Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
File: 3ozUdpwybYRex1OmcNo6yptp7hU.mft (raw, json)
Hash identifier: 47uLh6EgG+GdHsmcOvxdREV4Vy5/lOpXiTSCX4vDWCU=
Subject key identifier: E3:F0:31:54:EF:ED:3A:FF:6C:D3:E3:F5:31:AF:0A:FA:BE:39:76:8B
Authority key identifier: DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
Certificate issuer: /CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Certificate serial: 019F905A3B04A4CCF88CE00BDACBC743D83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
Manifest number: 0422
Signing time: Thu 23 Jul 2026 19:01:00 +0000
Manifest this update: Thu 23 Jul 2026 19:01:00 +0000
Manifest next update: Fri 24 Jul 2026 19:01:00 +0000
Files and hashes: 1: 3ozUdpwybYRex1OmcNo6yptp7hU.crl (hash: NFxat2bHP8fiN7xHz4lfskkAflN1ckfH5ks+lZbec+g=)
2: BNslYYnyJbQUX-hm0CSR2lkEI-c.roa (hash: ccskpB9Iw7RlPpaSvm887XUkgOImLelHDmM6zJHbDaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:3b:04:a4:cc:f8:8c:e0:0b:da:cb:c7:43:d8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Validity
Not Before: Jul 23 19:01:00 2026 GMT
Not After : Jul 24 19:01:00 2026 GMT
Subject: CN=e3f03154efed3aff6cd3e3f531af0afabe39768b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:1d:4f:dd:7c:15:63:c1:23:ef:ec:66:8c:
12:d3:f9:17:20:e8:c3:86:be:eb:bc:42:02:a6:cf:
15:1a:fe:ac:a2:4d:0c:0f:b9:3d:93:ed:d5:45:51:
9a:40:ff:4d:ad:5e:39:cd:ee:96:5a:e4:1a:67:8f:
60:be:a7:f0:54:fa:0f:55:05:23:29:d6:86:bd:f6:
c7:61:88:95:85:2f:1f:71:18:80:73:46:9b:c0:0b:
2e:f3:21:32:57:09:8a:b8:c4:c4:8d:cb:d3:a8:8a:
96:20:1c:e6:0d:d0:26:1d:59:e0:6d:1c:d3:8d:7c:
c0:2e:e9:cd:b7:c6:6c:78:59:9d:2c:dc:72:b7:aa:
60:80:d3:94:18:a9:c3:82:78:10:59:02:70:ec:ca:
9c:9d:2e:34:46:65:62:71:96:04:ad:dc:7c:12:6a:
89:cd:2a:dd:1d:fd:83:8c:5b:b3:cc:cb:d4:d3:e5:
7e:a3:95:9c:89:95:40:46:78:9e:a1:92:30:bf:af:
ac:a4:38:28:34:64:b9:88:26:c6:b3:33:31:72:3c:
a2:ff:65:24:5f:1d:9e:73:71:b0:a4:ca:3a:31:2e:
af:a2:6c:ff:53:b1:d5:e7:20:5e:df:e8:c1:4c:83:
d8:4d:88:cc:09:3b:8b:fe:1e:9b:92:06:61:07:9f:
c3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F0:31:54:EF:ED:3A:FF:6C:D3:E3:F5:31:AF:0A:FA:BE:39:76:8B
X509v3 Authority Key Identifier:
keyid:DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:32:f1:10:d6:f9:4a:95:9a:bd:d5:32:42:85:f8:d3:e5:6d:
b8:3e:39:c7:a9:dc:ef:eb:29:55:56:34:1a:c5:af:13:8a:c1:
c6:92:7c:84:75:77:07:b5:67:56:73:73:77:41:22:21:e6:26:
7a:ca:8e:bb:f7:50:b7:24:1d:93:ce:41:b7:6a:95:a7:9e:54:
2e:8c:68:8f:57:bc:a7:09:50:19:bd:74:ae:10:34:5b:10:87:
dc:da:bc:c5:02:e9:91:4f:01:bf:86:54:e8:c8:f5:81:26:bf:
f3:52:45:b0:6c:1f:42:27:3c:a2:a3:62:78:13:8e:df:e7:ed:
3c:e4:ba:09:89:65:6f:7a:34:71:87:46:0c:76:21:65:a7:fa:
bc:e1:0e:59:a3:60:1e:d3:ce:5e:a9:87:11:82:1a:8f:fa:ae:
2e:79:4b:ff:95:c5:75:d9:f1:09:a1:2d:bf:ff:5c:c1:5b:71:
82:d4:a5:90:5d:aa:de:fc:e5:6c:21:d3:c6:e1:d0:5f:03:ec:
5e:1e:ca:3c:86:4a:63:f2:ce:fa:93:a3:03:12:bb:4a:33:e2:
c8:a7:1b:ad:df:30:8f:2d:ee:5c:a8:8f:04:83:b9:88:36:b2:
54:55:85:25:b1:3f:8c:e0:1a:bd:fb:9e:9d:c2:ca:87:29:93:
a0:22:41:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWjsEpMz4jOAL2svHQ9g/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOGNkNDc2OWMzMjZkODQ1ZWM3NTNhNjcwZGEzYWNhOWI2
OWVlMTUwHhcNMjYwNzIzMTkwMTAwWhcNMjYwNzI0MTkwMTAwWjAzMTEwLwYDVQQD
EyhlM2YwMzE1NGVmZWQzYWZmNmNkM2UzZjUzMWFmMGFmYWJlMzk3NjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/IdT918FWPBI+/sZowS0/kXIOjD
hr7rvEICps8VGv6sok0MD7k9k+3VRVGaQP9NrV45ze6WWuQaZ49gvqfwVPoPVQUj
KdaGvfbHYYiVhS8fcRiAc0abwAsu8yEyVwmKuMTEjcvTqIqWIBzmDdAmHVngbRzT
jXzALunNt8ZseFmdLNxyt6pggNOUGKnDgngQWQJw7MqcnS40RmVicZYErdx8EmqJ
zSrdHf2DjFuzzMvU0+V+o5WciZVARnieoZIwv6+spDgoNGS5iCbGszMxcjyi/2Uk
Xx2ec3GwpMo6MS6vomz/U7HV5yBe3+jBTIPYTYjMCTuL/h6bkgZhB5/DdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPwMVTv7Tr/bNPj9TGvCvq+OXaLMB8GA1UdIwQY
MBaAFN6M1HacMm2EXsdTpnDaOsqbae4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM296VWRwd3liWVJleDFPbWNObzZ5cHRwN2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85ZDA5YWYtMDE3YS00YWMxLTk4NzIt
NjE2NmZmNmU2NjVjLzEvM296VWRwd3liWVJleDFPbWNObzZ5cHRwN2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy85ZDA5YWYtMDE3YS00YWMxLTk4NzItNjE2NmZmNmU2NjVj
LzEvM296VWRwd3liWVJleDFPbWNObzZ5cHRwN2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDLxENb5
SpWavdUyQoX40+VtuD45x6nc7+spVVY0GsWvE4rBxpJ8hHV3B7VnVnNzd0EiIeYm
esqOu/dQtyQdk85Bt2qVp55ULoxoj1e8pwlQGb10rhA0WxCH3Nq8xQLpkU8Bv4ZU
6Mj1gSa/81JFsGwfQic8oqNieBOO3+ftPOS6CYllb3o0cYdGDHYhZaf6vOEOWaNg
HtPOXqmHEYIaj/quLnlL/5XFddnxCaEtv/9cwVtxgtSlkF2q3vzlbCHTxuHQXwPs
Xh7KPIZKY/LO+pOjAxK7SjPiyKcbrd8wjy3uXKiPBIO5iDayVFWFJbE/jOAavfue
ncLKhymToCJBEQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:49:21 2026 by rpki-client