Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
File: 3A4l4XpRaWkjpcApZnh0CarJqjY.mft (raw, json)
Hash identifier: 7PvnyXPz5k+My8Zk9VdKXiDEK9wdS/PnzDR5tfpeuIc=
Subject key identifier: 0F:11:F9:1D:85:C3:2D:D1:94:C5:69:61:4D:CE:73:13:15:0F:05:9A
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 019F9090EC7CC767D6541C58E14C1D120BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
Manifest number: 0D4F
Signing time: Thu 23 Jul 2026 20:00:44 +0000
Manifest this update: Thu 23 Jul 2026 20:00:44 +0000
Manifest next update: Fri 24 Jul 2026 20:00:44 +0000
Files and hashes: 1: 3A4l4XpRaWkjpcApZnh0CarJqjY.crl (hash: NfQj1scl9HCZ6sNmm9WwaZs29UkyIVstT2EGU6kB7Iw=)
2: 8eKxWvb4zfv90IxvIhC6Agnivz8.roa (hash: G16RKdZkVBD70lbGrNUAVc96E/zqs6SATLQUigTHejI=)
3: L7UW-pXnvlYkWrXuWl-BHGTptSA.roa (hash: 1E6LvcCv88x4DMY8tXMsH9q68BaOLR9gOeVWD7ScU5g=)
4: QlpFZfLz1Y4DlrHdUhzjCaGVsGA.roa (hash: gUEpTIDwhLoGCia5nrrt2yolqAa+IzFI1lHWvsOT9xI=)
5: fN8fa7ozPQ5m74ttWUFKBBiIQSc.roa (hash: JResCQGe6T+nLKqGjLFvLBJ3SMA0WiHLKq1Aux/XqUI=)
6: yJQ9nBonMQnEt_O9rr5CmMqvpwA.roa (hash: eo5bnMB5ExtqJKvflsj0G9k/9EeksB8fwhEsz05U4Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:ec:7c:c7:67:d6:54:1c:58:e1:4c:1d:12:0b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: Jul 23 20:00:44 2026 GMT
Not After : Jul 24 20:00:44 2026 GMT
Subject: CN=0f11f91d85c32dd194c569614dce7313150f059a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:4b:8f:7f:ce:1c:d8:4d:68:ef:2c:8d:cf:
60:b5:23:da:eb:89:f8:a4:0d:49:a6:0b:4f:b9:af:
88:f3:45:af:57:0b:99:b7:05:d1:01:0f:18:7e:ef:
6f:85:16:5b:50:01:5c:41:ab:f2:1d:d7:3a:17:80:
a1:76:aa:c1:a2:51:98:2b:45:4a:5f:a5:a8:bc:d7:
99:b0:2e:30:a4:7a:32:b3:3a:27:1b:dd:ad:1e:2b:
7e:c9:3d:37:92:86:b4:48:93:76:1c:b7:e0:db:66:
48:bb:6c:7d:72:ad:c7:59:62:ca:9f:63:2f:4c:ee:
d8:a5:2d:4a:78:d0:ac:5c:b9:99:34:ac:eb:ed:81:
db:eb:8d:5e:51:a7:34:36:a8:1c:f4:d2:eb:55:a6:
54:30:80:aa:10:fd:9a:f9:ce:7d:9f:e4:eb:a2:ff:
3d:41:09:42:92:fd:9b:9f:10:06:d4:8e:7a:35:5b:
af:26:f5:d4:27:82:8d:cb:99:5c:d4:77:ac:0c:8b:
f9:92:ae:a0:97:8c:78:9b:66:29:49:b9:c9:37:25:
a7:40:46:c4:2c:35:2b:06:72:3b:c0:94:9c:c0:b6:
f0:23:1d:57:c9:06:e0:4d:3b:5a:0a:01:79:eb:6e:
e1:06:f3:75:cb:01:60:00:b3:27:95:ae:47:9a:71:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:11:F9:1D:85:C3:2D:D1:94:C5:69:61:4D:CE:73:13:15:0F:05:9A
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e2:83:69:fe:58:34:f1:90:fd:0f:f9:b0:04:54:0d:f6:34:
6c:25:1e:1b:2f:df:12:36:ce:12:d9:11:c6:8d:52:87:42:85:
51:44:28:49:24:33:73:1d:d2:22:4c:81:0b:c8:6f:99:8a:2a:
a1:94:88:4b:f5:bc:50:b2:13:73:e0:94:c9:7c:12:f7:31:94:
07:55:dd:5b:3c:79:e6:e8:f7:d5:dc:96:77:0d:2e:58:f8:b2:
51:d0:d5:c0:7d:de:12:7a:fa:4f:c7:25:77:55:15:8d:bb:f6:
26:0c:02:e3:7b:e1:36:c6:9b:b5:fc:69:f9:b4:d3:f9:73:6e:
ab:a6:12:3b:a1:4f:6e:50:a4:69:46:19:a1:42:ca:cb:08:bb:
aa:f2:87:71:87:6b:f3:d6:d1:50:03:fd:0c:b1:bf:ea:57:e1:
63:fe:6c:d0:e9:a2:68:21:24:b0:50:af:79:6e:25:54:05:aa:
9b:87:03:23:bf:79:9c:3c:53:54:a6:85:7b:03:e8:64:e8:b5:
4c:e0:b4:ee:1b:d8:c3:f0:96:8a:59:71:89:a2:90:ec:e3:fd:
08:5f:77:ae:d4:2e:ac:12:e5:49:d4:f9:0c:26:b3:f9:71:0d:
15:18:34:77:a2:5a:f3:7f:d8:4a:04:50:94:b3:da:a1:fb:f0:
3c:e7:6f:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkOx8x2fWVBxY4UwdEgvJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGUyNWUxN2E1MTY5NjkyM2E1YzAyOTY2Nzg3NDA5YWFj
OWFhMzYwHhcNMjYwNzIzMjAwMDQ0WhcNMjYwNzI0MjAwMDQ0WjAzMTEwLwYDVQQD
EygwZjExZjkxZDg1YzMyZGQxOTRjNTY5NjE0ZGNlNzMxMzE1MGYwNTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJdLj3/OHNhNaO8sjc9gtSPa64n4
pA1JpgtPua+I80WvVwuZtwXRAQ8Yfu9vhRZbUAFcQavyHdc6F4ChdqrBolGYK0VK
X6WovNeZsC4wpHoyszonG92tHit+yT03koa0SJN2HLfg22ZIu2x9cq3HWWLKn2Mv
TO7YpS1KeNCsXLmZNKzr7YHb641eUac0Nqgc9NLrVaZUMICqEP2a+c59n+Trov89
QQlCkv2bnxAG1I56NVuvJvXUJ4KNy5lc1HesDIv5kq6gl4x4m2YpSbnJNyWnQEbE
LDUrBnI7wJScwLbwIx1XyQbgTTtaCgF5627hBvN1ywFgALMnla5HmnFRpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8R+R2Fwy3RlMVpYU3OcxMVDwWaMB8GA1UdIwQY
MBaAFNwOJeF6UWlpI6XAKWZ4dAmqyao2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yY2M0NmMtOGM1MS00MzMwLWI2MjMt
MTgzNWNjOGExZDlkLzEvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8yY2M0NmMtOGM1MS00MzMwLWI2MjMtMTgzNWNjOGExZDlk
LzEvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuKDaf5Y
NPGQ/Q/5sARUDfY0bCUeGy/fEjbOEtkRxo1Sh0KFUUQoSSQzcx3SIkyBC8hvmYoq
oZSIS/W8ULITc+CUyXwS9zGUB1XdWzx55uj31dyWdw0uWPiyUdDVwH3eEnr6T8cl
d1UVjbv2JgwC43vhNsabtfxp+bTT+XNuq6YSO6FPblCkaUYZoULKywi7qvKHcYdr
89bRUAP9DLG/6lfhY/5s0OmiaCEksFCveW4lVAWqm4cDI795nDxTVKaFewPoZOi1
TOC07hvYw/CWillxiaKQ7OP9CF93rtQurBLlSdT5DCaz+XENFRg0d6Ja83/YSgRQ
lLPaofvwPOdv/Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:08 2026 by rpki-client