Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier: 7ttUQ9nDc76GcR+ZZpdKujwzbuv7czB1GyXchZ7YMxo=
Subject key identifier: 35:93:8A:FF:77:66:C2:49:79:06:3B:31:17:9D:3C:90:22:C2:69:AF
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial: 019F935B1C6B5160077B9BA41B363D216695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number: 0962
Signing time: Fri 24 Jul 2026 09:00:49 +0000
Manifest this update: Fri 24 Jul 2026 09:00:49 +0000
Manifest next update: Sat 25 Jul 2026 09:00:49 +0000
Files and hashes: 1: LwqXAM6lPGk_PmFvOULH64ObLAs.roa (hash: MrcdOxOshx/gVLtXaalP4jwQbNYdpAAfBt14JuVSsXw=)
2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: bkM0NadWZQFrszRwfITNRCUhX7qLrDLrxpAhcN5Q93c=)
3: s-1hinZK4tY9bZC4k9BOYyXjqxk.roa (hash: qbBIxBxOXTtMEXXkSI4yM3F77zIR/XL9wvzMoK2RSOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:1c:6b:51:60:07:7b:9b:a4:1b:36:3d:21:66:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Validity
Not Before: Jul 24 09:00:49 2026 GMT
Not After : Jul 25 09:00:49 2026 GMT
Subject: CN=35938aff7766c24979063b31179d3c9022c269af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:e4:eb:5d:8b:36:ee:5a:ce:a0:97:b3:39:
d1:cf:23:11:8b:78:67:20:0f:1c:ec:7d:0b:3c:97:
f4:7d:03:9f:10:c0:dd:ee:0e:9e:a9:14:ce:01:ea:
86:04:a4:6e:a7:79:8c:68:f3:24:d3:8f:9d:4b:68:
d5:80:b0:55:f0:6c:b2:a7:90:40:7d:99:ce:16:8c:
c4:2d:c5:01:3e:af:32:4a:6e:56:ca:73:f6:22:32:
93:84:d0:32:33:7c:62:f0:56:51:e0:86:6b:30:51:
7e:50:e1:6e:92:7d:5a:22:e6:00:e1:c7:b9:87:5a:
7b:ee:d4:a2:d0:68:35:53:d8:e7:88:0a:b4:6d:dd:
05:55:02:f0:0c:0e:e1:9c:be:5d:1e:01:43:dc:31:
8a:83:cc:e5:dc:0f:8f:2b:c8:42:1f:ca:f2:13:15:
1f:cc:07:e4:6c:6e:1c:a2:22:76:32:25:3e:36:79:
91:5e:9c:1d:b6:c5:3e:31:57:b1:3f:9f:5c:2e:48:
d7:1a:9f:c1:c2:d3:68:c4:42:7b:98:9d:ca:5c:1c:
bb:a8:27:b8:2b:68:02:e4:79:32:a2:74:66:58:f4:
6f:47:9e:38:ab:ee:e9:3f:4a:5f:ac:94:ef:d8:79:
b7:b9:1a:0a:dc:3c:45:8f:79:af:c8:e3:0f:53:dc:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:93:8A:FF:77:66:C2:49:79:06:3B:31:17:9D:3C:90:22:C2:69:AF
X509v3 Authority Key Identifier:
keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d3:85:3c:40:2f:44:d3:fe:00:14:94:03:3c:9a:2d:fc:2a:
68:0b:79:5c:38:64:79:e2:d1:3e:87:16:30:0a:c6:d2:0a:dd:
87:79:52:71:42:d5:54:56:04:97:12:c9:f3:af:a3:ce:b5:49:
53:88:02:94:b0:ba:a7:eb:8b:65:85:ea:21:5b:6c:d9:8b:82:
d4:12:00:76:51:f5:45:33:18:de:50:d1:e8:ed:10:e7:a4:13:
10:02:4a:44:3a:2a:12:bd:d7:30:7d:7c:29:4e:c7:3b:45:f9:
67:54:cd:ce:07:31:78:06:be:60:d9:c7:ab:bb:cc:a4:84:cb:
f8:26:c0:fe:cc:98:a2:d4:f9:52:41:76:cc:74:14:28:2f:90:
0f:b9:d5:e3:e8:b5:72:bd:3a:d4:87:82:03:e9:5c:b5:d3:1d:
22:63:ab:fe:85:e7:a3:ae:4c:cd:c1:e7:78:3b:76:cb:11:17:
46:69:31:ca:73:64:6e:69:b0:9d:b0:d0:5a:11:ce:74:71:90:
12:98:34:e8:b8:f9:f6:49:5e:a4:ff:0c:4f:6c:4f:5e:7d:1e:
e3:55:47:1b:91:53:d0:de:1e:fe:50:0b:aa:60:5a:38:44:68:
f8:96:fb:d4:ea:39:6b:c2:41:69:72:e8:ce:b1:be:ae:38:3b:
bb:53:6a:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWxxrUWAHe5ukGzY9IWaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZWRjM2E2M2RmMTdiYjRiZjM0NTYwOTU3OTY3ZTU5YThi
M2UzYTEwHhcNMjYwNzI0MDkwMDQ5WhcNMjYwNzI1MDkwMDQ5WjAzMTEwLwYDVQQD
EygzNTkzOGFmZjc3NjZjMjQ5NzkwNjNiMzExNzlkM2M5MDIyYzI2OWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVLk612LNu5azqCXsznRzyMRi3hn
IA8c7H0LPJf0fQOfEMDd7g6eqRTOAeqGBKRup3mMaPMk04+dS2jVgLBV8Gyyp5BA
fZnOFozELcUBPq8ySm5WynP2IjKThNAyM3xi8FZR4IZrMFF+UOFukn1aIuYA4ce5
h1p77tSi0Gg1U9jniAq0bd0FVQLwDA7hnL5dHgFD3DGKg8zl3A+PK8hCH8ryExUf
zAfkbG4coiJ2MiU+NnmRXpwdtsU+MVexP59cLkjXGp/BwtNoxEJ7mJ3KXBy7qCe4
K2gC5HkyonRmWPRvR544q+7pP0pfrJTv2Hm3uRoK3DxFj3mvyOMPU9w1XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWTiv93ZsJJeQY7MRedPJAiwmmvMB8GA1UdIwQY
MBaAFK/tw6Y98Xu0vzRWCVeWflmos+OhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci0zRHBqM3hlN1NfTkZZSlY1Wi1XYWl6NDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84MjRkOGQtYjA0Ni00NmY2LTg2Yjgt
OWI4YWNlNDI4MWYzLzEvci0zRHBqM3hlN1NfTkZZSlY1Wi1XYWl6NDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi84MjRkOGQtYjA0Ni00NmY2LTg2YjgtOWI4YWNlNDI4MWYz
LzEvci0zRHBqM3hlN1NfTkZZSlY1Wi1XYWl6NDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNOFPEAv
RNP+ABSUAzyaLfwqaAt5XDhkeeLRPocWMArG0grdh3lScULVVFYElxLJ86+jzrVJ
U4gClLC6p+uLZYXqIVts2YuC1BIAdlH1RTMY3lDR6O0Q56QTEAJKRDoqEr3XMH18
KU7HO0X5Z1TNzgcxeAa+YNnHq7vMpITL+CbA/syYotT5UkF2zHQUKC+QD7nV4+i1
cr061IeCA+lctdMdImOr/oXno65MzcHneDt2yxEXRmkxynNkbmmwnbDQWhHOdHGQ
Epg06Lj59klepP8MT2xPXn0e41VHG5FT0N4e/lALqmBaOERo+Jb71Oo5a8JBaXLo
zrG+rjg7u1NqaQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:39:55 2026 by rpki-client