Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.mft
File: 3HHQ9j9WHOyzoosMvCRZEC9vA_o.mft (raw, json)
Hash identifier: jpJQFssGaqBozOxdQJu3g/o9pTrxq7XSDZLWQY7NjbU=
Subject key identifier: 7C:B3:AA:53:47:10:5B:92:18:20:CD:9D:55:FB:59:03:61:C3:15:9B
Authority key identifier: DC:71:D0:F6:3F:56:1C:EC:B3:A2:8B:0C:BC:24:59:10:2F:6F:03:FA
Certificate issuer: /CN=dc71d0f63f561cecb3a28b0cbc2459102f6f03fa
Certificate serial: 019F8F7F3C767D0FBA93A478CC8ED5384895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HHQ9j9WHOyzoosMvCRZEC9vA_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:48 +0000
Manifest this update: Thu 23 Jul 2026 15:01:48 +0000
Manifest next update: Fri 24 Jul 2026 15:01:48 +0000
Files and hashes: 1: 3HHQ9j9WHOyzoosMvCRZEC9vA_o.crl (hash: Yd49/+TN5kd4atVQ0NzFQI83lpvNNc7qFgwYtdP2kp0=)
2: BApSbsESE-proQA3IjR2Fc5FrQg.roa (hash: tsQTTQkFusyAqW/gQnJmPH0odJMuP2a12omZQ3HbkX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HHQ9j9WHOyzoosMvCRZEC9vA_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:3c:76:7d:0f:ba:93:a4:78:cc:8e:d5:38:48:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc71d0f63f561cecb3a28b0cbc2459102f6f03fa
Validity
Not Before: Jul 23 15:01:48 2026 GMT
Not After : Jul 24 15:01:48 2026 GMT
Subject: CN=7cb3aa5347105b921820cd9d55fb590361c3159b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:28:45:e8:57:3f:69:43:0c:4c:3f:55:19:
d2:49:d5:8a:7e:1d:59:e8:c9:a3:7d:15:78:cc:d7:
a9:47:cf:76:81:13:73:9c:fa:cb:fe:ce:8d:46:98:
e7:96:f4:00:34:bd:cd:26:34:99:12:bb:5a:9e:d3:
7b:04:26:e4:0d:8b:af:2f:f3:af:5a:68:43:e6:8c:
15:aa:56:fb:2b:d7:7a:65:58:27:7a:fd:0e:ec:03:
69:e6:df:2a:43:07:93:1d:92:c3:94:31:17:a2:90:
d2:51:32:99:34:6b:db:6f:9a:b5:f0:ca:b6:9a:8a:
50:96:06:c0:54:a4:13:e8:53:cc:6b:3e:9e:12:28:
a4:d2:89:33:5c:ce:fc:c3:5e:d5:f3:d8:68:b7:15:
cf:97:a2:0e:fa:5d:88:e0:29:ae:82:47:f8:eb:67:
95:b3:bc:07:1b:bb:d2:bf:a3:19:23:2d:80:98:5a:
44:29:da:df:f6:b7:00:8b:e2:b1:7e:ae:70:f4:49:
0c:e2:49:d9:f4:54:83:53:fc:16:09:94:9d:b4:97:
3e:c1:b4:9d:b9:1f:27:00:c9:9f:8b:69:18:fa:59:
a8:8a:9d:15:97:78:2f:7f:e5:1e:cc:c6:91:3e:a6:
01:47:5c:7d:f0:28:5e:83:74:36:d5:be:72:ac:07:
6f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B3:AA:53:47:10:5B:92:18:20:CD:9D:55:FB:59:03:61:C3:15:9B
X509v3 Authority Key Identifier:
keyid:DC:71:D0:F6:3F:56:1C:EC:B3:A2:8B:0C:BC:24:59:10:2F:6F:03:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HHQ9j9WHOyzoosMvCRZEC9vA_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d0:2d:83:05:45:34:78:c8:de:e4:d3:37:d3:bc:29:79:5a:
21:7c:6c:9f:46:b0:67:d5:7c:90:c4:14:c1:c7:1f:5f:e4:6a:
9c:01:dd:c0:2c:3b:0e:b1:49:db:e8:dd:f6:32:9d:a2:b0:83:
77:b7:bf:89:01:0f:4e:ae:19:7c:ef:14:de:1b:36:0f:14:cd:
e6:c2:39:6d:ed:68:ee:f0:49:46:10:52:30:b8:44:a6:bd:e9:
13:2a:d0:f3:ab:1b:5f:2e:c9:91:73:7b:3e:0b:2c:b1:7b:db:
5f:a0:7c:d9:dc:2d:02:16:55:5d:89:e9:62:dd:e5:ae:e4:cd:
b4:1d:2c:8c:a2:e9:79:ca:13:4d:36:a0:1c:a8:01:24:7b:f8:
44:06:8f:30:69:50:4a:9f:a4:dd:b7:c1:63:3f:d0:22:83:a6:
c6:39:c5:48:3c:78:95:7f:30:bc:2c:69:63:a2:c2:08:3c:89:
bf:77:d6:95:82:db:77:08:37:c3:f9:00:c4:f0:40:35:fd:a9:
09:47:51:ef:40:d8:cb:7f:a2:87:c3:a6:73:5c:f0:69:4d:c4:
b6:c0:ce:c7:91:18:b6:d7:79:bc:2c:50:21:32:0b:2b:9d:a1:
aa:8f:9f:3e:2d:24:91:f7:3c:27:ea:33:7d:2d:30:a0:8b:64:
e9:a1:1a:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pfzx2fQ+6k6R4zI7VOEiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzFkMGY2M2Y1NjFjZWNiM2EyOGIwY2JjMjQ1OTEwMmY2
ZjAzZmEwHhcNMjYwNzIzMTUwMTQ4WhcNMjYwNzI0MTUwMTQ4WjAzMTEwLwYDVQQD
Eyg3Y2IzYWE1MzQ3MTA1YjkyMTgyMGNkOWQ1NWZiNTkwMzYxYzMxNTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfUoRehXP2lDDEw/VRnSSdWKfh1Z
6MmjfRV4zNepR892gRNznPrL/s6NRpjnlvQANL3NJjSZErtantN7BCbkDYuvL/Ov
WmhD5owVqlb7K9d6ZVgnev0O7ANp5t8qQweTHZLDlDEXopDSUTKZNGvbb5q18Mq2
mopQlgbAVKQT6FPMaz6eEiik0okzXM78w17V89hotxXPl6IO+l2I4Cmugkf462eV
s7wHG7vSv6MZIy2AmFpEKdrf9rcAi+Kxfq5w9EkM4knZ9FSDU/wWCZSdtJc+wbSd
uR8nAMmfi2kY+lmoip0Vl3gvf+UezMaRPqYBR1x98Cheg3Q21b5yrAdvNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyzqlNHEFuSGCDNnVX7WQNhwxWbMB8GA1UdIwQY
MBaAFNxx0PY/Vhzss6KLDLwkWRAvbwP6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hIUTlqOVdIT3l6b29zTXZDUlpFQzl2QV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ZDQwMDQtYWFjMC00ZWFkLWE1ODAt
YzY2NGI0ZTg2YWI1LzEvM0hIUTlqOVdIT3l6b29zTXZDUlpFQzl2QV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ZDQwMDQtYWFjMC00ZWFkLWE1ODAtYzY2NGI0ZTg2YWI1
LzEvM0hIUTlqOVdIT3l6b29zTXZDUlpFQzl2QV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNAtgwVF
NHjI3uTTN9O8KXlaIXxsn0awZ9V8kMQUwccfX+RqnAHdwCw7DrFJ2+jd9jKdorCD
d7e/iQEPTq4ZfO8U3hs2DxTN5sI5be1o7vBJRhBSMLhEpr3pEyrQ86sbXy7JkXN7
PgsssXvbX6B82dwtAhZVXYnpYt3lruTNtB0sjKLpecoTTTagHKgBJHv4RAaPMGlQ
Sp+k3bfBYz/QIoOmxjnFSDx4lX8wvCxpY6LCCDyJv3fWlYLbdwg3w/kAxPBANf2p
CUdR70DYy3+ih8Omc1zwaU3EtsDOx5EYttd5vCxQITILK52hqo+fPi0kkfc8J+oz
fS0woItk6aEaMQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:33 2026 by rpki-client