Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
File: t3FF0lazJRKdNodQzr9JIhtrV8I.mft (raw, json)
Hash identifier: atxBkU09EIFrSNAQ/XJAS1ETMmKiXo8vWZT78sOoko4=
Subject key identifier: 25:BE:5C:58:EA:1C:50:B8:73:26:A9:60:B2:26:12:C7:52:6C:AD:5F
Authority key identifier: B7:71:45:D2:56:B3:25:12:9D:36:87:50:CE:BF:49:22:1B:6B:57:C2
Certificate issuer: /CN=b77145d256b325129d368750cebf49221b6b57c2
Certificate serial: 019F8FB4F169E97869152FD5056EB210D93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
Manifest number: 0142
Signing time: Thu 23 Jul 2026 16:00:27 +0000
Manifest this update: Thu 23 Jul 2026 16:00:27 +0000
Manifest next update: Fri 24 Jul 2026 16:00:27 +0000
Files and hashes: 1: t3FF0lazJRKdNodQzr9JIhtrV8I.crl (hash: 5fzcRhCN93Pr6j4J+TtKsm889Q8W3910X13CIU9m59M=)
2: wRfcorFgN2_ON_mjlaFktvT4uRU.asa (hash: ZHtKh7SS42pxcreIiENfq4OCbEUkP3XNxuPYX52/7jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:f1:69:e9:78:69:15:2f:d5:05:6e:b2:10:d9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77145d256b325129d368750cebf49221b6b57c2
Validity
Not Before: Jul 23 16:00:27 2026 GMT
Not After : Jul 24 16:00:27 2026 GMT
Subject: CN=25be5c58ea1c50b87326a960b22612c7526cad5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b5:20:4d:e0:74:ce:65:df:5d:4a:f0:68:2b:
52:be:25:7b:ac:aa:ac:8a:75:2f:88:27:15:91:1f:
51:31:1a:10:76:4c:3a:fb:6b:e1:b5:d5:b7:a2:44:
00:cd:8c:d5:a4:4b:59:52:90:ad:a8:1f:f7:16:7f:
fb:d2:8e:d4:d0:98:db:aa:9b:5e:94:45:4a:7f:8b:
09:10:70:97:d7:e1:83:74:a4:d3:0b:7b:ba:84:2d:
24:ed:ba:bc:4d:6c:7d:00:a9:c4:06:2c:7f:ed:ea:
fc:d1:ba:08:48:6c:ae:00:d4:84:5b:97:55:70:7a:
ae:f4:02:31:a2:95:f8:32:29:28:73:19:de:b4:ee:
e1:54:f3:62:a8:53:a1:98:a9:53:c9:cd:f0:0a:9c:
b5:3b:8a:87:ca:91:80:a0:f8:0e:b9:a0:98:12:64:
d6:1c:8c:06:db:86:96:a0:d4:e1:04:9f:4a:8b:28:
fa:64:41:fb:46:12:af:62:29:8b:cf:ce:2e:fa:f0:
79:f5:c2:05:54:43:d4:6a:85:3e:e6:cf:a8:95:c8:
2e:4e:49:b8:b5:2b:2a:af:65:bd:ec:eb:09:0f:fd:
d8:22:1c:a3:71:1c:5d:e7:5d:8f:f0:21:bc:0a:68:
8d:26:98:1f:c0:8e:49:9e:fe:e1:a4:44:97:d9:4d:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BE:5C:58:EA:1C:50:B8:73:26:A9:60:B2:26:12:C7:52:6C:AD:5F
X509v3 Authority Key Identifier:
keyid:B7:71:45:D2:56:B3:25:12:9D:36:87:50:CE:BF:49:22:1B:6B:57:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3FF0lazJRKdNodQzr9JIhtrV8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662db3-babb-4f7d-bdf6-a70ab71cfeaf/1/t3FF0lazJRKdNodQzr9JIhtrV8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c9:ca:db:f6:bc:d9:6e:a8:0c:41:9e:33:51:0f:24:d1:c6:
fd:e6:78:38:d4:14:17:2d:df:53:c6:05:67:d7:e9:81:5c:49:
9c:6a:69:51:69:b4:7a:a5:a9:bc:12:04:d5:0b:2e:cd:f5:7d:
ce:73:eb:5d:12:56:b0:d2:46:1d:f8:2e:78:a8:25:b0:70:39:
b1:f7:5f:df:64:4a:1e:93:fa:6d:6c:37:83:44:77:c1:02:ab:
6d:13:a5:b8:8f:bf:b9:9f:ef:17:ea:b4:f5:3e:f8:36:93:41:
d7:36:6f:80:26:ac:3e:df:b8:95:37:2a:75:91:65:01:c7:4c:
5d:15:05:9d:83:c1:45:14:23:a0:12:37:7d:48:aa:85:0d:f6:
41:82:8b:18:8a:20:b5:4a:37:98:3c:bc:fb:88:5e:2b:ed:09:
2b:cf:fa:1b:f8:f6:28:1e:02:ff:f7:1c:63:54:0c:d4:f5:a4:
b2:f4:74:28:bd:5a:94:3f:b8:e4:ff:18:94:cf:49:da:f0:f0:
fe:1d:b2:82:88:dd:f8:a9:51:13:79:3a:49:e7:f6:8c:51:cb:
29:bb:97:ed:5d:22:da:3a:bb:7d:31:1a:3a:5b:c3:88:36:c4:
b6:97:eb:fe:2c:a5:5f:b4:b4:88:05:73:6e:6b:66:48:ca:06:
fb:89:35:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtPFp6XhpFS/VBW6yENk9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NzE0NWQyNTZiMzI1MTI5ZDM2ODc1MGNlYmY0OTIyMWI2
YjU3YzIwHhcNMjYwNzIzMTYwMDI3WhcNMjYwNzI0MTYwMDI3WjAzMTEwLwYDVQQD
EygyNWJlNWM1OGVhMWM1MGI4NzMyNmE5NjBiMjI2MTJjNzUyNmNhZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LUgTeB0zmXfXUrwaCtSviV7rKqs
inUviCcVkR9RMRoQdkw6+2vhtdW3okQAzYzVpEtZUpCtqB/3Fn/70o7U0Jjbqpte
lEVKf4sJEHCX1+GDdKTTC3u6hC0k7bq8TWx9AKnEBix/7er80boISGyuANSEW5dV
cHqu9AIxopX4MikocxnetO7hVPNiqFOhmKlTyc3wCpy1O4qHypGAoPgOuaCYEmTW
HIwG24aWoNThBJ9Kiyj6ZEH7RhKvYimLz84u+vB59cIFVEPUaoU+5s+olcguTkm4
tSsqr2W97OsJD/3YIhyjcRxd512P8CG8CmiNJpgfwI5Jnv7hpESX2U2JtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCW+XFjqHFC4cyapYLImEsdSbK1fMB8GA1UdIwQY
MBaAFLdxRdJWsyUSnTaHUM6/SSIba1fCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNGRjBsYXpKUktkTm9kUXpyOUpJaHRyVjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82NjJkYjMtYmFiYi00ZjdkLWJkZjYt
YTcwYWI3MWNmZWFmLzEvdDNGRjBsYXpKUktkTm9kUXpyOUpJaHRyVjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82NjJkYjMtYmFiYi00ZjdkLWJkZjYtYTcwYWI3MWNmZWFm
LzEvdDNGRjBsYXpKUktkTm9kUXpyOUpJaHRyVjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcnK2/a8
2W6oDEGeM1EPJNHG/eZ4ONQUFy3fU8YFZ9fpgVxJnGppUWm0eqWpvBIE1QsuzfV9
znPrXRJWsNJGHfgueKglsHA5sfdf32RKHpP6bWw3g0R3wQKrbROluI+/uZ/vF+q0
9T74NpNB1zZvgCasPt+4lTcqdZFlAcdMXRUFnYPBRRQjoBI3fUiqhQ32QYKLGIog
tUo3mDy8+4heK+0JK8/6G/j2KB4C//ccY1QM1PWksvR0KL1alD+45P8YlM9J2vDw
/h2ygojd+KlRE3k6Sef2jFHLKbuX7V0i2jq7fTEaOlvDiDbEtpfr/iylX7S0iAVz
bmtmSMoG+4k17Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:34 2026 by rpki-client