Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: zhq1+aGe2rpzBOXtrpK5kZ9jVY/heHM825TyxpNohP8=
Subject key identifier: 4B:E9:30:A6:2D:F9:D1:71:3C:56:A5:0D:1A:36:93:FD:01:F7:72:06
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 019F905A19D26473E338FC84D524CC0A3E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 1054
Signing time: Thu 23 Jul 2026 19:00:51 +0000
Manifest this update: Thu 23 Jul 2026 19:00:51 +0000
Manifest next update: Fri 24 Jul 2026 19:00:51 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: xsI6fEUeeH4ck2hDNZpAx2O1Iutd4Dm1P84i3mdee4A=)
2: ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa (hash: lyxkrW/UqVG023E4rkiQmolfszYoshoVE4T/qdnjtKM=)
3: Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa (hash: Dq+bYU+W7cSYjUMeWCs5QEHpiuPHvRD8GOeB0Afw45M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:19:d2:64:73:e3:38:fc:84:d5:24:cc:0a:3e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Jul 23 19:00:51 2026 GMT
Not After : Jul 24 19:00:51 2026 GMT
Subject: CN=4be930a62df9d1713c56a50d1a3693fd01f77206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3d:9c:2e:03:56:69:97:b3:6f:24:0c:7d:d1:
b0:59:ce:0e:9e:f2:8c:0c:d5:f3:db:f2:7e:0d:6f:
cc:07:a4:a5:5d:10:8e:5e:97:c6:f5:1e:23:5c:67:
e1:5d:f4:75:36:7c:3a:18:2b:d3:7f:b2:f9:3c:f1:
de:0e:38:09:31:79:ba:00:d7:ac:77:19:85:93:e9:
b4:fe:87:86:a5:b4:63:eb:6a:72:21:8d:97:73:9e:
24:01:a1:12:ea:f8:0a:19:f7:23:3c:7f:9e:95:86:
6d:b8:ec:84:11:55:8a:77:06:6c:a8:31:cc:db:d7:
2f:66:45:6a:a8:82:6b:97:5a:f5:18:7a:13:5f:18:
14:93:33:73:a8:d3:a9:5b:b5:57:df:36:2e:28:aa:
94:b8:f2:47:bf:34:be:dd:3f:89:4d:95:ae:87:ca:
7c:4d:40:e0:f0:a5:49:dd:49:3f:45:41:b1:3d:32:
af:fc:d2:f5:8f:6d:4c:38:57:3c:7e:0f:97:06:c9:
80:21:ec:a8:fc:32:81:3b:72:52:69:55:77:ad:72:
5b:df:b8:19:a6:c5:be:02:de:68:2c:e8:fe:42:a9:
c7:a2:f0:d4:3d:64:19:c9:cf:59:b3:06:47:3f:a9:
d8:ae:7c:af:90:07:25:bc:b1:c9:e6:65:22:b8:06:
1e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E9:30:A6:2D:F9:D1:71:3C:56:A5:0D:1A:36:93:FD:01:F7:72:06
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ce:91:5d:11:c0:33:54:f1:89:58:50:b8:8b:96:40:6e:ec:
9a:be:cd:42:34:e7:ad:28:8d:39:7f:96:94:28:ca:ef:6b:91:
55:69:5f:ef:02:9f:3b:81:fa:58:73:ac:6a:15:fa:3d:5b:be:
f1:a5:75:bf:56:df:05:79:f1:fa:47:9c:9e:52:d1:6b:1c:a1:
a7:c9:e7:8c:c5:b5:90:0b:3d:c0:13:15:68:6d:60:c1:d8:e0:
74:40:30:1e:14:b0:99:4f:0a:33:58:4c:25:41:8a:dd:af:a2:
91:21:eb:4d:2a:cf:02:a1:3f:6c:4e:b6:ec:29:02:26:79:03:
54:94:f7:8b:da:20:7a:8c:51:70:58:95:17:f9:86:43:7a:62:
16:eb:7e:55:44:e3:11:68:56:20:79:f8:73:bd:c2:88:4e:0c:
e0:8c:8c:a2:b3:a0:54:5f:e4:e2:30:04:7b:f0:62:dd:0b:90:
e0:f6:fa:84:a8:74:2d:0d:b9:6d:a4:5c:e0:50:25:41:70:2c:
11:e5:dd:75:45:6b:88:72:76:23:60:7a:16:9d:fe:98:80:20:
a4:f8:e2:b4:8a:b7:9e:52:97:6c:8c:dd:52:4f:49:3e:fa:66:
32:df:87:6f:2e:93:ee:bb:52:d7:74:11:37:2a:7f:b5:6a:76:
00:13:10:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWhnSZHPjOPyE1STMCj5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZTcyYzhmYWVjYjcwNTJjODQxMjAxYjI1ZjZhMDE4ZTQ3
N2IxYzIwHhcNMjYwNzIzMTkwMDUxWhcNMjYwNzI0MTkwMDUxWjAzMTEwLwYDVQQD
Eyg0YmU5MzBhNjJkZjlkMTcxM2M1NmE1MGQxYTM2OTNmZDAxZjc3MjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT2cLgNWaZezbyQMfdGwWc4OnvKM
DNXz2/J+DW/MB6SlXRCOXpfG9R4jXGfhXfR1Nnw6GCvTf7L5PPHeDjgJMXm6ANes
dxmFk+m0/oeGpbRj62pyIY2Xc54kAaES6vgKGfcjPH+elYZtuOyEEVWKdwZsqDHM
29cvZkVqqIJrl1r1GHoTXxgUkzNzqNOpW7VX3zYuKKqUuPJHvzS+3T+JTZWuh8p8
TUDg8KVJ3Uk/RUGxPTKv/NL1j21MOFc8fg+XBsmAIeyo/DKBO3JSaVV3rXJb37gZ
psW+At5oLOj+QqnHovDUPWQZyc9ZswZHP6nYrnyvkAclvLHJ5mUiuAYe6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvpMKYt+dFxPFalDRo2k/0B93IGMB8GA1UdIwQY
MBaAFN7nLI+uy3BSyEEgGyX2oBjkd7HCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lZjgyOWEtYWNmYy00NDAyLTk1Y2Ut
MzgzZmIyYjk1NGQ5LzEvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lZjgyOWEtYWNmYy00NDAyLTk1Y2UtMzgzZmIyYjk1NGQ5
LzEvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABs6RXRHA
M1TxiVhQuIuWQG7smr7NQjTnrSiNOX+WlCjK72uRVWlf7wKfO4H6WHOsahX6PVu+
8aV1v1bfBXnx+kecnlLRaxyhp8nnjMW1kAs9wBMVaG1gwdjgdEAwHhSwmU8KM1hM
JUGK3a+ikSHrTSrPAqE/bE627CkCJnkDVJT3i9ogeoxRcFiVF/mGQ3piFut+VUTj
EWhWIHn4c73CiE4M4IyMorOgVF/k4jAEe/Bi3QuQ4Pb6hKh0LQ25baRc4FAlQXAs
EeXddUVriHJ2I2B6Fp3+mIAgpPjitIq3nlKXbIzdUk9JPvpmMt+Hby6T7rtS13QR
Nyp/tWp2ABMQ7w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:10:27 2026 by rpki-client