Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
File: 3XF0IQf16FBis-CuZa-kuuZw4Es.mft (raw, json)
Hash identifier: dKTVTvvcJ1XaoDqzO6fGIu7989EXcHLMORUIB6AFpY4=
Subject key identifier: 72:B2:C4:19:73:71:28:33:60:27:60:3D:FB:18:BF:C9:BB:1F:3D:4B
Authority key identifier: DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B
Certificate issuer: /CN=dd71742107f5e85062b3e0ae65afa4bae670e04b
Certificate serial: 019F9059AF5636572636B5B1108E4F2A1493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
Manifest number: 0846
Signing time: Thu 23 Jul 2026 19:00:24 +0000
Manifest this update: Thu 23 Jul 2026 19:00:24 +0000
Manifest next update: Fri 24 Jul 2026 19:00:24 +0000
Files and hashes: 1: 3XF0IQf16FBis-CuZa-kuuZw4Es.crl (hash: F3JlAm2dwskyZOe0SHYkJlzISN17mEzG5f3zBFIfvSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:af:56:36:57:26:36:b5:b1:10:8e:4f:2a:14:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd71742107f5e85062b3e0ae65afa4bae670e04b
Validity
Not Before: Jul 23 19:00:24 2026 GMT
Not After : Jul 24 19:00:24 2026 GMT
Subject: CN=72b2c419737128336027603dfb18bfc9bb1f3d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:21:d5:fc:44:66:e5:cc:b7:c8:e7:ea:02:6a:
2e:b3:b3:f3:a7:30:57:d1:f3:12:a2:c9:c6:80:68:
7f:12:73:34:51:62:ea:35:08:33:c4:b1:4f:a9:36:
f1:9a:b4:9f:76:5c:cc:6a:1a:e5:74:77:96:47:7c:
72:3c:84:d5:f0:18:16:28:c5:8d:9f:c3:4b:71:b2:
45:5b:bf:d7:9b:22:e0:28:94:f9:9a:9b:ac:2a:c1:
cd:5b:1e:1f:11:75:38:4c:ec:65:5f:81:42:db:4d:
c9:d5:99:3c:98:65:81:f6:7a:89:24:8b:78:30:ef:
3e:53:aa:a0:ef:36:79:de:2c:ae:e0:27:21:d6:ad:
f9:fe:82:3a:d7:09:c7:76:24:c1:44:09:0d:c8:6f:
ff:0f:1c:c8:f3:7a:7f:79:10:6b:18:e3:cd:4a:0e:
49:9a:60:75:5c:78:55:a2:71:d3:2c:19:6e:1d:b6:
60:00:95:5b:ad:b6:48:9c:b3:bc:d3:44:dc:75:c7:
ae:c6:49:2e:8e:1b:cd:3d:ee:22:5b:4f:b5:2f:25:
11:ea:cb:bf:d4:15:84:13:ab:c1:82:c6:68:87:31:
eb:19:4a:66:64:57:da:a9:8b:a4:15:5c:85:bb:7e:
87:b4:67:fd:f7:92:71:d4:a6:ac:a3:73:d3:47:6a:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B2:C4:19:73:71:28:33:60:27:60:3D:FB:18:BF:C9:BB:1F:3D:4B
X509v3 Authority Key Identifier:
keyid:DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4f:9a:e0:8e:bc:7a:92:31:d8:ca:f8:26:96:97:d8:86:a9:
a4:4a:00:29:dd:8d:e3:a4:55:e0:7f:f4:65:0d:2f:29:37:0c:
09:ac:82:c3:03:79:94:27:c1:8c:0f:b3:a6:7a:b1:11:36:ce:
2d:79:db:59:11:11:38:6b:61:e4:7b:3f:29:29:97:73:54:a5:
57:c3:3e:5e:51:3b:9b:a2:e5:d5:ba:e4:c7:a2:e6:2d:b7:50:
96:66:3b:b5:95:ad:5d:1a:ee:35:0e:ce:d3:4f:31:e4:82:85:
dc:9d:e8:7c:a9:5a:20:38:26:f1:c6:c1:5a:73:d4:ad:76:f9:
3d:a3:18:28:4a:a0:6e:83:82:0f:fc:75:65:86:8e:54:79:80:
4d:5b:ba:08:b0:09:d7:4a:39:ff:9c:0e:5d:2b:f6:ab:01:81:
e7:73:16:79:66:0c:58:8e:43:20:9e:7c:51:22:eb:06:0f:33:
0a:0b:29:0b:13:1e:d0:f6:5f:87:fd:9a:e4:f8:d9:62:ea:c6:
3a:84:1f:1b:5d:fb:b3:37:9a:f8:35:4b:08:f3:e3:85:93:2f:
54:18:55:2d:ce:5a:86:d4:52:0f:c5:4d:1c:f4:cc:9d:87:38:
2c:13:10:aa:d4:61:2f:82:5a:76:24:05:fb:61:f3:c2:4e:ef:
5b:ef:45:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWa9WNlcmNrWxEI5PKhSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNzE3NDIxMDdmNWU4NTA2MmIzZTBhZTY1YWZhNGJhZTY3
MGUwNGIwHhcNMjYwNzIzMTkwMDI0WhcNMjYwNzI0MTkwMDI0WjAzMTEwLwYDVQQD
Eyg3MmIyYzQxOTczNzEyODMzNjAyNzYwM2RmYjE4YmZjOWJiMWYzZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SHV/ERm5cy3yOfqAmous7PzpzBX
0fMSosnGgGh/EnM0UWLqNQgzxLFPqTbxmrSfdlzMahrldHeWR3xyPITV8BgWKMWN
n8NLcbJFW7/XmyLgKJT5mpusKsHNWx4fEXU4TOxlX4FC203J1Zk8mGWB9nqJJIt4
MO8+U6qg7zZ53iyu4Cch1q35/oI61wnHdiTBRAkNyG//DxzI83p/eRBrGOPNSg5J
mmB1XHhVonHTLBluHbZgAJVbrbZInLO800TcdceuxkkujhvNPe4iW0+1LyUR6su/
1BWEE6vBgsZohzHrGUpmZFfaqYukFVyFu36HtGf995Jx1Kaso3PTR2rBwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKyxBlzcSgzYCdgPfsYv8m7Hz1LMB8GA1UdIwQY
MBaAFN1xdCEH9ehQYrPgrmWvpLrmcOBLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1hGMElRZjE2RkJpcy1DdVphLWt1dVp3NEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZGU0YTktNjU4Yy00MDZiLThlZTct
YTc3MDZiYTMwODg5LzEvM1hGMElRZjE2RkJpcy1DdVphLWt1dVp3NEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yZGU0YTktNjU4Yy00MDZiLThlZTctYTc3MDZiYTMwODg5
LzEvM1hGMElRZjE2RkJpcy1DdVphLWt1dVp3NEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgk+a4I68
epIx2Mr4JpaX2IappEoAKd2N46RV4H/0ZQ0vKTcMCayCwwN5lCfBjA+zpnqxETbO
LXnbWREROGth5Hs/KSmXc1SlV8M+XlE7m6Ll1brkx6LmLbdQlmY7tZWtXRruNQ7O
008x5IKF3J3ofKlaIDgm8cbBWnPUrXb5PaMYKEqgboOCD/x1ZYaOVHmATVu6CLAJ
10o5/5wOXSv2qwGB53MWeWYMWI5DIJ58USLrBg8zCgspCxMe0PZfh/2a5PjZYurG
OoQfG137szea+DVLCPPjhZMvVBhVLc5ahtRSD8VNHPTMnYc4LBMQqtRhL4JadiQF
+2Hzwk7vW+9F9g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:44 2026 by rpki-client