Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: Kd3+fObgCXv3laBYZ/8C2XD+xKi3tMkpOTnw0TDCvzc=
Subject key identifier: E8:4A:CE:45:E8:C2:57:E6:9B:AA:BE:3D:DD:62:96:E4:76:8C:59:B4
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 019F92113F30F3960EC67BCF656207888881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 07A0
Signing time: Fri 24 Jul 2026 03:00:31 +0000
Manifest this update: Fri 24 Jul 2026 03:00:31 +0000
Manifest next update: Sat 25 Jul 2026 03:00:31 +0000
Files and hashes: 1: 2JL6QkmCoFqlhxQJNmWn1mF_TU4.roa (hash: QqXkH/YgS0MOCatOfHharCIV2omJWZGXYUHGmZTmvS0=)
2: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: 8t7jsuAMEGOUWZxni5OMJZ28TBiq12GIcwu9g9fKrRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:3f:30:f3:96:0e:c6:7b:cf:65:62:07:88:88:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Jul 24 03:00:31 2026 GMT
Not After : Jul 25 03:00:31 2026 GMT
Subject: CN=e84ace45e8c257e69baabe3ddd6296e4768c59b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:5b:cd:41:1f:6b:8b:b4:66:dc:f0:e1:f0:
ff:a8:d0:f4:6b:11:d7:ce:46:a5:a6:21:a2:e4:13:
c7:20:15:b8:99:d2:9f:ae:ae:64:d5:2e:e1:41:ea:
e3:68:6d:b3:67:9c:db:47:e1:42:be:9e:bd:13:53:
91:41:6e:d1:bb:ae:cd:25:ba:2f:46:9f:72:76:57:
b0:c0:dc:80:ec:2a:e1:7c:15:14:a9:30:d5:bc:6f:
f8:83:ca:6e:af:85:30:2d:3e:cd:38:f8:a7:c4:07:
ef:54:db:9d:08:a8:28:53:d7:c1:39:2e:5c:5d:79:
b1:97:19:5c:68:29:76:d5:57:2c:74:a5:28:3d:5c:
c1:d2:33:09:19:1f:4a:b7:12:78:e1:ac:2f:a2:0b:
bf:ef:6e:b3:e4:60:be:c6:d4:d6:8b:4f:5f:39:f8:
7f:1f:a8:77:d4:46:d5:18:2d:3f:b6:ba:b1:9b:07:
31:8f:bb:75:b6:fc:04:cd:75:bf:07:0c:12:e9:15:
d6:21:86:bb:91:2b:8b:f4:76:3b:7e:2d:ec:80:d1:
f9:c1:11:6c:44:6e:49:e8:87:46:d8:15:81:02:67:
f3:51:e8:13:03:d3:3c:3b:49:9b:7f:ef:df:de:62:
a7:30:df:fd:2b:b6:99:74:ed:bc:4f:e6:96:7a:6d:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4A:CE:45:E8:C2:57:E6:9B:AA:BE:3D:DD:62:96:E4:76:8C:59:B4
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f4:0e:59:6f:10:c6:c9:a7:01:10:e7:3c:31:fe:e2:8f:7f:
8c:73:58:7e:e8:92:ee:d6:f5:87:b3:9c:8e:31:d7:94:30:53:
24:e4:35:21:0b:bf:41:a1:08:d7:77:d6:bb:8a:c4:6c:b7:62:
56:2e:36:61:ca:8c:f5:5e:8f:11:a6:62:ca:d1:fd:30:a3:76:
d8:01:13:c7:1d:5f:34:9d:48:d2:d4:68:7f:ac:4e:ab:56:89:
e5:75:db:38:96:77:77:cb:e8:1c:58:c9:ba:22:94:e8:37:1a:
e2:75:88:4f:3b:2c:35:b5:a5:89:40:eb:7f:ac:3b:14:9e:1f:
98:74:fd:40:6c:32:98:43:78:73:9e:b1:3a:70:cc:89:4f:f1:
58:36:97:c0:8b:ca:07:69:51:92:f5:78:3d:fd:5f:0c:e8:91:
27:02:b6:bf:bb:d6:b4:82:68:73:02:23:e3:ab:15:89:8c:a2:
cf:b6:d4:59:17:32:df:86:01:d0:d1:c8:b9:99:60:3a:3a:4e:
a0:69:f1:ce:4f:5d:a7:bd:33:af:78:d4:44:e7:64:57:b3:3e:
be:79:52:2c:2b:fa:52:e8:85:65:df:f2:73:2d:65:ba:7f:4d:
f9:c6:eb:85:bd:02:83:0e:1b:66:55:e9:ee:f0:a5:1d:71:3b:
94:22:e5:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SET8w85YOxnvPZWIHiIiBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZGVkM2VhM2JhNjczYTgwOGNmNWU2YWRjYjUxZWE3ZjMz
ZjQyMDMwHhcNMjYwNzI0MDMwMDMxWhcNMjYwNzI1MDMwMDMxWjAzMTEwLwYDVQQD
EyhlODRhY2U0NWU4YzI1N2U2OWJhYWJlM2RkZDYyOTZlNDc2OGM1OWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG5bzUEfa4u0Ztzw4fD/qND0axHX
zkalpiGi5BPHIBW4mdKfrq5k1S7hQerjaG2zZ5zbR+FCvp69E1ORQW7Ru67NJbov
Rp9ydlewwNyA7CrhfBUUqTDVvG/4g8pur4UwLT7NOPinxAfvVNudCKgoU9fBOS5c
XXmxlxlcaCl21VcsdKUoPVzB0jMJGR9KtxJ44awvogu/726z5GC+xtTWi09fOfh/
H6h31EbVGC0/trqxmwcxj7t1tvwEzXW/BwwS6RXWIYa7kSuL9HY7fi3sgNH5wRFs
RG5J6IdG2BWBAmfzUegTA9M8O0mbf+/f3mKnMN/9K7aZdO28T+aWem2PtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhKzkXowlfmm6q+Pd1iluR2jFm0MB8GA1UdIwQY
MBaAFNze0+o7pnOoCM9eaty1HqfzP0IDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMt
MTU3MzBlMjQ2YmE2LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMtMTU3MzBlMjQ2YmE2
LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/QOWW8Q
xsmnARDnPDH+4o9/jHNYfuiS7tb1h7OcjjHXlDBTJOQ1IQu/QaEI13fWu4rEbLdi
Vi42YcqM9V6PEaZiytH9MKN22AETxx1fNJ1I0tRof6xOq1aJ5XXbOJZ3d8voHFjJ
uiKU6Dca4nWITzssNbWliUDrf6w7FJ4fmHT9QGwymEN4c56xOnDMiU/xWDaXwIvK
B2lRkvV4Pf1fDOiRJwK2v7vWtIJocwIj46sViYyiz7bUWRcy34YB0NHIuZlgOjpO
oGnxzk9dp70zr3jUROdkV7M+vnlSLCv6UuiFZd/ycy1lun9N+cbrhb0Cgw4bZlXp
7vClHXE7lCLlHw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:59:02 2026 by rpki-client