Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
File: 3AWXDmUMKq8atqOjOoNzJGahUS4.mft (raw, json)
Hash identifier: U5yl63nyDJal3/x/i5SCPk37rlWn+K2W+yITUDHC2xU=
Subject key identifier: 53:8D:4D:26:37:4E:E0:7F:84:9D:41:F0:3C:B1:CF:03:D9:2E:91:D5
Authority key identifier: DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
Certificate issuer: /CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Certificate serial: 019F90C7EE1F7E037ABB703828A81A17F217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 21:00:49 +0000
Manifest this update: Thu 23 Jul 2026 21:00:49 +0000
Manifest next update: Fri 24 Jul 2026 21:00:49 +0000
Files and hashes: 1: 3AWXDmUMKq8atqOjOoNzJGahUS4.crl (hash: kTvSKt0nJcc/DbSiu3CseEGF+2EkEyX3Hhe6KgE/Oko=)
2: BfsyjUB3iFV5UPd74xOasAhK1lo.roa (hash: Gxn6ZHk5iC8ynJdh1LPZ5NIVxJq4xBa2A2KnqXK9vaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:ee:1f:7e:03:7a:bb:70:38:28:a8:1a:17:f2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Validity
Not Before: Jul 23 21:00:49 2026 GMT
Not After : Jul 24 21:00:49 2026 GMT
Subject: CN=538d4d26374ee07f849d41f03cb1cf03d92e91d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:fd:88:92:96:12:bd:82:79:60:53:7f:bb:
40:0d:cb:49:9b:29:aa:21:a1:c8:79:ae:fb:75:37:
2e:f7:89:3b:97:6e:1b:06:fd:12:1c:13:57:96:4c:
88:88:af:ba:6f:8a:64:39:b1:8c:08:ff:49:24:e7:
59:3e:2f:62:bb:d8:70:2b:80:14:54:1c:53:22:7a:
0a:75:b9:db:85:24:8e:ab:54:7a:47:1b:1f:c9:4b:
dd:60:c5:d7:ce:76:de:6e:43:fa:ae:ca:a5:b7:42:
d2:16:2d:f3:84:99:ab:aa:6d:93:70:4b:27:83:a9:
0e:71:2f:ea:26:b6:e7:8f:bd:06:a2:fa:c9:2d:6a:
5a:b6:a1:3b:18:fb:db:c6:64:60:43:bb:75:76:15:
de:11:39:ae:a3:68:f5:d6:7b:0f:bd:73:d2:bb:4f:
ad:5c:24:c7:c9:a5:17:b8:f1:31:08:e4:c4:41:79:
fc:32:dd:90:e8:9e:c0:77:23:84:96:e6:06:8c:5e:
66:f3:e8:ed:53:78:3f:b0:52:cf:37:83:d8:53:d6:
cf:b0:63:3d:23:5e:49:16:9f:25:45:2f:06:65:75:
c8:f4:31:9c:3c:1f:ec:6c:2e:24:ea:31:7d:03:d5:
1a:98:2f:93:4a:44:07:6b:35:0e:04:a0:38:a9:c1:
ab:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8D:4D:26:37:4E:E0:7F:84:9D:41:F0:3C:B1:CF:03:D9:2E:91:D5
X509v3 Authority Key Identifier:
keyid:DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:41:1d:11:d2:17:41:30:0c:f8:d5:66:70:0e:20:ba:56:9b:
19:2a:31:b7:5d:74:eb:d3:32:49:27:73:22:e9:31:3a:62:39:
85:18:cb:5e:eb:50:a7:d2:34:cb:42:f3:f5:fb:85:9f:80:d2:
64:87:59:90:86:17:79:da:91:28:86:bc:e6:80:77:f6:9f:00:
78:eb:dc:04:47:af:8f:4a:a6:8f:8f:eb:eb:f6:d5:74:23:1b:
51:c1:72:57:09:08:50:45:28:82:6f:0d:cd:28:80:8b:ab:bb:
dd:45:9d:bc:16:ef:8e:96:66:59:9c:28:ce:ba:b4:60:fe:50:
ad:45:6e:bb:cb:5a:c6:03:dc:c1:f0:2d:7b:4a:f8:96:3f:25:
39:d1:f7:b6:de:2a:ba:53:76:fe:9e:60:55:56:83:7f:c0:86:
e6:32:51:94:a2:58:de:ae:35:c5:47:f0:82:d7:0f:25:49:a9:
60:44:ad:58:0c:8e:c0:9d:55:15:ae:50:7b:93:1c:6e:fd:38:
fa:f9:4b:db:ba:fa:1a:89:ed:88:20:2c:b9:e0:34:83:97:b7:
87:72:f6:f1:ef:37:7c:bb:ac:e9:4d:8e:60:76:5b:2d:a7:3a:
ab:1b:32:59:f5:cf:8d:8d:ed:d6:a5:14:3f:58:23:83:26:66:
16:fd:8d:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx+4ffgN6u3A4KKgaF/IXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDU5NzBlNjUwYzJhYWYxYWI2YTNhMzNhODM3MzI0NjZh
MTUxMmUwHhcNMjYwNzIzMjEwMDQ5WhcNMjYwNzI0MjEwMDQ5WjAzMTEwLwYDVQQD
Eyg1MzhkNGQyNjM3NGVlMDdmODQ5ZDQxZjAzY2IxY2YwM2Q5MmU5MWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyr9iJKWEr2CeWBTf7tADctJmymq
IaHIea77dTcu94k7l24bBv0SHBNXlkyIiK+6b4pkObGMCP9JJOdZPi9iu9hwK4AU
VBxTInoKdbnbhSSOq1R6RxsfyUvdYMXXznbebkP6rsqlt0LSFi3zhJmrqm2TcEsn
g6kOcS/qJrbnj70GovrJLWpatqE7GPvbxmRgQ7t1dhXeETmuo2j11nsPvXPSu0+t
XCTHyaUXuPExCOTEQXn8Mt2Q6J7AdyOEluYGjF5m8+jtU3g/sFLPN4PYU9bPsGM9
I15JFp8lRS8GZXXI9DGcPB/sbC4k6jF9A9UamC+TSkQHazUOBKA4qcGrvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFONTSY3TuB/hJ1B8DyxzwPZLpHVMB8GA1UdIwQY
MBaAFNwFlw5lDCqvGrajozqDcyRmoVEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FXWERtVU1LcThhdHFPak9vTnpKR2FoVVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zYjlhNDgtOGI2My00ZDNiLWEzYTkt
NjdhNTQwZTI5N2YwLzEvM0FXWERtVU1LcThhdHFPak9vTnpKR2FoVVM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zYjlhNDgtOGI2My00ZDNiLWEzYTktNjdhNTQwZTI5N2Yw
LzEvM0FXWERtVU1LcThhdHFPak9vTnpKR2FoVVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUEdEdIX
QTAM+NVmcA4gulabGSoxt11069MySSdzIukxOmI5hRjLXutQp9I0y0Lz9fuFn4DS
ZIdZkIYXedqRKIa85oB39p8AeOvcBEevj0qmj4/r6/bVdCMbUcFyVwkIUEUogm8N
zSiAi6u73UWdvBbvjpZmWZwozrq0YP5QrUVuu8taxgPcwfAte0r4lj8lOdH3tt4q
ulN2/p5gVVaDf8CG5jJRlKJY3q41xUfwgtcPJUmpYEStWAyOwJ1VFa5Qe5Mcbv04
+vlL27r6GontiCAsueA0g5e3h3L28e83fLus6U2OYHZbLac6qxsyWfXPjY3t1qUU
P1gjgyZmFv2NFg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:56:49 2026 by rpki-client