Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json)
Hash identifier: 00kdy7wQYPz2I+5GJu/L21geV+yXilbfpmjaNo4khkk=
Subject key identifier: A3:CA:40:7C:FC:F1:6A:97:41:C7:4C:1A:3C:92:45:DE:7C:09:B1:43
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial: 019F829E69DFAA85F38392A019A4754B9193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
Manifest number: 19C4
Signing time: Tue 21 Jul 2026 03:00:47 +0000
Manifest this update: Tue 21 Jul 2026 03:00:47 +0000
Manifest next update: Wed 22 Jul 2026 03:00:47 +0000
Files and hashes: 1: AmojMy3O0TzhYdnqQ_foiNeMfu0.roa (hash: NeSi6ZBMXloVln9cQN9LXVSt3sMQcF7jHdMdqk0HF3M=)
2: QxwdEpVgo81_-mwIpi91_VPBVXk.roa (hash: W+b58r8ZTGE9pnt5zsRnperhoba0alTWik9Mki5Rn8o=)
3: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: PBYgwjeEZ2lum3M+A90r9djmGqSHevMx6u6NtP/oCxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:9e:69:df:aa:85:f3:83:92:a0:19:a4:75:4b:91:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Validity
Not Before: Jul 21 03:00:47 2026 GMT
Not After : Jul 22 03:00:47 2026 GMT
Subject: CN=a3ca407cfcf16a9741c74c1a3c9245de7c09b143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b1:28:ff:01:30:84:a0:0a:dd:53:22:15:cf:
cb:15:40:13:2b:70:97:c4:d0:bc:74:bc:54:74:19:
07:3c:51:2d:a2:d6:e5:82:01:c2:1f:18:9e:39:b6:
7a:da:a0:c6:39:3d:fc:33:45:d6:e9:28:d0:41:f8:
03:fa:24:68:27:6e:fc:5d:57:be:4f:ad:d9:8e:19:
43:6e:ab:32:d5:33:97:c9:9a:4b:42:df:c8:12:44:
85:bc:1f:77:09:a9:8e:8c:b8:02:b2:b7:46:51:7c:
a5:3f:75:04:bb:16:fe:6b:17:f6:84:91:f7:de:bf:
7a:f5:b8:07:85:c7:31:53:bc:3c:d8:fc:e1:ac:44:
a4:d7:8f:f2:c8:df:88:28:c6:89:64:3b:4b:7e:b9:
b3:34:8e:54:8a:55:4f:48:be:79:27:6d:d9:cc:41:
b0:82:53:00:9c:65:6e:51:e9:ea:43:5f:5e:cd:70:
83:28:64:26:6a:a3:8f:c6:1e:69:9e:a8:74:1c:56:
db:6d:01:7d:da:3c:3d:93:df:f5:ba:a5:2f:2f:4c:
23:7f:0f:d2:dd:50:15:1a:bc:92:25:71:cf:7e:88:
c1:25:be:ea:06:78:f9:c7:f4:fc:cb:1f:eb:f5:41:
61:a5:a2:9a:0b:d1:c9:ff:8b:7d:c6:37:4e:d3:03:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CA:40:7C:FC:F1:6A:97:41:C7:4C:1A:3C:92:45:DE:7C:09:B1:43
X509v3 Authority Key Identifier:
keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:66:36:75:a7:21:79:b9:f4:28:be:92:a6:90:21:dc:a7:03:
82:f4:56:dd:66:65:84:b8:78:a3:e3:df:db:3b:d2:3c:f2:3f:
0e:94:a4:27:da:8a:a5:eb:8b:8d:de:63:47:16:45:ff:4f:c2:
27:b9:5a:61:e5:b3:30:e9:28:59:f3:42:d0:df:ac:ea:65:b3:
69:9d:59:f6:ab:e3:bd:94:25:aa:6b:52:ca:73:51:3c:5a:62:
45:e3:de:b7:c2:9e:6a:fa:e7:85:8a:dd:91:64:ab:b5:f3:ca:
61:a4:06:31:47:7d:4d:3f:c8:b5:12:c7:08:af:45:33:b3:47:
bb:3a:2d:c4:80:d3:0f:0b:ac:d5:7e:d4:c1:27:58:d9:04:82:
10:a1:7c:62:79:30:b1:99:82:4a:2d:3d:ec:4f:7e:e3:7b:c2:
ff:eb:68:45:9f:f9:51:bb:e1:b3:85:40:fe:c6:f3:eb:a6:cc:
19:c0:f4:24:51:4f:4f:d9:7b:60:dc:39:26:96:99:c5:3f:db:
c3:d9:3d:47:04:9e:47:29:20:96:e7:a7:62:7d:5a:97:84:e3:
2c:0d:bd:05:27:07:6f:35:59:87:1e:68:e2:e9:e9:e4:ae:dc:
64:80:c4:6d:62:4d:65:08:53:79:9f:a6:00:8d:10:74:12:cc:
6b:5b:4a:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+CnmnfqoXzg5KgGaR1S5GTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzBjYjBhNWUzYTRlNTMwODliNTFkZTlhMzcwYTVmMjMz
ODc0YzYwHhcNMjYwNzIxMDMwMDQ3WhcNMjYwNzIyMDMwMDQ3WjAzMTEwLwYDVQQD
EyhhM2NhNDA3Y2ZjZjE2YTk3NDFjNzRjMWEzYzkyNDVkZTdjMDliMTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bEo/wEwhKAK3VMiFc/LFUATK3CX
xNC8dLxUdBkHPFEtotblggHCHxieObZ62qDGOT38M0XW6SjQQfgD+iRoJ278XVe+
T63ZjhlDbqsy1TOXyZpLQt/IEkSFvB93CamOjLgCsrdGUXylP3UEuxb+axf2hJH3
3r969bgHhccxU7w82PzhrESk14/yyN+IKMaJZDtLfrmzNI5UilVPSL55J23ZzEGw
glMAnGVuUenqQ19ezXCDKGQmaqOPxh5pnqh0HFbbbQF92jw9k9/1uqUvL0wjfw/S
3VAVGrySJXHPfojBJb7qBnj5x/T8yx/r9UFhpaKaC9HJ/4t9xjdO0wPxjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPKQHz88WqXQcdMGjySRd58CbFDMB8GA1UdIwQY
MBaAFEtwywpeOk5TCJtR3po3Cl8jOHTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2Yt
Y2U1OTUyMmVmNjZmLzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2YtY2U1OTUyMmVmNjZm
LzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmY2dach
ebn0KL6SppAh3KcDgvRW3WZlhLh4o+Pf2zvSPPI/DpSkJ9qKpeuLjd5jRxZF/0/C
J7laYeWzMOkoWfNC0N+s6mWzaZ1Z9qvjvZQlqmtSynNRPFpiRePet8KeavrnhYrd
kWSrtfPKYaQGMUd9TT/ItRLHCK9FM7NHuzotxIDTDwus1X7UwSdY2QSCEKF8Ynkw
sZmCSi097E9+43vC/+toRZ/5Ubvhs4VA/sbz66bMGcD0JFFPT9l7YNw5JpaZxT/b
w9k9RwSeRykgluenYn1al4TjLA29BScHbzVZhx5o4unp5K7cZIDEbWJNZQhTeZ+m
AI0QdBLMa1tKCg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:56:28 2026 by rpki-client