Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
File: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft (raw, json)
Hash identifier: qCdk8kQVuXVpYvQ8oShNcwxmP296zZ8/HyYIqMLB2WM=
Subject key identifier: 16:81:5E:69:40:45:13:39:95:98:C0:21:E0:57:4B:BB:A0:81:6F:F8
Authority key identifier: DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
Certificate issuer: /CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Certificate serial: 019F9022F0C14DB8990D600E1E60164FDF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
Manifest number: 0381
Signing time: Thu 23 Jul 2026 18:00:36 +0000
Manifest this update: Thu 23 Jul 2026 18:00:36 +0000
Manifest next update: Fri 24 Jul 2026 18:00:36 +0000
Files and hashes: 1: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl (hash: EILwfa80/hoHmfWptK/iDw1I+hEen1DW3g65tYbS/IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:f0:c1:4d:b8:99:0d:60:0e:1e:60:16:4f:df:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Validity
Not Before: Jul 23 18:00:36 2026 GMT
Not After : Jul 24 18:00:36 2026 GMT
Subject: CN=16815e69404513399598c021e0574bbba0816ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:a8:f9:42:4c:44:1c:22:6b:b7:63:e3:ac:
b5:72:1c:cc:0a:81:a5:2e:47:a6:0b:50:33:11:bc:
f0:74:42:53:17:9f:97:09:5f:57:fc:0f:64:c8:c8:
e3:58:5e:3b:4b:88:4a:d7:21:48:e2:da:46:20:aa:
f3:ba:62:a4:1d:08:86:8b:41:cd:75:9e:4c:52:a9:
30:b4:7f:e2:15:19:43:c0:6d:5b:12:e4:5e:28:5a:
66:3a:ae:f6:11:2e:30:5b:25:12:96:0c:fa:ee:9d:
17:8e:73:e4:ff:c1:75:4e:33:2e:ed:84:87:53:85:
26:5f:03:57:22:58:af:75:ec:6b:4b:6a:6b:df:6e:
98:e5:7f:8e:67:91:29:0f:f6:07:fc:45:88:61:ca:
dc:56:80:42:62:3e:32:ad:33:42:ef:62:36:8c:75:
2a:86:19:d8:74:36:85:d6:f7:ee:6f:2b:09:ce:c4:
45:f6:2c:71:7b:28:54:ad:72:8e:64:7d:b0:44:c6:
b4:40:b2:df:14:eb:ad:b3:4e:4c:86:2f:16:d6:2d:
a3:4d:93:4e:38:c1:85:ef:b4:42:bd:d0:d9:19:81:
41:c3:96:e8:e4:97:3f:60:9a:f3:2d:9a:69:ad:e1:
67:66:0a:2b:c2:5c:2f:5f:f1:c0:dd:29:d5:99:8b:
2c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:81:5E:69:40:45:13:39:95:98:C0:21:E0:57:4B:BB:A0:81:6F:F8
X509v3 Authority Key Identifier:
keyid:DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b0:ab:f4:3b:8c:9b:03:47:00:d5:f1:55:6f:fd:23:ca:20:
bb:37:ab:8c:e4:61:a4:2a:bd:15:0e:ea:6d:70:f0:f9:45:19:
ab:bd:bf:82:0d:11:d4:c0:69:b9:3c:2e:35:18:f0:24:b7:be:
63:8b:fd:d0:06:f9:69:72:46:71:05:b0:73:4a:72:11:77:27:
f8:3f:9f:a4:17:a6:a4:46:23:bb:f5:62:d8:fe:d6:05:9d:62:
39:ea:d3:7a:6f:76:14:f8:92:da:de:6d:08:ed:54:48:58:cb:
c6:a1:e5:76:07:41:74:21:c7:72:4b:99:a1:28:d7:27:4e:6d:
6d:06:25:4b:23:d4:6e:0b:69:58:01:81:7e:ed:84:5e:45:e1:
8e:ae:40:8d:d0:26:af:61:43:f4:50:ad:4f:95:1c:d9:24:be:
91:3f:0d:f9:d8:a6:6e:24:28:2e:b3:59:5d:11:ad:e0:ed:3d:
29:4f:ee:51:5d:eb:4e:43:7d:77:f2:cb:b8:70:f4:7b:5b:ca:
1f:a5:88:c6:d4:95:48:85:e2:e2:84:5c:d5:fe:82:e0:02:8e:
8d:26:4b:47:b0:fe:f7:7e:de:3d:0a:89:3d:da:1e:d2:b7:c6:
4e:ad:2b:31:55:5a:fb:e3:68:89:4e:a6:25:72:dd:e6:6a:e9:
4c:b7:b2:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIvDBTbiZDWAOHmAWT98wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMzg3MzMwM2QyZDZlMjM4YTViZDg1ZWQ1ODY3YjY0MzE1
OGZjMTQwHhcNMjYwNzIzMTgwMDM2WhcNMjYwNzI0MTgwMDM2WjAzMTEwLwYDVQQD
EygxNjgxNWU2OTQwNDUxMzM5OTU5OGMwMjFlMDU3NGJiYmEwODE2ZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOSo+UJMRBwia7dj46y1chzMCoGl
LkemC1AzEbzwdEJTF5+XCV9X/A9kyMjjWF47S4hK1yFI4tpGIKrzumKkHQiGi0HN
dZ5MUqkwtH/iFRlDwG1bEuReKFpmOq72ES4wWyUSlgz67p0XjnPk/8F1TjMu7YSH
U4UmXwNXIlivdexrS2pr326Y5X+OZ5EpD/YH/EWIYcrcVoBCYj4yrTNC72I2jHUq
hhnYdDaF1vfubysJzsRF9ixxeyhUrXKOZH2wRMa0QLLfFOuts05Mhi8W1i2jTZNO
OMGF77RCvdDZGYFBw5bo5Jc/YJrzLZppreFnZgorwlwvX/HA3SnVmYssvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaBXmlARRM5lZjAIeBXS7uggW/4MB8GA1UdIwQY
MBaAFN04czA9LW4jilvYXtWGe2QxWPwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Roek1EMHRiaU9LVzloZTFZWjdaREZZX0JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81ZTI4ZGEtMzJlMS00MGI5LWJiMzAt
ZDNkYjI3N2VjZGZhLzEvM1Roek1EMHRiaU9LVzloZTFZWjdaREZZX0JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC81ZTI4ZGEtMzJlMS00MGI5LWJiMzAtZDNkYjI3N2VjZGZh
LzEvM1Roek1EMHRiaU9LVzloZTFZWjdaREZZX0JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7Cr9DuM
mwNHANXxVW/9I8oguzerjORhpCq9FQ7qbXDw+UUZq72/gg0R1MBpuTwuNRjwJLe+
Y4v90Ab5aXJGcQWwc0pyEXcn+D+fpBempEYju/Vi2P7WBZ1iOerTem92FPiS2t5t
CO1USFjLxqHldgdBdCHHckuZoSjXJ05tbQYlSyPUbgtpWAGBfu2EXkXhjq5AjdAm
r2FD9FCtT5Uc2SS+kT8N+dimbiQoLrNZXRGt4O09KU/uUV3rTkN9d/LLuHD0e1vK
H6WIxtSVSIXi4oRc1f6C4AKOjSZLR7D+937ePQqJPdoe0rfGTq0rMVVa++NoiU6m
JXLd5mrpTLeyUQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:39 2026 by rpki-client