
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
File: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft (raw, json)
Hash identifier: J0IC3qKP5ig4zBIfJolWjocIG+lu7Bql/5WS3+lJcTg=
Subject key identifier: 16:85:3C:62:C9:F5:D2:C9:6B:3A:43:48:37:1A:84:7B:EF:3B:56:8C
Authority key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
Certificate issuer: /CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Certificate serial: 019F90230FB86FD85A1B986919D815762CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 18:00:44 +0000
Manifest this update: Thu 23 Jul 2026 18:00:44 +0000
Manifest next update: Fri 24 Jul 2026 18:00:44 +0000
Files and hashes: 1: 3WnIK5pGF-1--NMSUgNLB0NnZ1o.roa (hash: +wFNRw8hcoZ6lDMDvj2KA/bLV+BywMnIzYTLMw+xb4I=)
2: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl (hash: aAEpTPMk+yT2kZytA45Vbim1O4cHhtjYMOXsEWR7ODo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:0f:b8:6f:d8:5a:1b:98:69:19:d8:15:76:2c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Validity
Not Before: Jul 23 18:00:44 2026 GMT
Not After : Jul 24 18:00:44 2026 GMT
Subject: CN=16853c62c9f5d2c96b3a4348371a847bef3b568c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:fb:c8:1b:d9:b8:06:02:13:2a:f7:ff:81:
3e:c3:95:0a:97:d9:af:23:b0:e1:c0:f2:19:40:0d:
96:c4:c6:8d:9b:4b:b0:40:db:fb:46:71:74:2e:52:
60:5a:04:00:36:66:73:fc:90:d6:f1:d0:79:5e:f3:
cf:4d:70:37:97:64:23:cb:4c:a4:55:15:44:39:d2:
2d:13:ca:11:33:df:30:c3:c2:27:c9:d9:9c:b2:ac:
a7:7c:63:c3:bf:40:3a:81:c6:a7:ca:7f:82:14:92:
c4:09:db:ec:e2:1c:e4:5f:e2:45:34:5f:63:a9:36:
ca:f3:55:37:de:27:07:0e:21:0c:f1:29:6f:a4:2a:
7d:d0:09:d1:c0:cf:21:68:87:4a:55:25:80:9d:4d:
7d:c2:e2:6a:64:26:24:ab:01:cb:a7:8c:34:50:5f:
6b:55:dc:f5:38:14:c3:75:cb:1f:69:f2:e5:9c:0c:
d7:4e:52:c3:eb:f5:60:5e:ce:2a:0f:3e:32:9b:bb:
21:79:c6:e1:cf:45:7b:5a:b6:9f:28:de:56:8b:e6:
fe:e8:f2:00:30:cf:ce:ad:3f:fb:fd:2d:18:34:74:
03:77:10:8b:f0:bc:2d:a4:f9:15:ae:a5:47:b1:22:
50:8c:d3:1d:8e:f0:36:c8:2f:12:ce:68:01:78:b9:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:85:3C:62:C9:F5:D2:C9:6B:3A:43:48:37:1A:84:7B:EF:3B:56:8C
X509v3 Authority Key Identifier:
keyid:DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8e:6d:a5:e6:07:34:ea:33:83:9d:ec:7a:f8:e6:d1:05:1f:
73:1a:a9:6d:8f:83:07:02:77:99:c0:74:84:6c:8e:73:99:20:
46:9c:fd:a2:ae:b5:40:6a:57:e0:bb:8b:87:00:a2:dd:1d:58:
38:bb:14:4a:c9:fe:9d:3d:25:de:bd:e5:e0:08:4c:6f:d7:24:
26:7f:60:b9:06:88:f9:10:af:b4:dd:69:f0:8f:90:a8:d3:a3:
5a:f0:67:b1:32:96:19:0e:98:dc:7f:2d:5f:35:67:1f:f4:a6:
8a:b7:b7:04:69:96:13:f7:56:79:56:3e:b7:70:b8:9a:54:6d:
c5:99:77:cd:f5:72:8b:99:c0:e6:4a:8d:98:52:f3:00:20:7a:
5b:a9:17:e8:6e:0e:ce:c8:40:42:36:b6:bb:a3:54:4d:1f:b0:
93:e2:73:be:d9:68:99:ee:66:f6:00:e9:2f:12:88:69:05:ee:
c2:7b:4f:f4:d9:36:f8:bf:5a:3d:10:18:79:8f:ad:28:2a:de:
98:48:71:5d:b8:cf:08:2b:50:d1:6a:f4:c2:a4:f5:a5:3e:b4:
ee:2f:08:a8:4c:68:49:6e:31:ef:9f:3e:42:77:82:0b:eb:32:
3d:0d:e8:2e:7e:a6:7a:81:5f:cb:cc:46:c0:f1:a5:a3:a9:93:
d2:7f:ef:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIw+4b9haG5hpGdgVdizsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I3OTZjM2ZjNTU5YmZhZjRiNzY1NTA4OTRjZmY0ZDMw
YjliN2UwHhcNMjYwNzIzMTgwMDQ0WhcNMjYwNzI0MTgwMDQ0WjAzMTEwLwYDVQQD
EygxNjg1M2M2MmM5ZjVkMmM5NmIzYTQzNDgzNzFhODQ3YmVmM2I1NjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGH7yBvZuAYCEyr3/4E+w5UKl9mv
I7DhwPIZQA2WxMaNm0uwQNv7RnF0LlJgWgQANmZz/JDW8dB5XvPPTXA3l2Qjy0yk
VRVEOdItE8oRM98ww8InydmcsqynfGPDv0A6gcanyn+CFJLECdvs4hzkX+JFNF9j
qTbK81U33icHDiEM8SlvpCp90AnRwM8haIdKVSWAnU19wuJqZCYkqwHLp4w0UF9r
Vdz1OBTDdcsfafLlnAzXTlLD6/VgXs4qDz4ym7shecbhz0V7WrafKN5Wi+b+6PIA
MM/OrT/7/S0YNHQDdxCL8LwtpPkVrqVHsSJQjNMdjvA2yC8SzmgBeLkvrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaFPGLJ9dLJazpDSDcahHvvO1aMMB8GA1UdIwQY
MBaAFN87eWw/xVm/r0t2VQiUz/TTC5t+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jN2ZkYzgtY2FlYi00NzQxLWJlNGUt
MjhlNDRmMmVlOTBhLzEvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jN2ZkYzgtY2FlYi00NzQxLWJlNGUtMjhlNDRmMmVlOTBh
LzEvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV45tpeYH
NOozg53sevjm0QUfcxqpbY+DBwJ3mcB0hGyOc5kgRpz9oq61QGpX4LuLhwCi3R1Y
OLsUSsn+nT0l3r3l4AhMb9ckJn9guQaI+RCvtN1p8I+QqNOjWvBnsTKWGQ6Y3H8t
XzVnH/Smire3BGmWE/dWeVY+t3C4mlRtxZl3zfVyi5nA5kqNmFLzACB6W6kX6G4O
zshAQja2u6NUTR+wk+Jzvtlome5m9gDpLxKIaQXuwntP9Nk2+L9aPRAYeY+tKCre
mEhxXbjPCCtQ0Wr0wqT1pT607i8IqExoSW4x758+QneCC+syPQ3oLn6meoFfy8xG
wPGlo6mT0n/vHw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:28:04 2026 by rpki-client