Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
File: P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft (raw, json)
Hash identifier: yBUeP1iZirXpR5b9ySjV/d66eH8RyGmPmm7Yzjq9tJk=
Subject key identifier: A6:94:AB:4F:52:6D:6F:2A:6C:F0:1F:18:6E:78:62:85:A3:5D:D3:4E
Authority key identifier: 3F:75:E0:0D:57:38:E5:BE:2B:09:66:8D:27:91:14:0E:EF:33:20:A5
Certificate issuer: /CN=3f75e00d5738e5be2b09668d2791140eef3320a5
Certificate serial: 019F916DA9C2E92EF24618204879EDD44546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:50 +0000
Manifest this update: Fri 24 Jul 2026 00:01:50 +0000
Manifest next update: Sat 25 Jul 2026 00:01:50 +0000
Files and hashes: 1: 9IDvg1m6FIQbcRd8cJ6Kz2ePInE.roa (hash: u6Pgg+TL8fBUrMeamu9qvumoJ5B+GURrCIvuw0aOKdI=)
2: Luquwxy5MmMCtghrD0bo5fP54_k.roa (hash: Bl2RpJjzTlgY54x2PqQ2Lom0vkyRv1xgE+degACJfHc=)
3: P3XgDVc45b4rCWaNJ5EUDu8zIKU.crl (hash: zLbkS+gNauDcS4xkEEWGd73ApKlJdlh3eqNPCypxE0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:a9:c2:e9:2e:f2:46:18:20:48:79:ed:d4:45:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f75e00d5738e5be2b09668d2791140eef3320a5
Validity
Not Before: Jul 24 00:01:50 2026 GMT
Not After : Jul 25 00:01:50 2026 GMT
Subject: CN=a694ab4f526d6f2a6cf01f186e786285a35dd34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:dd:23:f9:34:8d:54:d1:82:48:2f:64:de:
a4:dd:50:46:f6:75:37:88:e7:e9:fc:15:db:9f:72:
73:40:e8:85:c4:60:ae:c4:c0:04:58:af:de:e0:55:
4e:a9:78:b9:8a:e0:9d:89:b8:ed:0b:39:b1:65:a0:
d2:20:94:26:f6:10:9d:89:9e:a4:f5:03:80:b3:7e:
25:5d:5a:ca:ea:15:94:aa:66:09:67:4d:f2:e1:f4:
9f:f4:77:11:32:67:27:d3:54:07:ce:1b:af:6f:97:
da:98:6d:78:94:d7:5d:51:7d:81:e7:ac:e2:c0:67:
1d:2c:3a:61:82:99:4d:7b:66:33:24:55:d2:4b:b5:
81:9c:73:a4:45:d5:dd:1d:08:f7:05:8c:fd:21:03:
9f:f5:75:db:94:ad:46:74:93:d2:f5:e5:73:95:03:
4d:c5:c7:f7:cd:37:c5:e7:c8:bb:d2:b8:55:1c:ac:
9c:e3:3a:d4:64:5e:47:2c:c4:f4:32:81:3a:16:21:
31:2b:05:2c:d4:6c:1f:85:df:ff:50:24:76:64:f2:
61:96:34:5c:11:6c:51:6f:3b:1f:60:e8:81:44:d2:
7d:61:8a:5d:ae:68:e6:ce:87:93:a9:da:3b:3f:ec:
88:7b:01:f1:60:55:2b:0d:5c:55:ec:71:a1:d3:59:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:94:AB:4F:52:6D:6F:2A:6C:F0:1F:18:6E:78:62:85:A3:5D:D3:4E
X509v3 Authority Key Identifier:
keyid:3F:75:E0:0D:57:38:E5:BE:2B:09:66:8D:27:91:14:0E:EF:33:20:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f0:20:4d:e9:2f:1d:a3:2a:8d:11:4b:42:db:f8:d6:6f:24:
c9:58:6e:d4:42:e2:2f:53:af:89:77:5e:61:2d:fe:c5:65:75:
8c:93:cc:63:6c:3a:ff:63:e4:48:bc:26:9e:c6:f4:17:7c:ba:
fa:46:c2:63:ff:36:bd:4a:a0:2b:62:aa:84:07:8c:ad:e1:84:
ad:d4:f2:bd:b4:06:95:34:50:2d:1c:e5:eb:7a:7c:36:51:3e:
f3:6f:75:a5:16:f5:1c:63:e4:03:56:3e:39:83:53:85:c6:79:
c7:c6:10:15:97:29:88:d9:ec:10:5c:6d:ac:79:ed:b3:14:c5:
67:7c:68:8b:36:dc:60:0c:ed:ef:b7:fa:f5:43:4d:01:51:24:
29:d2:b0:7c:3f:85:c5:a6:1b:0d:ea:17:72:bd:73:fd:8f:bc:
2e:85:9d:d4:db:ca:43:80:bd:2c:65:ee:82:3c:2b:e1:c2:6c:
9f:13:03:da:a5:b1:bf:6c:e4:3e:8a:8e:5c:1f:c7:74:da:67:
e4:15:09:f0:c9:7c:be:72:b8:8f:89:c6:22:3b:28:58:15:ee:
11:76:4e:46:d1:c0:03:fc:aa:c3:18:0c:ce:18:14:45:32:04:
41:9a:29:0d:1e:38:c7:f2:2c:78:db:ba:7f:e8:54:54:62:3f:
ff:15:fe:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbanC6S7yRhggSHnt1EVGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNzVlMDBkNTczOGU1YmUyYjA5NjY4ZDI3OTExNDBlZWYz
MzIwYTUwHhcNMjYwNzI0MDAwMTUwWhcNMjYwNzI1MDAwMTUwWjAzMTEwLwYDVQQD
EyhhNjk0YWI0ZjUyNmQ2ZjJhNmNmMDFmMTg2ZTc4NjI4NWEzNWRkMzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM/dI/k0jVTRgkgvZN6k3VBG9nU3
iOfp/BXbn3JzQOiFxGCuxMAEWK/e4FVOqXi5iuCdibjtCzmxZaDSIJQm9hCdiZ6k
9QOAs34lXVrK6hWUqmYJZ03y4fSf9HcRMmcn01QHzhuvb5famG14lNddUX2B56zi
wGcdLDphgplNe2YzJFXSS7WBnHOkRdXdHQj3BYz9IQOf9XXblK1GdJPS9eVzlQNN
xcf3zTfF58i70rhVHKyc4zrUZF5HLMT0MoE6FiExKwUs1Gwfhd//UCR2ZPJhljRc
EWxRbzsfYOiBRNJ9YYpdrmjmzoeTqdo7P+yIewHxYFUrDVxV7HGh01lrSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaUq09SbW8qbPAfGG54YoWjXdNOMB8GA1UdIwQY
MBaAFD914A1XOOW+KwlmjSeRFA7vMyClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDNYZ0RWYzQ1YjRyQ1dhTko1RVVEdTh6SUtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMt
NjcyODBjOGJiYWI4LzEvUDNYZ0RWYzQ1YjRyQ1dhTko1RVVEdTh6SUtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMtNjcyODBjOGJiYWI4
LzEvUDNYZ0RWYzQ1YjRyQ1dhTko1RVVEdTh6SUtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfAgTekv
HaMqjRFLQtv41m8kyVhu1ELiL1OviXdeYS3+xWV1jJPMY2w6/2PkSLwmnsb0F3y6
+kbCY/82vUqgK2KqhAeMreGErdTyvbQGlTRQLRzl63p8NlE+8291pRb1HGPkA1Y+
OYNThcZ5x8YQFZcpiNnsEFxtrHntsxTFZ3xoizbcYAzt77f69UNNAVEkKdKwfD+F
xaYbDeoXcr1z/Y+8LoWd1NvKQ4C9LGXugjwr4cJsnxMD2qWxv2zkPoqOXB/HdNpn
5BUJ8Ml8vnK4j4nGIjsoWBXuEXZORtHAA/yqwxgMzhgURTIEQZopDR44x/IseNu6
f+hUVGI//xX+YQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:25:29 2026 by rpki-client