61:f5:2a:11:
8e:2a:77:a0:36:d2:ae:bd:20:7f:d3:fb:cb:fa:4a:a3:a9:c3:
e2:7e:7c:64:4e:82:6a:bd:fd:5c:4d:61:81:2c:c0:f2:95:57:
7a:32:f4:69:20:58:8d:e0:4a:ff:96:74:0e:7c:9d:a5:0f:13:
5e:4f:88:f4:a6:98:8b:63:f2:8b:f1:bf:86:38:d5:d8:51:1e:
bd:c9:37:da:76:e0:8d:a6:34:ce:a5:b5:4e:47:4e:3f:e1:88:
3c:21:be:8c:79:b9:61:ea:fe:d4:64:2a:c9:22:4c:80:f7:2b:
5f:07:26:93:65:f2:bd:d9:33:82:13:b3:6f:a9:9f:72:62:62:
0d:f1:e3:01:0e:2e:70:71:7b:01:d6:b8:d6:3c:d0:d9:da:8a:
7c:65:aa:9c:9f:73:24:29:3b:a7:13:ab:74:da:45:66:7e:7e:
15:35:60:ed:7a:39:a6:4c:7e:44:ec:de:46:ec:33:12:c9:06:
63:81:2d:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkSMYz6aFeB0XBFY/kUcJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmY4NWJiOGEzNzU5NTIzZTBjYzlmOGE5MWRiZGFmNDc0
ZDZiN2MwHhcNMjYwNzIzMjAwMDU4WhcNMjYwNzI0MjAwMDU4WjAzMTEwLwYDVQQD
Eyg3N2MyOTZjMGVhMzU3NmVjYWQ2ZDRiYzQ3YzdkYjc2OTY4YTE1YzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx19fS60t8AxRu8JtaVPjIleT5+WZ
ooQ8FMqOFua5r5tyQL3bRulJfi93fZeNwziJRULtoedp/IP84Nl6SRKhpCU3fPUA
z7bEo4NanonNv+H/zYJm/DPMTSu1GVrY4c6HlpWlw/LLPftmFBZYNJKGxFKP9q+E
Ayr2AkR/+AzByNVlQH2T9SvYKAsksPOSliVvFFkgROdZu270fL2JbhrOsUzfn6fC
B9/NFuBCuCvOJYDbF+9lKvXqt9SrV9dUGPfYTQihETRxjixP/+kvljjft4bjjZPA
g5axiqsseTVwUdAxMTX937TcJdaJPmxCFMeEJ/aY/A4y8iYG6FRcjYdhiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfClsDqNXbsrW1LxHx9t2looVyaMB8GA1UdIwQY
MBaAFNz/hbuKN1lSPgzJ+Kkdva9HTWt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYt
NWJjMzAyYjRiNWZjLzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYtNWJjMzAyYjRiNWZj
LzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMC14R19
AfO4oow1so2S9O08273qYCj8hqpkhXM1TWpUCH2kLZPIjEppnUHojjuuFlFGxFyd
yvnnpTryOFpNUetud/Nh9SoRjip3oDbSrr0gf9P7y/pKo6nD4n58ZE6Car39XE1h
gSzA8pVXejL0aSBYjeBK/5Z0DnydpQ8TXk+I9KaYi2Pyi/G/hjjV2FEevck32nbg
jaY0zqW1TkdOP+GIPCG+jHm5Yer+1GQqySJMgPcrXwcmk2XyvdkzghOzb6mfcmJi
DfHjAQ4ucHF7Ada41jzQ2dqKfGWqnJ9zJCk7pxOrdNpFZn5+FTVg7Xo5pkx+ROze
RuwzEskGY4EtKQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:43 2026 by rpki-client