Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: OYz/D44cHCHY/Di5EosZg6zAbtx0Xf2kx13jW0ojWuU=
Subject key identifier: D7:E4:5E:3C:D3:8A:F4:97:DF:FD:16:55:4C:CE:8C:EF:79:A3:BB:9B
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 019F909082BA73C9129571FB3D41703C3C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 20:00:17 +0000
Manifest this update: Thu 23 Jul 2026 20:00:17 +0000
Manifest next update: Fri 24 Jul 2026 20:00:17 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: YdxnPGRzFChsp1JwtEUQdy5woKhFlgD37THtpYUuDe0=)
2: iKwLG1q1sDs9tvR7rIxpNbBHq4g.roa (hash: 5Al8Pm91tYMp0+j7fJGmguSqWX96C92TH8gJMDHEyyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:82:ba:73:c9:12:95:71:fb:3d:41:70:3c:3c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Jul 23 20:00:17 2026 GMT
Not After : Jul 24 20:00:17 2026 GMT
Subject: CN=d7e45e3cd38af497dffd16554cce8cef79a3bb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:af:1b:9c:f9:83:b9:24:28:66:26:b6:e6:
97:ac:f0:e4:f4:3e:ab:91:60:c7:af:37:ae:2a:15:
21:9a:26:d3:70:19:a9:81:42:2d:1f:63:2d:00:e4:
f4:6d:1e:a6:42:54:37:1e:0d:1a:b0:77:96:7c:d6:
40:3f:fa:d2:81:e9:97:28:ba:8e:ad:11:c4:d7:c2:
0d:d0:e1:3f:59:82:c0:76:8b:e0:3b:7b:d3:ce:b4:
63:b7:d0:fe:17:fe:92:88:f0:b2:b7:87:34:72:d8:
73:76:68:6b:19:46:e3:d2:96:50:da:1d:d5:d6:11:
20:81:8b:6a:46:ec:97:2c:31:da:59:f9:cb:3c:7f:
8e:88:71:cc:b1:fa:f8:98:78:42:a8:9a:0c:cf:16:
79:b1:52:c9:a3:83:7f:03:df:8d:4d:79:5c:cb:ef:
53:8b:96:db:58:e7:37:c0:50:2d:74:d0:46:71:95:
79:7b:04:1a:0a:58:6c:31:1d:b5:68:2b:8a:47:a3:
0f:1d:fd:d0:d7:bb:bf:b6:8c:43:47:79:4a:04:15:
bc:dd:51:44:0c:bd:6f:42:db:53:f3:ce:45:d7:f8:
8f:da:cd:3b:77:0a:bb:a8:27:c0:b1:e8:51:91:db:
62:0f:1c:02:70:5d:7f:b3:80:bc:de:76:54:b6:db:
7e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E4:5E:3C:D3:8A:F4:97:DF:FD:16:55:4C:CE:8C:EF:79:A3:BB:9B
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ed:7f:c0:2e:5c:3e:aa:05:4b:2d:51:d6:66:f8:fb:99:14:
be:67:a3:cd:b1:ae:d9:9e:ee:fb:be:28:a9:06:a0:33:83:a7:
90:17:14:8e:02:be:e5:36:d8:2a:0f:cc:6c:b2:09:91:eb:9e:
2b:e2:21:3c:11:f8:82:21:67:d9:f1:df:76:ba:06:86:f7:7f:
2e:ea:f8:54:2e:a8:99:a7:d5:10:dc:02:10:bb:0c:9c:ae:c7:
eb:36:3d:80:41:a2:02:f1:ab:27:ff:45:88:50:fd:c3:01:b5:
b4:d1:96:df:7d:6b:0b:91:3f:fb:0e:58:f2:2e:a9:3e:03:f2:
6b:e7:63:64:5b:64:4f:c7:c3:10:7f:05:58:13:b5:ad:08:c9:
34:34:e6:d0:22:f1:34:c6:f0:61:13:1f:d4:bb:a9:d6:eb:48:
7e:90:19:a1:42:81:5a:b0:57:e3:4f:28:bc:0d:26:76:fe:1b:
d1:78:fd:dc:9f:1c:58:aa:e3:02:0a:85:9d:2c:2c:15:d3:24:
8e:91:4f:d4:61:99:72:3e:e4:4a:e9:4d:dd:18:73:79:33:93:
c0:c1:47:29:46:aa:4d:cc:72:69:12:76:46:c9:01:98:66:b9:
5d:7a:e0:a4:98:5c:a9:bd:8a:17:ea:75:23:d0:85:ae:5c:94:
48:39:0c:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkIK6c8kSlXH7PUFwPDx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZWFkOTE5Yjg1YTEzMDUxZDAyMDhiN2UyOGRkY2NiMzk4
YjE0ZDYwHhcNMjYwNzIzMjAwMDE3WhcNMjYwNzI0MjAwMDE3WjAzMTEwLwYDVQQD
EyhkN2U0NWUzY2QzOGFmNDk3ZGZmZDE2NTU0Y2NlOGNlZjc5YTNiYjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxGvG5z5g7kkKGYmtuaXrPDk9D6r
kWDHrzeuKhUhmibTcBmpgUItH2MtAOT0bR6mQlQ3Hg0asHeWfNZAP/rSgemXKLqO
rRHE18IN0OE/WYLAdovgO3vTzrRjt9D+F/6SiPCyt4c0cthzdmhrGUbj0pZQ2h3V
1hEggYtqRuyXLDHaWfnLPH+OiHHMsfr4mHhCqJoMzxZ5sVLJo4N/A9+NTXlcy+9T
i5bbWOc3wFAtdNBGcZV5ewQaClhsMR21aCuKR6MPHf3Q17u/toxDR3lKBBW83VFE
DL1vQttT885F1/iP2s07dwq7qCfAsehRkdtiDxwCcF1/s4C83nZUttt+7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfkXjzTivSX3/0WVUzOjO95o7ubMB8GA1UdIwQY
MBaAFN3q2Rm4WhMFHQIIt+KN3Ms5ixTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84ZWZmZTQtZWRiYi00ZGQ0LTg1ZDQt
NDhiOGI1YTliNDExLzEvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS84ZWZmZTQtZWRiYi00ZGQ0LTg1ZDQtNDhiOGI1YTliNDEx
LzEvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+1/wC5c
PqoFSy1R1mb4+5kUvmejzbGu2Z7u+74oqQagM4OnkBcUjgK+5TbYKg/MbLIJkeue
K+IhPBH4giFn2fHfdroGhvd/Lur4VC6omafVENwCELsMnK7H6zY9gEGiAvGrJ/9F
iFD9wwG1tNGW331rC5E/+w5Y8i6pPgPya+djZFtkT8fDEH8FWBO1rQjJNDTm0CLx
NMbwYRMf1Lup1utIfpAZoUKBWrBX408ovA0mdv4b0Xj93J8cWKrjAgqFnSwsFdMk
jpFP1GGZcj7kSulN3RhzeTOTwMFHKUaqTcxyaRJ2RskBmGa5XXrgpJhcqb2KF+p1
I9CFrlyUSDkMzA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:21 2026 by rpki-client