Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
File: 3kK6kvCUZ8GIi16eNEiVB0SweYE.mft (raw, json)
Hash identifier: 1Udv44hfVAdV9iE8PNlKdJR3CIyKw5dz287CgTOok+k=
Subject key identifier: AD:DF:3A:0B:13:36:DA:E2:E3:A6:F8:79:6B:54:7B:17:4A:DD:64:6D
Authority key identifier: DE:42:BA:92:F0:94:67:C1:88:8B:5E:9E:34:48:95:07:44:B0:79:81
Certificate issuer: /CN=de42ba92f09467c1888b5e9e3448950744b07981
Certificate serial: 019F8F110A1B46AE049BFCC7FB27B3B3C33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
Manifest number: 1434
Signing time: Thu 23 Jul 2026 13:01:26 +0000
Manifest this update: Thu 23 Jul 2026 13:01:26 +0000
Manifest next update: Fri 24 Jul 2026 13:01:26 +0000
Files and hashes: 1: 3kK6kvCUZ8GIi16eNEiVB0SweYE.crl (hash: XX6pW9iOzpCbw1VFZHz4zniEiRjbsGzjWSkHYhZUvDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:11:0a:1b:46:ae:04:9b:fc:c7:fb:27:b3:b3:c3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de42ba92f09467c1888b5e9e3448950744b07981
Validity
Not Before: Jul 23 13:01:26 2026 GMT
Not After : Jul 24 13:01:26 2026 GMT
Subject: CN=addf3a0b1336dae2e3a6f8796b547b174add646d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:92:01:70:5f:a9:5b:3a:cb:52:75:7d:16:
c1:e2:82:3a:54:4b:dd:dc:15:11:42:ae:90:36:42:
d2:ea:1b:9a:ef:40:b0:fb:ea:53:3e:18:42:ce:8e:
7b:c4:d7:56:72:2f:54:b0:e1:6c:12:18:ac:e3:6a:
bf:b5:55:9b:c7:b3:7b:1a:34:5d:a2:94:9c:7c:0c:
b7:23:e9:79:d3:b4:c4:bd:57:fc:97:73:dc:68:66:
62:76:76:1d:d6:03:a7:b4:92:18:4a:6f:c3:33:7e:
96:d5:2d:c8:fb:ac:89:f2:2b:08:de:a9:37:6d:90:
1f:0c:bc:06:e2:3d:d7:62:40:a5:ae:b1:f3:d4:a2:
12:dd:70:1a:0a:b2:08:17:8a:64:0e:f6:a6:83:60:
14:3e:30:72:95:7c:78:73:a5:38:68:0a:47:13:25:
2d:0f:94:4a:87:7a:af:3a:ca:f1:ce:62:56:70:e5:
80:b5:56:62:42:0f:b6:55:09:2d:13:2d:f1:6d:97:
45:3a:97:b6:93:bb:3d:0b:65:05:e4:12:ae:9c:a1:
1a:bc:c8:b3:a7:9d:bb:71:af:50:02:73:5d:c7:92:
a3:00:f9:ab:e9:83:80:b5:42:53:d5:6f:2c:9d:06:
1a:cc:8d:93:15:d0:91:35:8d:8b:bf:9c:ea:f4:d5:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DF:3A:0B:13:36:DA:E2:E3:A6:F8:79:6B:54:7B:17:4A:DD:64:6D
X509v3 Authority Key Identifier:
keyid:DE:42:BA:92:F0:94:67:C1:88:8B:5E:9E:34:48:95:07:44:B0:79:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bc:94:9d:d0:5a:ec:01:8c:b7:43:1e:c3:86:37:e0:97:8a:
4d:9c:91:a9:89:f3:35:67:ff:d5:8f:44:4a:d2:2a:d5:4e:d5:
0e:1b:ac:df:c2:e3:31:1e:c5:10:f9:f9:bc:52:fd:5f:43:11:
88:22:37:20:aa:8b:5a:13:af:23:dc:73:54:28:c8:41:cd:bc:
f8:f1:8b:e7:a8:f2:d3:50:45:58:78:d3:07:53:28:d9:82:20:
70:02:a6:cb:2e:ba:3c:a4:c6:72:28:2a:53:00:d5:89:42:35:
ff:c6:d0:e1:f9:e7:09:76:0f:b1:cc:fe:74:4a:0e:b1:e0:32:
cf:fc:20:27:d7:43:a9:d9:5c:7d:cc:a3:21:e5:d3:79:d3:eb:
20:45:4c:89:d1:56:34:e7:b4:27:0d:77:a9:36:46:ba:93:bc:
95:51:de:86:28:dd:b1:6b:4b:08:1f:97:49:21:e9:f2:44:f0:
bf:69:c0:e9:7c:c8:1a:8f:80:58:53:47:07:77:f0:a7:10:fa:
a0:76:f6:5c:4b:a4:77:3e:ce:39:4e:f1:ad:8b:17:40:ee:60:
00:76:c2:bf:d6:43:54:c1:bb:dd:2d:83:68:1e:c7:05:b1:5f:
73:e8:2b:d3:95:99:ea:55:61:94:45:17:08:87:09:80:d1:d5:
de:7e:cf:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEQobRq4Em/zH+yezs8M/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNDJiYTkyZjA5NDY3YzE4ODhiNWU5ZTM0NDg5NTA3NDRi
MDc5ODEwHhcNMjYwNzIzMTMwMTI2WhcNMjYwNzI0MTMwMTI2WjAzMTEwLwYDVQQD
EyhhZGRmM2EwYjEzMzZkYWUyZTNhNmY4Nzk2YjU0N2IxNzRhZGQ2NDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw2SAXBfqVs6y1J1fRbB4oI6VEvd
3BURQq6QNkLS6hua70Cw++pTPhhCzo57xNdWci9UsOFsEhis42q/tVWbx7N7GjRd
opScfAy3I+l507TEvVf8l3PcaGZidnYd1gOntJIYSm/DM36W1S3I+6yJ8isI3qk3
bZAfDLwG4j3XYkClrrHz1KIS3XAaCrIIF4pkDvamg2AUPjBylXx4c6U4aApHEyUt
D5RKh3qvOsrxzmJWcOWAtVZiQg+2VQktEy3xbZdFOpe2k7s9C2UF5BKunKEavMiz
p527ca9QAnNdx5KjAPmr6YOAtUJT1W8snQYazI2TFdCRNY2Lv5zq9NUOSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3fOgsTNtri46b4eWtUexdK3WRtMB8GA1UdIwQY
MBaAFN5CupLwlGfBiItenjRIlQdEsHmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2tLNmt2Q1VaOEdJaTE2ZU5FaVZCMFN3ZVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zZmY0NjMtMGUzZC00ZTc3LWJkMTMt
NWIzYjRiOTEzY2Y4LzEvM2tLNmt2Q1VaOEdJaTE2ZU5FaVZCMFN3ZVlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zZmY0NjMtMGUzZC00ZTc3LWJkMTMtNWIzYjRiOTEzY2Y4
LzEvM2tLNmt2Q1VaOEdJaTE2ZU5FaVZCMFN3ZVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmryUndBa
7AGMt0Mew4Y34JeKTZyRqYnzNWf/1Y9EStIq1U7VDhus38LjMR7FEPn5vFL9X0MR
iCI3IKqLWhOvI9xzVCjIQc28+PGL56jy01BFWHjTB1Mo2YIgcAKmyy66PKTGcigq
UwDViUI1/8bQ4fnnCXYPscz+dEoOseAyz/wgJ9dDqdlcfcyjIeXTedPrIEVMidFW
NOe0Jw13qTZGupO8lVHehijdsWtLCB+XSSHp8kTwv2nA6XzIGo+AWFNHB3fwpxD6
oHb2XEukdz7OOU7xrYsXQO5gAHbCv9ZDVMG73S2DaB7HBbFfc+gr05WZ6lVhlEUX
CIcJgNHV3n7P2A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:43:10 2026 by rpki-client