Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
File: 3y3kqfK8Uj318Kf15DJJikLFX3A.mft (raw, json)
Hash identifier: 8sW8ZdAtYYw+Xzo1OwutaSERNYfRMK7LBtrUGoP3/NY=
Subject key identifier: EA:34:68:BA:CB:58:F8:50:93:3E:2D:61:20:9E:9C:C7:4B:FA:F8:34
Authority key identifier: DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
Certificate issuer: /CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Certificate serial: 019F90232D0A4AEB76ED7C9BB0EBF089A1AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
Manifest number: 011C
Signing time: Thu 23 Jul 2026 18:00:52 +0000
Manifest this update: Thu 23 Jul 2026 18:00:52 +0000
Manifest next update: Fri 24 Jul 2026 18:00:52 +0000
Files and hashes: 1: 3y3kqfK8Uj318Kf15DJJikLFX3A.crl (hash: iD9Agl4Hkcqn4pp+1RQr1pA+/LuWSFXSJabQTAy5DXM=)
2: 8XebNTiumaUWcLbgsrPRqEK7yJk.roa (hash: wIkMYGUwRkloiGV8zcV817/8WXtvc8qz+eDzExEQl48=)
3: SU9_tB5lwfHPL_4Kt4ROwFHlUMI.asa (hash: wN65KwAJllI0kxcg5tgjkk0Y4QH9uf/hvRTzQ2pTovk=)
4: xtsoV3YrVhm4MKDjfu3IvjG7q1g.roa (hash: qMRfu2o1bzSJ1p0UvgBKjKi65ckvS8nI12aCVQ8a6vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:2d:0a:4a:eb:76:ed:7c:9b:b0:eb:f0:89:a1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Validity
Not Before: Jul 23 18:00:52 2026 GMT
Not After : Jul 24 18:00:52 2026 GMT
Subject: CN=ea3468bacb58f850933e2d61209e9cc74bfaf834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:30:da:9c:31:b7:39:2a:6f:39:21:9e:f0:
f0:f0:78:53:52:97:bf:b8:f0:fa:5f:3f:ed:78:1d:
6d:71:b7:69:4a:1f:c1:7d:88:1e:7f:3b:e4:69:5f:
d7:ab:2f:4e:5e:2b:9f:21:3e:a5:11:6f:8d:9e:3a:
5a:c1:cd:9c:6c:1f:48:f2:ed:b6:06:2a:0a:58:53:
50:25:46:5c:39:6a:e3:84:09:7d:e5:c9:15:6e:1d:
a1:33:6d:97:9c:4b:dd:c3:82:98:6a:c6:21:34:90:
a3:fc:bc:96:f9:86:6c:78:44:1c:ae:00:ad:24:6c:
f0:0f:90:cd:06:3d:8a:0f:08:8f:37:e3:2a:38:91:
db:67:bb:6c:c3:89:1f:0f:50:bf:d6:66:f0:8f:a5:
4b:11:46:17:3a:00:12:28:9a:0a:2b:a1:b7:e0:fc:
0e:af:8d:4e:e3:83:f5:e4:63:8d:2b:5a:42:d7:2b:
18:1f:8a:da:57:19:14:07:e0:fc:4f:fb:0e:b0:65:
13:09:6f:dc:83:7e:fc:b7:a8:97:87:5e:61:a8:d9:
9f:00:63:67:97:68:92:05:74:d2:18:5b:db:d2:2b:
88:0a:3f:24:d5:95:f5:9b:ad:39:f4:33:2f:97:90:
b8:84:0f:d7:f6:73:72:17:07:6a:c0:74:6f:8b:a9:
1f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:34:68:BA:CB:58:F8:50:93:3E:2D:61:20:9E:9C:C7:4B:FA:F8:34
X509v3 Authority Key Identifier:
keyid:DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8a:0b:59:42:5b:63:62:a3:46:6f:0b:b6:1c:99:42:ec:ae:
39:dc:66:2c:5b:6b:2c:ef:73:2e:7b:c8:1a:60:53:9d:8b:a8:
d5:38:fd:45:55:33:7b:68:9d:85:d3:6f:0f:81:35:67:a4:ab:
26:4a:dc:a0:5c:6f:af:d5:89:1a:e6:44:bf:5b:50:3d:a0:8f:
43:4a:a7:ee:d2:b9:59:f0:f4:52:c8:50:01:e6:d8:24:f8:d3:
11:7b:2b:6a:f5:da:04:9c:e0:1c:3a:a7:cf:19:82:c1:89:63:
d7:5c:80:fb:7f:c7:b5:3d:40:db:ec:49:21:d1:ed:2b:fb:55:
6d:ab:e4:dc:ba:e1:7c:a1:01:35:99:21:88:b8:8a:52:6f:4f:
2f:de:16:25:bc:cf:cf:00:5f:e1:a7:42:f4:cc:ce:00:e6:12:
2f:d7:7e:f4:2b:12:77:2b:71:58:c7:bc:1e:6a:23:68:dc:f7:
4a:b3:75:0c:cf:2c:4c:54:b4:11:7f:44:a5:5c:82:ee:17:fe:
59:54:d4:f9:87:05:40:45:61:03:a7:c5:47:6d:61:98:fd:f4:
ed:a9:c7:af:45:ee:f4:9f:c3:de:ac:9e:0a:56:17:e3:c3:99:
f5:8d:e4:54:76:8b:ac:86:aa:ce:58:4b:01:52:e1:e1:f7:c8:
44:8c:22:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIy0KSut27XybsOvwiaGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMmRlNGE5ZjJiYzUyM2RmNWYwYTdmNWU0MzI0OThhNDJj
NTVmNzAwHhcNMjYwNzIzMTgwMDUyWhcNMjYwNzI0MTgwMDUyWjAzMTEwLwYDVQQD
EyhlYTM0NjhiYWNiNThmODUwOTMzZTJkNjEyMDllOWNjNzRiZmFmODM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9kw2pwxtzkqbzkhnvDw8HhTUpe/
uPD6Xz/teB1tcbdpSh/BfYgefzvkaV/Xqy9OXiufIT6lEW+Nnjpawc2cbB9I8u22
BioKWFNQJUZcOWrjhAl95ckVbh2hM22XnEvdw4KYasYhNJCj/LyW+YZseEQcrgCt
JGzwD5DNBj2KDwiPN+MqOJHbZ7tsw4kfD1C/1mbwj6VLEUYXOgASKJoKK6G34PwO
r41O44P15GONK1pC1ysYH4raVxkUB+D8T/sOsGUTCW/cg378t6iXh15hqNmfAGNn
l2iSBXTSGFvb0iuICj8k1ZX1m6059DMvl5C4hA/X9nNyFwdqwHRvi6kf9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOo0aLrLWPhQkz4tYSCenMdL+vg0MB8GA1UdIwQY
MBaAFN8t5KnyvFI99fCn9eQySYpCxV9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3kza3FmSzhVajMxOEtmMTVESkppa0xGWDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hZjM2NjctZTM5My00Y2Y4LTk0YmIt
ZWNjODA2Nzc1MDMxLzEvM3kza3FmSzhVajMxOEtmMTVESkppa0xGWDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hZjM2NjctZTM5My00Y2Y4LTk0YmItZWNjODA2Nzc1MDMx
LzEvM3kza3FmSzhVajMxOEtmMTVESkppa0xGWDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4oLWUJb
Y2KjRm8LthyZQuyuOdxmLFtrLO9zLnvIGmBTnYuo1Tj9RVUze2idhdNvD4E1Z6Sr
JkrcoFxvr9WJGuZEv1tQPaCPQ0qn7tK5WfD0UshQAebYJPjTEXsravXaBJzgHDqn
zxmCwYlj11yA+3/HtT1A2+xJIdHtK/tVbavk3LrhfKEBNZkhiLiKUm9PL94WJbzP
zwBf4adC9MzOAOYSL9d+9CsSdytxWMe8HmojaNz3SrN1DM8sTFS0EX9EpVyC7hf+
WVTU+YcFQEVhA6fFR21hmP307anHr0Xu9J/D3qyeClYX48OZ9Y3kVHaLrIaqzlhL
AVLh4ffIRIwiDQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:31 2026 by rpki-client