Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: 8cjZvPTZAffUriw7usGHNfWTKq/6FfHdtE1A6pSKqsw=
Subject key identifier: A3:8A:95:C9:C8:A8:6B:42:55:6A:66:0A:0A:2D:97:18:0E:50:EE:A6
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 019F91A4050F2A57D96301E022088EFD27A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 01:01:13 +0000
Manifest this update: Fri 24 Jul 2026 01:01:13 +0000
Manifest next update: Sat 25 Jul 2026 01:01:13 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: uaZqott3DzQmrqD8Gqblft9cQOL6OMCUyhxYqQ9io8A=)
2: 3ostfnsnfixfxEqrfywy9eGNnT0.roa (hash: TMH3qMKKkwZR6QRgNjTjxS5fjcdU4kA+Vz+Hy9Lz73k=)
3: d2YSIWOU5vk9kBcZoNOEBYoB5d8.roa (hash: 7IimrnEh+R6l+Oc9i2fjThrQzcZAJGrkh3OgCSJFbow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:05:0f:2a:57:d9:63:01:e0:22:08:8e:fd:27:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Jul 24 01:01:13 2026 GMT
Not After : Jul 25 01:01:13 2026 GMT
Subject: CN=a38a95c9c8a86b42556a660a0a2d97180e50eea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:b9:d9:3a:3c:95:24:4f:eb:2a:19:f1:25:
82:be:e8:e2:b7:1e:40:d1:37:bd:87:1d:f1:2f:80:
b0:c5:78:44:34:4f:8a:9c:95:39:11:55:02:4a:87:
8d:98:9b:3d:f1:0c:12:0c:fb:77:8a:d1:0e:cf:a9:
42:d4:35:02:df:fc:9d:44:68:36:b9:f4:9d:bc:63:
82:df:ec:44:f5:f2:23:42:99:78:37:86:5d:68:c8:
c2:6e:fa:56:09:41:c3:62:b2:14:10:bd:b9:ff:9c:
9a:22:c3:4a:9f:79:65:78:e7:1d:24:2e:e3:5a:1d:
36:b8:db:90:b1:9c:4a:11:15:01:fe:15:26:50:3d:
2d:98:e2:4e:18:2d:03:ca:11:04:cf:1c:27:51:74:
a3:a9:00:9b:3a:1e:1b:0d:ca:2f:d7:ac:a9:17:d6:
5a:89:a7:45:a5:da:a0:b3:a6:b7:7c:c1:df:c8:b8:
68:06:f0:3f:73:2d:35:9d:5f:4b:aa:4c:1b:23:2e:
4c:b9:cd:79:8f:11:bb:df:a1:8e:ac:e1:35:40:fb:
0c:35:b0:cd:65:dd:fb:ea:37:63:fc:ce:ae:be:1b:
e0:11:dd:80:9d:bf:9a:6a:fc:00:9d:78:6e:3d:32:
4b:43:10:db:75:97:bc:94:eb:8c:3c:55:d0:2e:dc:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8A:95:C9:C8:A8:6B:42:55:6A:66:0A:0A:2D:97:18:0E:50:EE:A6
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1b:99:55:64:a5:af:32:7b:3a:a7:26:bc:a6:cb:81:82:19:
a7:1d:d5:9e:e1:1f:e3:6b:4b:69:39:1e:68:9d:6e:26:fb:5c:
73:a3:5e:3f:e4:f9:0c:0d:92:fc:d3:84:93:e8:56:48:4c:29:
f0:07:68:7e:3c:18:b6:24:b3:c7:3b:38:3f:d3:a8:5d:4e:43:
45:b4:ea:9d:29:61:fd:a1:cd:0c:81:eb:d6:a0:12:a4:6d:c4:
5b:73:27:d7:b5:74:fc:63:3c:d1:f9:fc:2a:9d:a3:24:f9:3f:
5e:92:82:da:56:e8:2a:de:2b:f4:37:56:fc:c9:45:d0:8e:20:
47:c8:72:d8:9a:be:91:79:85:53:76:bc:71:29:e0:53:52:ae:
7b:a4:0c:65:8d:41:68:b7:49:9c:22:2f:ca:a2:89:82:08:8a:
68:f2:a7:87:07:2a:f9:12:2d:88:67:12:c0:75:b4:93:9e:8e:
5b:4a:5f:35:a7:a1:88:15:61:9d:8c:66:9e:de:1c:5e:29:28:
bb:d8:cd:8b:ab:d7:42:fa:bc:4a:4b:c4:a9:33:69:c2:01:ed:
10:17:89:33:87:2b:b0:32:0f:05:21:53:e3:ac:1a:f9:4a:df:
2a:2a:c0:51:0d:a4:7e:76:a8:3b:8a:bc:e0:88:bc:1e:b5:e2:
4d:cf:c0:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RpAUPKlfZYwHgIgiO/SelMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNjNlYjYzMTliYTQ1NGQzOTc2NDU5NDVjZTU0Mzk1NzZm
YWM3NDEwHhcNMjYwNzI0MDEwMTEzWhcNMjYwNzI1MDEwMTEzWjAzMTEwLwYDVQQD
EyhhMzhhOTVjOWM4YTg2YjQyNTU2YTY2MGEwYTJkOTcxODBlNTBlZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuu52To8lSRP6yoZ8SWCvujitx5A
0Te9hx3xL4CwxXhENE+KnJU5EVUCSoeNmJs98QwSDPt3itEOz6lC1DUC3/ydRGg2
ufSdvGOC3+xE9fIjQpl4N4ZdaMjCbvpWCUHDYrIUEL25/5yaIsNKn3lleOcdJC7j
Wh02uNuQsZxKERUB/hUmUD0tmOJOGC0DyhEEzxwnUXSjqQCbOh4bDcov16ypF9Za
iadFpdqgs6a3fMHfyLhoBvA/cy01nV9LqkwbIy5Muc15jxG736GOrOE1QPsMNbDN
Zd376jdj/M6uvhvgEd2Anb+aavwAnXhuPTJLQxDbdZe8lOuMPFXQLtyl+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOKlcnIqGtCVWpmCgotlxgOUO6mMB8GA1UdIwQY
MBaAFN5j62MZukVNOXZFlFzlQ5V2+sdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMt
MWUxOGY1YjQ5MDVkLzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMtMWUxOGY1YjQ5MDVk
LzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxuZVWSl
rzJ7OqcmvKbLgYIZpx3VnuEf42tLaTkeaJ1uJvtcc6NeP+T5DA2S/NOEk+hWSEwp
8AdofjwYtiSzxzs4P9OoXU5DRbTqnSlh/aHNDIHr1qASpG3EW3Mn17V0/GM80fn8
Kp2jJPk/XpKC2lboKt4r9DdW/MlF0I4gR8hy2Jq+kXmFU3a8cSngU1Kue6QMZY1B
aLdJnCIvyqKJggiKaPKnhwcq+RItiGcSwHW0k56OW0pfNaehiBVhnYxmnt4cXiko
u9jNi6vXQvq8SkvEqTNpwgHtEBeJM4crsDIPBSFT46wa+UrfKirAUQ2kfnaoO4q8
4Ii8HrXiTc/Ahw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:46 2026 by rpki-client