Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
File: 3UftWIupBpRXoqiY_HoMuXfR-B4.mft (raw, json)
Hash identifier: n3skmd303Jxks3E6/D+lCNgbJRi3mjSnyzqUSWQfI9I=
Subject key identifier: C4:0A:5B:BA:89:21:2A:A2:00:37:17:C5:A9:33:BC:79:F6:3B:ED:96
Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
Certificate issuer: /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Certificate serial: 019F90C82E91B4341DAAED411E9EEC2D2FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 21:01:05 +0000
Manifest this update: Thu 23 Jul 2026 21:01:05 +0000
Manifest next update: Fri 24 Jul 2026 21:01:05 +0000
Files and hashes: 1: 3UftWIupBpRXoqiY_HoMuXfR-B4.crl (hash: CBoDmG4u6asaEciyidIPpj+9a/U5laqKXx22vEBAF10=)
2: DX5ooE9ZIZJaF02Q9CvGnKIWcNY.roa (hash: wTDsCt307bisN+gK3/IsNzSToPiLxzeSSNZDltvG+zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:2e:91:b4:34:1d:aa:ed:41:1e:9e:ec:2d:2f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Validity
Not Before: Jul 23 21:01:05 2026 GMT
Not After : Jul 24 21:01:05 2026 GMT
Subject: CN=c40a5bba89212aa2003717c5a933bc79f63bed96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a0:29:3e:77:96:4f:6f:fd:5a:05:ac:44:76:
2e:7e:81:eb:c7:25:49:71:25:9a:54:55:ae:d3:cb:
9e:97:68:3a:74:f4:7b:9d:1b:75:17:d6:9a:2a:1b:
83:e9:89:8a:09:dc:bf:46:93:45:c3:48:1a:5d:3e:
b7:33:4f:a6:c2:00:8b:91:83:9c:9b:c9:86:7a:df:
7a:e8:91:f4:93:dc:fe:aa:74:46:6e:9e:2b:e9:c9:
43:f0:a7:b7:c3:b2:5c:00:01:66:44:ef:7e:13:c0:
14:38:6d:de:f9:f1:98:b0:29:09:96:72:a4:e6:19:
99:ba:85:30:cf:6f:b9:6a:d2:6c:a6:32:57:69:8d:
2d:f9:5a:fd:79:ef:a5:77:58:54:77:0f:60:90:93:
37:44:45:8d:b9:0e:00:ab:b9:01:a3:ca:70:6b:7f:
31:af:63:fe:de:4e:4b:dd:95:99:a4:6f:73:77:d4:
31:ef:b4:07:76:04:89:a1:bf:87:56:50:b4:f9:07:
42:58:f3:e3:1e:c0:e4:19:1c:49:df:d5:a2:d5:1d:
82:15:be:ea:3b:3d:c5:f4:ec:66:89:71:5a:07:ce:
9f:0f:f8:2a:d8:00:f8:00:73:99:b0:67:57:08:55:
18:44:1a:c2:4e:cf:94:c3:c0:e3:6c:84:44:63:cb:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0A:5B:BA:89:21:2A:A2:00:37:17:C5:A9:33:BC:79:F6:3B:ED:96
X509v3 Authority Key Identifier:
keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:42:ad:f8:03:f4:2e:11:44:8d:59:9a:00:88:eb:fb:3b:84:
90:5e:f5:53:e1:5e:da:f8:c7:82:63:86:f4:17:3e:03:73:ca:
24:ae:54:dc:dc:50:11:e7:4a:eb:73:2b:e9:36:a2:19:19:14:
32:29:14:47:69:95:f4:60:b8:a7:f9:c2:68:68:f6:35:ab:0f:
02:fa:ac:fa:63:e4:99:ca:14:25:a9:d7:d8:83:d8:19:c5:2c:
e3:32:05:04:48:3a:6b:79:08:d7:91:be:16:05:7e:d9:4f:55:
21:6d:1f:50:27:0b:fb:01:bf:05:4e:1d:88:79:8b:ba:9d:a7:
be:c0:71:63:4c:e8:fa:e5:9e:37:85:90:fd:3d:0f:95:95:b9:
35:5b:3f:57:3d:f2:d9:f3:03:5d:d0:f5:29:39:0e:5d:cd:6e:
39:3a:4e:bc:77:3a:38:65:52:d7:9b:44:84:28:7d:fe:95:cd:
a2:34:8a:27:c5:77:9d:b6:c2:d0:be:1d:72:55:8a:a8:ed:e1:
1f:50:27:43:ac:7e:65:a3:1c:ac:fc:79:22:1b:3d:32:62:58:
97:e8:b4:3c:b4:21:75:e1:47:0d:12:f3:c6:f6:64:f0:cf:99:
6d:62:bb:e0:61:36:3e:f2:c6:f1:80:5f:ea:13:09:8e:b6:d8:
ce:29:46:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QyC6RtDQdqu1BHp7sLS+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDdlZDU4OGJhOTA2OTQ1N2EyYTg5OGZjN2EwY2I5Nzdk
MWY4MWUwHhcNMjYwNzIzMjEwMTA1WhcNMjYwNzI0MjEwMTA1WjAzMTEwLwYDVQQD
EyhjNDBhNWJiYTg5MjEyYWEyMDAzNzE3YzVhOTMzYmM3OWY2M2JlZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26ApPneWT2/9WgWsRHYufoHrxyVJ
cSWaVFWu08uel2g6dPR7nRt1F9aaKhuD6YmKCdy/RpNFw0gaXT63M0+mwgCLkYOc
m8mGet966JH0k9z+qnRGbp4r6clD8Ke3w7JcAAFmRO9+E8AUOG3e+fGYsCkJlnKk
5hmZuoUwz2+5atJspjJXaY0t+Vr9ee+ld1hUdw9gkJM3REWNuQ4Aq7kBo8pwa38x
r2P+3k5L3ZWZpG9zd9Qx77QHdgSJob+HVlC0+QdCWPPjHsDkGRxJ39Wi1R2CFb7q
Oz3F9OxmiXFaB86fD/gq2AD4AHOZsGdXCFUYRBrCTs+Uw8DjbIREY8u/QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQKW7qJISqiADcXxakzvHn2O+2WMB8GA1UdIwQY
MBaAFN1H7ViLqQaUV6KomPx6DLl30fgeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1VmdFdJdXBCcFJYb3FpWV9Ib011WGZSLUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NTgxYjctMzViYy00YmM4LTg1YjMt
ZjQ1OTZlNzc2N2E4LzEvM1VmdFdJdXBCcFJYb3FpWV9Ib011WGZSLUI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80NTgxYjctMzViYy00YmM4LTg1YjMtZjQ1OTZlNzc2N2E4
LzEvM1VmdFdJdXBCcFJYb3FpWV9Ib011WGZSLUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkKt+AP0
LhFEjVmaAIjr+zuEkF71U+Fe2vjHgmOG9Bc+A3PKJK5U3NxQEedK63Mr6TaiGRkU
MikUR2mV9GC4p/nCaGj2NasPAvqs+mPkmcoUJanX2IPYGcUs4zIFBEg6a3kI15G+
FgV+2U9VIW0fUCcL+wG/BU4diHmLup2nvsBxY0zo+uWeN4WQ/T0PlZW5NVs/Vz3y
2fMDXdD1KTkOXc1uOTpOvHc6OGVS15tEhCh9/pXNojSKJ8V3nbbC0L4dclWKqO3h
H1AnQ6x+ZaMcrPx5Ihs9MmJYl+i0PLQhdeFHDRLzxvZk8M+ZbWK74GE2PvLG8YBf
6hMJjrbYzilGgA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:07 2026 by rpki-client