Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft
File: 3LvdnN1oHwNDXWI8gxkw8ifwub8.mft (raw, json)
Hash identifier: RWCkR6Crel4Lclo/Rs1/Td5hCEIJO5WFxolNY7aJtq0=
Subject key identifier: AA:56:60:88:0D:68:91:75:4C:6D:4F:82:5F:90:52:49:F9:24:D1:D2
Authority key identifier: DC:BB:DD:9C:DD:68:1F:03:43:5D:62:3C:83:19:30:F2:27:F0:B9:BF
Certificate issuer: /CN=dcbbdd9cdd681f03435d623c831930f227f0b9bf
Certificate serial: 019F8FB5BEA802DB61550567131B43B309C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LvdnN1oHwNDXWI8gxkw8ifwub8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft
Manifest number: 021C
Signing time: Thu 23 Jul 2026 16:01:20 +0000
Manifest this update: Thu 23 Jul 2026 16:01:20 +0000
Manifest next update: Fri 24 Jul 2026 16:01:20 +0000
Files and hashes: 1: 3LvdnN1oHwNDXWI8gxkw8ifwub8.crl (hash: a9nhbg81tf4qv6syMu3HsX4yU3Dc4G4xrY3r9hxJdOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LvdnN1oHwNDXWI8gxkw8ifwub8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:be:a8:02:db:61:55:05:67:13:1b:43:b3:09:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbbdd9cdd681f03435d623c831930f227f0b9bf
Validity
Not Before: Jul 23 16:01:20 2026 GMT
Not After : Jul 24 16:01:20 2026 GMT
Subject: CN=aa5660880d6891754c6d4f825f905249f924d1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:27:8a:74:d0:82:eb:6f:b8:c2:7d:2b:b4:
2d:3f:63:b7:67:4b:d6:44:38:22:a9:3f:a6:fe:d1:
df:68:a2:e1:55:a3:e1:8c:55:ed:b3:78:3c:83:fa:
8a:75:56:35:71:c1:a6:0b:3f:92:f1:20:b1:aa:1b:
b9:f2:6f:f9:b8:e9:a9:d6:6c:34:29:13:d9:77:a7:
64:42:79:93:b2:83:86:d7:4e:98:34:67:02:a9:35:
e0:fd:31:6f:69:a5:7f:28:73:50:92:44:e6:ef:8c:
cb:68:d4:29:59:16:26:ca:6e:eb:d5:0f:7f:bb:9a:
e3:7e:ab:80:e6:e2:d7:13:20:58:25:d6:53:c4:ee:
de:9b:17:fa:e3:c2:bc:3e:2a:c8:ef:b8:3e:54:46:
51:42:de:3a:21:5d:56:66:d5:5c:94:00:65:33:db:
82:f2:45:08:21:24:c2:b3:ee:34:aa:38:fd:72:7b:
73:f7:73:60:96:9b:ec:65:92:7b:ee:21:81:34:bc:
53:6a:98:b7:93:a6:9d:11:d2:da:fd:7e:65:0d:59:
16:1f:f9:74:6b:7c:4a:c7:34:c0:cd:d2:6a:85:bc:
59:e6:13:7a:b2:d0:9c:eb:df:6d:29:5f:f2:17:7c:
75:88:9c:76:4d:8b:b7:c0:52:52:3b:c0:e5:36:29:
03:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:56:60:88:0D:68:91:75:4C:6D:4F:82:5F:90:52:49:F9:24:D1:D2
X509v3 Authority Key Identifier:
keyid:DC:BB:DD:9C:DD:68:1F:03:43:5D:62:3C:83:19:30:F2:27:F0:B9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LvdnN1oHwNDXWI8gxkw8ifwub8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4b:c9:8f:b7:66:64:68:0d:e6:82:07:de:36:62:71:25:50:
a2:14:1c:5f:78:c4:b3:b5:28:69:52:b2:42:58:28:2a:12:eb:
ae:78:20:85:06:07:6e:0e:66:5d:47:1c:02:4c:12:27:ae:76:
38:76:28:a6:2c:76:f3:b1:9b:7b:b4:78:ad:bb:c7:26:60:cc:
5b:3c:51:24:30:c7:e1:14:5a:64:90:9f:16:ce:01:37:10:0f:
e8:5d:55:06:92:a5:d3:56:65:26:3b:1f:4d:2f:74:a6:3d:dc:
c4:65:e4:00:bb:c2:97:b5:98:bf:dd:b5:a8:1b:64:5c:c6:22:
db:f1:07:1f:5c:19:2c:66:37:04:5f:e9:8a:b0:71:a2:5c:f7:
27:08:d9:13:67:fa:2d:62:a5:0f:2b:b9:5a:c8:af:fe:cf:bc:
f2:b7:dd:34:e3:e2:15:33:8f:b9:eb:31:e5:a4:51:be:64:a6:
76:0d:1c:4b:cd:fe:4a:04:46:d3:f3:81:c8:90:f4:08:17:f3:
f7:fb:01:6a:fe:86:c1:bf:be:ba:3b:8a:78:18:f4:6f:90:9c:
b1:04:b7:c9:f4:43:6c:e0:2b:d9:37:0b:f6:74:69:20:b4:5c:
12:4c:04:bf:20:b8:cf:b3:46:9c:16:f4:d9:41:8d:c0:87:66:
9e:14:d8:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ptb6oAtthVQVnExtDswnEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYmJkZDljZGQ2ODFmMDM0MzVkNjIzYzgzMTkzMGYyMjdm
MGI5YmYwHhcNMjYwNzIzMTYwMTIwWhcNMjYwNzI0MTYwMTIwWjAzMTEwLwYDVQQD
EyhhYTU2NjA4ODBkNjg5MTc1NGM2ZDRmODI1ZjkwNTI0OWY5MjRkMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowoninTQgutvuMJ9K7QtP2O3Z0vW
RDgiqT+m/tHfaKLhVaPhjFXts3g8g/qKdVY1ccGmCz+S8SCxqhu58m/5uOmp1mw0
KRPZd6dkQnmTsoOG106YNGcCqTXg/TFvaaV/KHNQkkTm74zLaNQpWRYmym7r1Q9/
u5rjfquA5uLXEyBYJdZTxO7emxf648K8PirI77g+VEZRQt46IV1WZtVclABlM9uC
8kUIISTCs+40qjj9cntz93NglpvsZZJ77iGBNLxTapi3k6adEdLa/X5lDVkWH/l0
a3xKxzTAzdJqhbxZ5hN6stCc699tKV/yF3x1iJx2TYu3wFJSO8DlNikDKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpWYIgNaJF1TG1Pgl+QUkn5JNHSMB8GA1UdIwQY
MBaAFNy73ZzdaB8DQ11iPIMZMPIn8Lm/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0x2ZG5OMW9Id05EWFdJOGd4a3c4aWZ3dWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84YWFhNTQtNDMxNS00OGQ0LTlmN2Et
ODk4NDY1ODJjYmFkLzEvM0x2ZG5OMW9Id05EWFdJOGd4a3c4aWZ3dWI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy84YWFhNTQtNDMxNS00OGQ0LTlmN2EtODk4NDY1ODJjYmFk
LzEvM0x2ZG5OMW9Id05EWFdJOGd4a3c4aWZ3dWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUvJj7dm
ZGgN5oIH3jZicSVQohQcX3jEs7UoaVKyQlgoKhLrrngghQYHbg5mXUccAkwSJ652
OHYopix287Gbe7R4rbvHJmDMWzxRJDDH4RRaZJCfFs4BNxAP6F1VBpKl01ZlJjsf
TS90pj3cxGXkALvCl7WYv921qBtkXMYi2/EHH1wZLGY3BF/pirBxolz3JwjZE2f6
LWKlDyu5Wsiv/s+88rfdNOPiFTOPuesx5aRRvmSmdg0cS83+SgRG0/OByJD0CBfz
9/sBav6Gwb++ujuKeBj0b5CcsQS3yfRDbOAr2TcL9nRpILRcEkwEvyC4z7NGnBb0
2UGNwIdmnhTYYw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:58:48 2026 by rpki-client