Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
File: 3oP6K0srlD39oVEaUvz5hQb85DE.mft (raw, json)
Hash identifier: lKGKXTUnxdSIgxevCzY5u4nniANaXssso0+2Aqo9PZw=
Subject key identifier: FB:19:01:5C:0C:6A:D3:22:38:0D:3E:46:4B:D6:E8:4F:9C:27:A7:04
Authority key identifier: DE:83:FA:2B:4B:2B:94:3D:FD:A1:51:1A:52:FC:F9:85:06:FC:E4:31
Certificate issuer: /CN=de83fa2b4b2b943dfda1511a52fcf98506fce431
Certificate serial: 019F8F7E1E1104F350CBD2DA588D0B6498D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:34 +0000
Manifest this update: Thu 23 Jul 2026 15:00:34 +0000
Manifest next update: Fri 24 Jul 2026 15:00:34 +0000
Files and hashes: 1: 0Ii_2lRksDYCD7Qj_i2q75d4CtM.roa (hash: P9L50eNN14lUjBWYXaCW+6iI/YYEVPyia14M/YoQ9Ec=)
2: 3oP6K0srlD39oVEaUvz5hQb85DE.crl (hash: zh8HJts9+GpsHW4MkUqIfIxagFf6L7Uow6R/a/sasL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:1e:11:04:f3:50:cb:d2:da:58:8d:0b:64:98:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de83fa2b4b2b943dfda1511a52fcf98506fce431
Validity
Not Before: Jul 23 15:00:34 2026 GMT
Not After : Jul 24 15:00:34 2026 GMT
Subject: CN=fb19015c0c6ad322380d3e464bd6e84f9c27a704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:b4:96:4b:8b:29:eb:2c:e3:92:3e:6b:dd:
9a:69:84:ed:12:8e:88:1e:f9:05:c5:c8:9b:3b:53:
2c:78:d5:42:66:d0:94:0d:71:5e:67:73:77:27:94:
39:a3:d3:10:f2:82:ac:e8:35:a8:18:41:da:14:a6:
b6:e2:43:0c:90:d1:c8:16:bd:f0:f6:e1:cc:20:35:
62:a4:3e:c8:20:01:53:93:00:4d:86:93:18:1b:d7:
b1:71:ed:07:45:d7:5b:eb:2b:b0:b4:de:96:e0:87:
74:ec:71:90:3e:f4:0c:be:e5:0d:51:28:0f:cc:be:
71:67:fd:d6:3d:1e:36:f3:9f:df:dc:c2:87:9e:3d:
1c:76:b8:c4:d5:25:bd:42:b0:6a:98:2b:16:15:26:
a3:c8:c8:d6:4b:e9:0f:97:dd:5a:ff:45:ba:68:69:
5f:e8:b7:5a:30:3a:31:c6:ca:98:37:ea:e1:42:93:
87:b4:06:4c:62:3e:44:85:93:c8:43:ee:45:55:c2:
a4:a3:1a:61:6e:66:ac:c3:6b:17:dd:4f:49:3c:5e:
78:be:72:94:aa:c5:1a:ad:a9:ee:44:4d:42:df:0f:
62:c8:6c:57:71:97:ec:84:9d:59:5e:9e:26:a4:4b:
17:a0:13:b3:30:4d:fa:22:37:43:08:36:1e:9c:83:
8f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:19:01:5C:0C:6A:D3:22:38:0D:3E:46:4B:D6:E8:4F:9C:27:A7:04
X509v3 Authority Key Identifier:
keyid:DE:83:FA:2B:4B:2B:94:3D:FD:A1:51:1A:52:FC:F9:85:06:FC:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f9:ce:93:53:3f:c9:04:66:2c:56:6f:45:e9:d5:b2:97:c5:
26:26:ad:74:00:8f:79:ee:3c:e8:d7:7a:8d:6e:c4:69:48:48:
32:27:aa:e9:ee:20:38:0f:17:92:0f:33:bf:8a:9a:50:eb:f6:
04:70:98:d4:a3:01:0d:2b:57:01:5c:48:d9:c6:98:0c:ff:e0:
cc:7e:43:b7:eb:3e:92:a2:50:64:52:fe:8a:33:bc:1a:a6:c8:
90:e8:46:8e:8b:c5:28:eb:60:a7:70:63:0f:d8:c5:33:21:0a:
2f:b8:2d:92:65:3c:21:cc:af:9a:b5:7e:5d:99:fd:d1:99:b3:
9b:e1:f8:c4:80:be:95:fc:f4:d3:47:75:a7:39:8a:1a:95:ba:
74:5e:e3:02:2a:75:65:0f:54:03:e1:cc:71:98:39:cb:2e:d3:
5b:3a:c6:25:ba:2d:19:e9:58:da:ad:90:f1:8c:5a:1b:c7:1c:
06:98:73:58:29:76:1d:51:c3:a5:27:d8:a9:96:de:36:8c:3a:
29:d1:b6:12:16:16:c5:58:be:1f:be:6c:34:7b:8c:b8:f8:ac:
91:1d:1b:0d:fe:89:16:b7:26:3a:65:7b:a4:40:c5:a4:d2:b5:
32:f2:9b:d6:f7:72:c8:27:c8:1f:fb:f3:75:bc:dd:2e:fe:51:
77:e5:b4:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pfh4RBPNQy9LaWI0LZJjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlODNmYTJiNGIyYjk0M2RmZGExNTExYTUyZmNmOTg1MDZm
Y2U0MzEwHhcNMjYwNzIzMTUwMDM0WhcNMjYwNzI0MTUwMDM0WjAzMTEwLwYDVQQD
EyhmYjE5MDE1YzBjNmFkMzIyMzgwZDNlNDY0YmQ2ZTg0ZjljMjdhNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZy0lkuLKess45I+a92aaYTtEo6I
HvkFxcibO1MseNVCZtCUDXFeZ3N3J5Q5o9MQ8oKs6DWoGEHaFKa24kMMkNHIFr3w
9uHMIDVipD7IIAFTkwBNhpMYG9exce0HRddb6yuwtN6W4Id07HGQPvQMvuUNUSgP
zL5xZ/3WPR4285/f3MKHnj0cdrjE1SW9QrBqmCsWFSajyMjWS+kPl91a/0W6aGlf
6LdaMDoxxsqYN+rhQpOHtAZMYj5EhZPIQ+5FVcKkoxphbmasw2sX3U9JPF54vnKU
qsUaranuRE1C3w9iyGxXcZfshJ1ZXp4mpEsXoBOzME36IjdDCDYenIOPiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsZAVwMatMiOA0+RkvW6E+cJ6cEMB8GA1UdIwQY
MBaAFN6D+itLK5Q9/aFRGlL8+YUG/OQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM29QNkswc3JsRDM5b1ZFYVV2ejVoUWI4NURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iZGEzZWYtNGEyZi00Y2NjLWIyOTUt
YjIyZWI5NDg1MTVjLzEvM29QNkswc3JsRDM5b1ZFYVV2ejVoUWI4NURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9iZGEzZWYtNGEyZi00Y2NjLWIyOTUtYjIyZWI5NDg1MTVj
LzEvM29QNkswc3JsRDM5b1ZFYVV2ejVoUWI4NURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt/nOk1M/
yQRmLFZvRenVspfFJiatdACPee486Nd6jW7EaUhIMieq6e4gOA8Xkg8zv4qaUOv2
BHCY1KMBDStXAVxI2caYDP/gzH5Dt+s+kqJQZFL+ijO8GqbIkOhGjovFKOtgp3Bj
D9jFMyEKL7gtkmU8IcyvmrV+XZn90Zmzm+H4xIC+lfz000d1pzmKGpW6dF7jAip1
ZQ9UA+HMcZg5yy7TWzrGJbotGelY2q2Q8YxaG8ccBphzWCl2HVHDpSfYqZbeNow6
KdG2EhYWxVi+H75sNHuMuPiskR0bDf6JFrcmOmV7pEDFpNK1MvKb1vdyyCfIH/vz
dbzdLv5Rd+W0bg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:55 2026 by rpki-client