Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
File: 3K8sW-MHpGphaXvKhwvsojTsKkc.mft (raw, json)
Hash identifier: 0OpHdqJW3S9YuwPgNnWt7fhbvRXXYHClp0qRB4/qfaE=
Subject key identifier: E6:E0:3C:19:8A:8C:CD:3B:79:A0:63:7C:2A:AF:4A:10:18:0D:C0:FA
Authority key identifier: DC:AF:2C:5B:E3:07:A4:6A:61:69:7B:CA:87:0B:EC:A2:34:EC:2A:47
Certificate issuer: /CN=dcaf2c5be307a46a61697bca870beca234ec2a47
Certificate serial: 019F8F7F2C17A47EADDF1EF6562973B40784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K8sW-MHpGphaXvKhwvsojTsKkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:43 +0000
Manifest this update: Thu 23 Jul 2026 15:01:43 +0000
Manifest next update: Fri 24 Jul 2026 15:01:43 +0000
Files and hashes: 1: 3K8sW-MHpGphaXvKhwvsojTsKkc.crl (hash: L0C31OPbx5ZcFd5ghkAUCcm1P+iHf+q467gQZFq5fXk=)
2: kOfsiEQyAOFEFp6bNE421gle90w.roa (hash: +TRgEzJtF640HkMV28QrOSBubxXo5DyV0zLHNPpuhXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K8sW-MHpGphaXvKhwvsojTsKkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:2c:17:a4:7e:ad:df:1e:f6:56:29:73:b4:07:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaf2c5be307a46a61697bca870beca234ec2a47
Validity
Not Before: Jul 23 15:01:43 2026 GMT
Not After : Jul 24 15:01:43 2026 GMT
Subject: CN=e6e03c198a8ccd3b79a0637c2aaf4a10180dc0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:1a:72:43:ff:6f:7e:24:77:bf:b7:7c:97:
1e:7e:66:a3:b5:5f:76:66:e7:6a:48:98:b0:60:4b:
f7:f1:8e:a4:8d:33:65:25:c2:b7:8e:d3:21:5f:69:
ce:84:49:da:a9:70:93:29:28:ab:64:19:a3:1e:b0:
f7:90:0f:16:67:68:98:6d:eb:9d:77:cb:a2:92:fa:
75:9f:95:c5:cb:a6:da:34:ac:31:49:31:ea:11:d8:
ff:42:fb:6d:7b:d6:d0:34:b9:51:9f:c8:72:21:b6:
77:f2:71:28:1f:89:85:1b:12:e2:09:71:1b:54:30:
ea:45:96:13:db:97:a9:8f:3c:47:67:ec:4a:a4:4a:
d3:49:56:42:2c:c9:76:f4:60:1e:6c:da:7e:03:5d:
4e:2b:a6:9b:64:26:72:b6:fe:7c:ce:46:00:77:c9:
37:16:55:e3:8c:b7:b0:3b:bd:8e:e9:11:fd:0f:22:
58:ee:b3:9f:bd:17:9f:a9:50:a3:6b:1b:c8:83:c2:
17:37:a0:3e:fc:47:50:09:a8:d0:b4:55:d2:18:7d:
28:7f:7c:88:f4:0f:f5:28:36:cc:f9:ba:b8:a3:cd:
2f:39:ff:ef:82:cc:6b:88:28:db:89:1d:f9:35:9c:
51:69:f3:da:ef:2a:95:fb:63:6c:06:48:b1:59:7f:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E0:3C:19:8A:8C:CD:3B:79:A0:63:7C:2A:AF:4A:10:18:0D:C0:FA
X509v3 Authority Key Identifier:
keyid:DC:AF:2C:5B:E3:07:A4:6A:61:69:7B:CA:87:0B:EC:A2:34:EC:2A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K8sW-MHpGphaXvKhwvsojTsKkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6c:38:b9:d2:62:20:38:2e:05:22:64:ae:8a:71:bb:21:55:
fe:04:ab:58:80:ac:32:81:19:87:cd:ea:f9:ba:d8:d0:33:6e:
7a:ff:f8:49:16:c3:1a:50:62:3b:e7:12:b1:3c:e1:d0:22:6f:
e1:d2:d2:ed:7a:41:c5:21:84:74:12:e0:2d:eb:38:06:1f:10:
14:62:41:09:95:e7:3d:9e:91:4c:46:40:c6:f3:1c:fe:54:a6:
31:de:97:5d:4d:b1:c0:6a:30:65:64:19:85:fc:b6:b1:57:04:
4f:a1:91:04:6c:f3:2d:af:18:4c:f4:b2:df:ef:e4:33:de:06:
11:86:09:29:9f:ea:88:79:75:9e:c1:f4:bb:89:c5:af:8e:82:
30:d5:e6:5a:d7:57:c4:bd:27:11:13:a4:73:69:71:18:b3:fc:
30:1b:19:a6:2a:6f:71:c1:74:de:4b:0e:97:bf:34:a3:d3:0f:
a2:b1:40:96:c6:e6:71:77:f1:6e:07:ba:51:b8:35:8a:92:cf:
9a:19:96:a5:22:ef:de:b5:cb:17:bf:bb:cf:46:7f:99:d4:f5:
d8:79:ad:46:83:75:9b:a8:23:a7:99:46:3f:e2:e2:13:c6:3a:
b6:e8:f5:13:03:2a:9c:58:52:5e:20:75:2f:9c:e9:58:10:34:
e8:b3:9b:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfywXpH6t3x72VilztAeEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWYyYzViZTMwN2E0NmE2MTY5N2JjYTg3MGJlY2EyMzRl
YzJhNDcwHhcNMjYwNzIzMTUwMTQzWhcNMjYwNzI0MTUwMTQzWjAzMTEwLwYDVQQD
EyhlNmUwM2MxOThhOGNjZDNiNzlhMDYzN2MyYWFmNGExMDE4MGRjMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueIackP/b34kd7+3fJcefmajtV92
ZudqSJiwYEv38Y6kjTNlJcK3jtMhX2nOhEnaqXCTKSirZBmjHrD3kA8WZ2iYbeud
d8uikvp1n5XFy6baNKwxSTHqEdj/Qvtte9bQNLlRn8hyIbZ38nEoH4mFGxLiCXEb
VDDqRZYT25epjzxHZ+xKpErTSVZCLMl29GAebNp+A11OK6abZCZytv58zkYAd8k3
FlXjjLewO72O6RH9DyJY7rOfvRefqVCjaxvIg8IXN6A+/EdQCajQtFXSGH0of3yI
9A/1KDbM+bq4o80vOf/vgsxriCjbiR35NZxRafPa7yqV+2NsBkixWX/4GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObgPBmKjM07eaBjfCqvShAYDcD6MB8GA1UdIwQY
MBaAFNyvLFvjB6RqYWl7yocL7KI07CpHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0s4c1ctTUhwR3BoYVh2S2h3dnNvalRzS2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGIt
N2Q4Y2I1M2RjMDg2LzEvM0s4c1ctTUhwR3BoYVh2S2h3dnNvalRzS2tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGItN2Q4Y2I1M2RjMDg2
LzEvM0s4c1ctTUhwR3BoYVh2S2h3dnNvalRzS2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGw4udJi
IDguBSJkropxuyFV/gSrWICsMoEZh83q+brY0DNuev/4SRbDGlBiO+cSsTzh0CJv
4dLS7XpBxSGEdBLgLes4Bh8QFGJBCZXnPZ6RTEZAxvMc/lSmMd6XXU2xwGowZWQZ
hfy2sVcET6GRBGzzLa8YTPSy3+/kM94GEYYJKZ/qiHl1nsH0u4nFr46CMNXmWtdX
xL0nEROkc2lxGLP8MBsZpipvccF03ksOl780o9MPorFAlsbmcXfxbge6Ubg1ipLP
mhmWpSLv3rXLF7+7z0Z/mdT12HmtRoN1m6gjp5lGP+LiE8Y6tuj1EwMqnFhSXiB1
L5zpWBA06LObkg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:18:03 2026 by rpki-client