Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
File: 3-4r9D8hqBxJLG5qn8bwdNLwohc.mft (raw, json)
Hash identifier: j9R1fbp6QWDcpvMdpsnogtAZaHgq+a49WWKE/2JGQPg=
Subject key identifier: 94:3A:C7:A8:97:7B:02:46:BD:30:6E:A7:4E:98:77:FB:48:ED:7A:DC
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 019F916D8EBFFD6CC46A1B3469DC13A83E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
Manifest number: 19D4
Signing time: Fri 24 Jul 2026 00:01:43 +0000
Manifest this update: Fri 24 Jul 2026 00:01:43 +0000
Manifest next update: Sat 25 Jul 2026 00:01:43 +0000
Files and hashes: 1: 1fQajHTJp0S8KUunDd6YeyFtENM.roa (hash: mmAzmTwR/ELzJWO/mTGxkNnXnKiWntSSUF9kf4/Kzb4=)
2: 3-4r9D8hqBxJLG5qn8bwdNLwohc.crl (hash: BMlu9p4BjBnEzhVzuHyc7TaKb8rcXpdlWQcqQkBZNLc=)
3: 6I-aggcE89s528aMt_8CuZqJ61A.roa (hash: 1l0d6AnGSzNrEZie8Z3fZ9Fg7c3oqYcQ4vM6hMLN2Xk=)
4: CBBkKrCM4butKlVI-TgiHj5vk8E.roa (hash: cDORwelpwOEhZ+BpgLvqfOTY9HRVdT1MuxXVpxSB1Go=)
5: XBx3ZjkQBmOob1C1AQifpzrj3Es.roa (hash: toUyH2dFBi0jUqBudUbZQlU2ok2/b2pqbfdKdGPRAog=)
6: qEbucLDWMTkfg6bkJMZgAcq8qds.roa (hash: 9DUJ64ns1rvO2poC78wscUxtmWUKgp0h7BVxTPhQow4=)
7: rrxhY0T34NFm8dBURFOGg9BvJjw.roa (hash: CAUMQZvZz6QKlQgRUZEx4oRHdyyDBXGnUQ6HYMNXgDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:8e:bf:fd:6c:c4:6a:1b:34:69:dc:13:a8:3e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Jul 24 00:01:43 2026 GMT
Not After : Jul 25 00:01:43 2026 GMT
Subject: CN=943ac7a8977b0246bd306ea74e9877fb48ed7adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8f:c8:41:60:ed:13:e6:11:46:f5:17:48:b8:
8c:83:06:f2:82:97:f7:e4:52:90:fd:3b:0a:72:9c:
cf:fe:0d:bb:2c:0c:fa:76:8b:a6:6a:9f:47:70:80:
e5:a8:b9:b1:0a:a4:f2:49:58:b6:95:9f:21:10:6d:
68:a7:d2:dd:31:01:f4:29:da:ac:95:54:d3:8c:24:
81:58:3c:3a:65:99:54:28:bc:8a:61:46:f0:f7:a6:
0f:2c:0d:51:f7:58:2a:fc:b7:69:a5:5e:e9:09:d9:
f8:4d:ea:15:ac:48:41:e3:af:1f:72:ec:f5:3f:ed:
c9:6e:45:6e:da:e1:b0:4f:5d:57:04:88:28:05:0c:
60:94:34:00:ca:fd:ae:49:a7:ae:11:c2:20:05:a5:
b2:af:48:78:30:72:90:29:da:36:ff:a9:98:61:ff:
ac:1e:d4:1a:6c:86:46:32:25:7a:38:bf:57:1f:3e:
0b:ee:36:ef:19:0b:aa:ac:88:00:11:36:4c:c7:40:
6f:8e:01:1c:0b:f7:3f:91:55:e2:de:3e:b3:e1:47:
4e:5b:55:22:9a:53:11:3a:e3:23:68:e8:9d:eb:79:
8c:83:c7:a2:49:70:15:80:03:31:86:4f:18:03:9f:
00:99:ec:db:53:e3:1c:21:53:ef:63:39:e9:3e:4a:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3A:C7:A8:97:7B:02:46:BD:30:6E:A7:4E:98:77:FB:48:ED:7A:DC
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f2:68:3e:96:8d:2e:4c:3f:73:70:63:ef:c9:e2:b7:fd:b5:
de:59:61:36:62:e2:66:b2:3f:5b:e9:04:a8:ee:da:65:b4:67:
01:23:18:00:ed:e2:04:31:61:1d:a5:30:42:32:60:f6:27:a1:
80:a4:38:41:3f:69:a6:78:0b:5a:a2:5a:cb:90:77:0c:50:76:
ab:bc:6d:48:78:42:9a:bc:37:c0:8e:b6:b2:05:26:00:c1:04:
3c:d1:d6:74:66:5c:e7:3b:90:c7:65:bc:8a:43:9a:44:fa:ac:
d6:65:8c:47:44:31:1e:e1:d8:c8:ea:69:a5:d8:5b:ff:91:02:
0a:29:51:8b:29:91:ac:08:c1:d5:96:14:5d:61:f8:ac:8a:d6:
80:31:69:7a:f8:f4:3a:7a:68:1a:9a:09:82:ce:65:33:8c:10:
2b:19:ca:6d:f6:b2:3f:e0:cb:13:63:7a:e5:ff:1d:19:eb:68:
6c:ac:c8:11:1a:c5:b9:aa:a8:71:ca:ba:f4:be:ee:67:72:49:
c2:a7:9f:90:ff:4b:73:ce:74:c2:45:70:3b:8e:70:a4:d5:97:
0b:f0:7a:52:4d:31:38:a1:bd:f2:82:00:95:dc:17:59:a1:3e:
42:d2:5c:07:3c:d9:57:e6:5c:03:75:c6:23:3f:0c:9b:92:ed:
0d:d0:86:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbY6//WzEahs0adwTqD4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZWUyYmY0M2YyMWE4MWM0OTJjNmU2YTlmYzZmMDc0ZDJm
MGEyMTcwHhcNMjYwNzI0MDAwMTQzWhcNMjYwNzI1MDAwMTQzWjAzMTEwLwYDVQQD
Eyg5NDNhYzdhODk3N2IwMjQ2YmQzMDZlYTc0ZTk4NzdmYjQ4ZWQ3YWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY/IQWDtE+YRRvUXSLiMgwbygpf3
5FKQ/TsKcpzP/g27LAz6doumap9HcIDlqLmxCqTySVi2lZ8hEG1op9LdMQH0Kdqs
lVTTjCSBWDw6ZZlUKLyKYUbw96YPLA1R91gq/LdppV7pCdn4TeoVrEhB468fcuz1
P+3JbkVu2uGwT11XBIgoBQxglDQAyv2uSaeuEcIgBaWyr0h4MHKQKdo2/6mYYf+s
HtQabIZGMiV6OL9XHz4L7jbvGQuqrIgAETZMx0BvjgEcC/c/kVXi3j6z4UdOW1Ui
mlMROuMjaOid63mMg8eiSXAVgAMxhk8YA58AmezbU+McIVPvYznpPkrqNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQ6x6iXewJGvTBup06Yd/tI7XrcMB8GA1UdIwQY
MBaAFN/uK/Q/IagcSSxuap/G8HTS8KIXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zYjNiZTAtNTRhNy00MTBmLTlkMTIt
MjhkNzhlYjlmMmRjLzEvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zYjNiZTAtNTRhNy00MTBmLTlkMTItMjhkNzhlYjlmMmRj
LzEvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/JoPpaN
Lkw/c3Bj78nit/213llhNmLiZrI/W+kEqO7aZbRnASMYAO3iBDFhHaUwQjJg9ieh
gKQ4QT9ppngLWqJay5B3DFB2q7xtSHhCmrw3wI62sgUmAMEEPNHWdGZc5zuQx2W8
ikOaRPqs1mWMR0QxHuHYyOpppdhb/5ECCilRiymRrAjB1ZYUXWH4rIrWgDFpevj0
OnpoGpoJgs5lM4wQKxnKbfayP+DLE2N65f8dGetobKzIERrFuaqoccq69L7uZ3JJ
wqefkP9Lc850wkVwO45wpNWXC/B6Uk0xOKG98oIAldwXWaE+QtJcBzzZV+ZcA3XG
Iz8Mm5LtDdCGLQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:23:32 2026 by rpki-client