Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: ER7v1WZBWYvsa0pzSDOuUa8paS+gkZeoyuqyqMPPqUg=
Subject key identifier: E0:68:DE:DA:D1:31:F5:40:95:C1:6F:08:B9:96:EE:18:8B:ED:D0:92
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 019F91A42126B07EC42C0805B26E9F0F8299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 08AD
Signing time: Fri 24 Jul 2026 01:01:20 +0000
Manifest this update: Fri 24 Jul 2026 01:01:20 +0000
Manifest next update: Sat 25 Jul 2026 01:01:20 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: t2pOCKjQCEbVWbsXEMP2G+f/7RtZp0LdcpaXaV4C5/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:21:26:b0:7e:c4:2c:08:05:b2:6e:9f:0f:82:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Jul 24 01:01:20 2026 GMT
Not After : Jul 25 01:01:20 2026 GMT
Subject: CN=e068dedad131f54095c16f08b996ee188bedd092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:9a:f8:02:c3:cf:b3:b4:04:7b:96:ad:56:
ef:21:66:84:a2:ef:14:22:f7:e6:64:8e:42:84:3a:
8f:24:50:57:aa:4e:9c:0d:a6:85:47:ee:18:b5:a9:
8b:d7:47:0f:53:ce:18:e1:65:22:29:12:a7:e2:d3:
9f:23:1b:b6:18:69:1f:b1:69:1e:bf:57:3e:cc:dd:
fb:3c:5f:aa:52:7a:ef:4e:c6:22:04:50:4a:03:de:
12:ff:a8:9a:61:87:ff:04:a0:c1:f3:fa:7c:28:aa:
70:f3:26:d6:75:9b:50:5d:9d:2d:e9:e5:9c:0f:29:
95:6f:b2:e0:c8:43:a2:81:17:7b:25:10:6e:0e:92:
43:4d:dd:bf:6c:0f:48:cf:b7:3a:8e:f0:18:7a:63:
ea:50:67:ad:54:58:77:3b:2d:bd:4f:6f:6d:47:de:
f6:98:83:76:2b:7c:b1:db:3f:87:73:2d:50:19:b2:
a5:30:5f:a3:1e:85:a3:c6:61:ee:cd:d7:77:fa:79:
3e:55:68:3f:1b:19:e1:05:c3:d5:4d:74:91:a8:ff:
0f:fd:d5:92:a0:7f:b2:6f:10:25:4c:e0:c5:2e:f5:
d0:be:74:82:98:38:e0:1d:a0:15:c6:ba:1c:3a:e7:
86:a6:3c:1c:1d:0c:e5:3f:d6:b8:d4:2c:04:99:71:
14:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:68:DE:DA:D1:31:F5:40:95:C1:6F:08:B9:96:EE:18:8B:ED:D0:92
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4e:ad:4a:ab:c6:ca:a1:10:61:d7:16:a0:84:c9:b4:68:b5:
3f:9e:d1:b8:32:f0:4f:bc:68:a9:94:38:61:85:46:78:ec:b4:
3b:d8:99:7a:66:5f:7d:8e:6a:7f:15:91:8a:a9:2e:f2:e4:9d:
60:9f:cb:48:45:66:5d:78:e9:9f:ac:a9:c0:be:df:32:aa:42:
86:f1:57:b5:1b:5a:52:47:45:40:3b:39:ac:c4:a0:b2:7a:34:
f6:81:49:f7:ce:21:9a:76:28:e6:b2:fe:56:bc:76:7f:11:bd:
43:fa:68:20:33:5f:a4:fe:01:04:63:68:30:dc:e4:5c:5c:9a:
a7:76:be:cb:e3:82:cc:52:40:1c:19:41:96:2b:b4:47:ec:0a:
20:0f:97:f4:2a:be:bd:9c:b6:ec:6f:ec:7e:d5:e2:01:ad:c7:
1b:8d:d0:b3:30:29:d7:e9:7b:4c:ed:27:23:63:c8:7b:3b:19:
99:ff:b7:fd:e8:49:18:3d:35:ba:c6:d4:7d:ea:2c:a2:8b:b7:
ed:0a:c7:10:02:f9:f0:97:3f:78:53:40:4e:3a:dc:1d:e7:02:
5a:2b:23:5b:99:10:f7:dd:5d:e1:59:41:ef:db:30:19:39:77:
3b:90:5a:ca:95:b3:2d:f3:0c:89:56:34:55:61:ba:b7:ca:84:
70:4c:05:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RpCEmsH7ELAgFsm6fD4KZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNzQ3MTk2Y2I4YzlkYzY0MjMzN2FmZWJmMDRiMjA0ZGNk
MTk2OTYwHhcNMjYwNzI0MDEwMTIwWhcNMjYwNzI1MDEwMTIwWjAzMTEwLwYDVQQD
EyhlMDY4ZGVkYWQxMzFmNTQwOTVjMTZmMDhiOTk2ZWUxODhiZWRkMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvqa+ALDz7O0BHuWrVbvIWaEou8U
IvfmZI5ChDqPJFBXqk6cDaaFR+4YtamL10cPU84Y4WUiKRKn4tOfIxu2GGkfsWke
v1c+zN37PF+qUnrvTsYiBFBKA94S/6iaYYf/BKDB8/p8KKpw8ybWdZtQXZ0t6eWc
DymVb7LgyEOigRd7JRBuDpJDTd2/bA9Iz7c6jvAYemPqUGetVFh3Oy29T29tR972
mIN2K3yx2z+Hcy1QGbKlMF+jHoWjxmHuzdd3+nk+VWg/GxnhBcPVTXSRqP8P/dWS
oH+ybxAlTODFLvXQvnSCmDjgHaAVxrocOueGpjwcHQzlP9a41CwEmXEUsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBo3trRMfVAlcFvCLmW7hiL7dCSMB8GA1UdIwQY
MBaAFN50cZbLjJ3GQjN6/r8EsgTc0ZaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM25SeGxzdU1uY1pDTTNyLXZ3U3lCTnpSbHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85NzFjMjQtNmIyYi00NmE1LWE3NTEt
ZDNlOGE4Njg5ZGMzLzEvM25SeGxzdU1uY1pDTTNyLXZ3U3lCTnpSbHBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS85NzFjMjQtNmIyYi00NmE1LWE3NTEtZDNlOGE4Njg5ZGMz
LzEvM25SeGxzdU1uY1pDTTNyLXZ3U3lCTnpSbHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZU6tSqvG
yqEQYdcWoITJtGi1P57RuDLwT7xoqZQ4YYVGeOy0O9iZemZffY5qfxWRiqku8uSd
YJ/LSEVmXXjpn6ypwL7fMqpChvFXtRtaUkdFQDs5rMSgsno09oFJ984hmnYo5rL+
Vrx2fxG9Q/poIDNfpP4BBGNoMNzkXFyap3a+y+OCzFJAHBlBliu0R+wKIA+X9Cq+
vZy27G/sftXiAa3HG43QszAp1+l7TO0nI2PIezsZmf+3/ehJGD01usbUfeosoou3
7QrHEAL58Jc/eFNATjrcHecCWisjW5kQ991d4VlB79swGTl3O5BaypWzLfMMiVY0
VWG6t8qEcEwFHw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:39 2026 by rpki-client