Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier: 9R7ZdEZ6lIP0Dqb6eBE8DqFvF7Nqpr9B9zkZl+qtH+g=
Subject key identifier: AC:F1:26:DA:E8:4B:68:1B:18:DF:79:32:97:7E:09:DB:AA:AB:EE:A4
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial: 019F91A441208EE480C9805E17474298C8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 01:01:28 +0000
Manifest this update: Fri 24 Jul 2026 01:01:28 +0000
Manifest next update: Sat 25 Jul 2026 01:01:28 +0000
Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: O9/JmMll1F72xo9sFYdKm1R3MbiHbARsiW6vsls9Pbw=)
2: Wdloadg_jaSIWNimJpIr6kOshxY.roa (hash: xgmHkwMMNOck0R3y8/daNlcMrAkpPhMbZk/5vahLUtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:41:20:8e:e4:80:c9:80:5e:17:47:42:98:c8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Validity
Not Before: Jul 24 01:01:28 2026 GMT
Not After : Jul 25 01:01:28 2026 GMT
Subject: CN=acf126dae84b681b18df7932977e09dbaaabeea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7b:54:d2:45:c2:b2:da:a6:e9:b0:f4:c2:a0:
89:80:f8:87:c9:19:9c:fb:c1:20:90:e1:7f:7d:15:
13:6f:16:ae:e4:0c:77:20:77:c3:67:2c:36:8c:33:
2b:37:34:0d:97:e0:56:16:d1:82:72:ab:63:e1:86:
32:5d:67:12:25:0f:5f:f6:29:59:05:c0:5d:2c:5b:
fb:95:51:4d:81:15:4b:16:0f:9d:32:c3:68:07:14:
58:1c:69:79:09:be:3c:e3:65:37:77:21:93:d9:01:
97:94:4b:29:48:ec:03:33:fd:27:fe:fc:6c:38:d0:
92:49:24:54:5e:84:d2:f2:ae:d9:45:39:e8:86:48:
d8:f6:4c:4e:6e:69:e3:3a:b9:6f:57:e6:a7:e3:85:
47:1b:a3:e9:03:dc:33:3f:8a:6a:8b:aa:79:ec:79:
41:6e:d0:a1:c6:f5:a9:ce:e5:3b:22:fa:1d:0e:3d:
10:33:a5:e1:48:05:e0:6e:44:cb:25:4e:aa:0e:a4:
27:dc:3c:71:e7:0f:79:2b:00:c2:8d:51:3f:d1:76:
8c:56:0b:4c:ad:98:0b:b0:88:00:cc:9c:63:3f:39:
5c:76:6c:5b:bc:4e:6b:68:2f:5c:6e:bd:67:aa:65:
34:7c:e0:a2:04:e5:31:53:89:f1:e0:c9:4d:a2:d1:
2f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F1:26:DA:E8:4B:68:1B:18:DF:79:32:97:7E:09:DB:AA:AB:EE:A4
X509v3 Authority Key Identifier:
keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:63:1a:bd:ee:e3:99:99:d1:62:ba:4e:56:bd:a2:70:8d:29:
17:8e:c3:98:79:9c:84:eb:44:c2:ef:35:69:06:3f:7d:0d:1e:
50:32:18:d4:87:b5:0f:79:99:22:90:4a:77:b5:f0:7d:e4:a8:
5a:d8:e3:86:ee:23:29:04:a5:55:fd:ba:ed:7d:9c:f0:97:62:
0e:6b:d0:01:b6:cb:cd:36:b4:5f:17:02:43:f6:21:17:5f:37:
e5:0f:e5:f7:d7:6f:16:65:6d:cf:cd:0a:68:12:8b:cd:49:ec:
29:b1:fc:71:fd:2b:41:78:87:62:42:63:78:1a:70:e6:86:50:
4b:e2:bf:9a:ef:56:ee:9c:cd:30:70:ad:7f:60:3b:8f:a7:aa:
49:3b:e3:74:fc:39:b0:95:e7:74:33:cc:09:ba:da:d9:80:3f:
28:1e:ce:54:27:c1:04:27:2e:e9:20:f5:7c:0e:6a:cd:2d:33:
62:45:b7:19:1b:10:1c:2d:02:fa:b8:ae:ac:ca:27:02:35:ae:
07:17:9b:74:d6:b9:c1:1b:2e:8a:0f:0d:d3:70:a3:06:0c:c1:
21:71:4d:f9:cb:0d:c2:e8:91:68:73:56:ea:f4:cf:af:d3:12:
f5:db:6d:1d:4e:e4:7c:00:71:b2:bb:be:4c:10:f8:ce:cb:30:
37:7d:ea:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RpEEgjuSAyYBeF0dCmMjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTAyZjYxMzFjZTVhNzQ2ZWI1OTgxZGQ0YzFkNmI0ZTE3
YjAzM2YwHhcNMjYwNzI0MDEwMTI4WhcNMjYwNzI1MDEwMTI4WjAzMTEwLwYDVQQD
EyhhY2YxMjZkYWU4NGI2ODFiMThkZjc5MzI5NzdlMDlkYmFhYWJlZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ntU0kXCstqm6bD0wqCJgPiHyRmc
+8EgkOF/fRUTbxau5Ax3IHfDZyw2jDMrNzQNl+BWFtGCcqtj4YYyXWcSJQ9f9ilZ
BcBdLFv7lVFNgRVLFg+dMsNoBxRYHGl5Cb4842U3dyGT2QGXlEspSOwDM/0n/vxs
ONCSSSRUXoTS8q7ZRTnohkjY9kxObmnjOrlvV+an44VHG6PpA9wzP4pqi6p57HlB
btChxvWpzuU7IvodDj0QM6XhSAXgbkTLJU6qDqQn3Dxx5w95KwDCjVE/0XaMVgtM
rZgLsIgAzJxjPzlcdmxbvE5raC9cbr1nqmU0fOCiBOUxU4nx4MlNotEvMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzxJtroS2gbGN95Mpd+Cduqq+6kMB8GA1UdIwQY
MBaAFNwQL2Exzlp0brWYHdTB1rThewM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jOGQ2NWUtZTVjOC00MTIwLWFlMWQt
YjA5N2Q5ZjhlYzIyLzEvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jOGQ2NWUtZTVjOC00MTIwLWFlMWQtYjA5N2Q5ZjhlYzIy
LzEvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2Mave7j
mZnRYrpOVr2icI0pF47DmHmchOtEwu81aQY/fQ0eUDIY1Ie1D3mZIpBKd7XwfeSo
Wtjjhu4jKQSlVf267X2c8JdiDmvQAbbLzTa0XxcCQ/YhF1835Q/l99dvFmVtz80K
aBKLzUnsKbH8cf0rQXiHYkJjeBpw5oZQS+K/mu9W7pzNMHCtf2A7j6eqSTvjdPw5
sJXndDPMCbra2YA/KB7OVCfBBCcu6SD1fA5qzS0zYkW3GRsQHC0C+riurMonAjWu
BxebdNa5wRsuig8N03CjBgzBIXFN+csNwuiRaHNW6vTPr9MS9dttHU7kfABxsru+
TBD4zsswN33qCg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:44:34 2026 by rpki-client