
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
File: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft (raw, json)
Hash identifier: 8EUETKrhWTGQ1c0E/wkwWb5Zh1zZ2Y/jDE1iMB2zekc=
Subject key identifier: A6:6A:26:79:2B:35:A9:AD:3C:8C:56:9F:AE:59:67:0A:A5:FA:30:86
Authority key identifier: DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
Certificate issuer: /CN=dea85f21668a98d7e81a74183f0cce513086601b
Certificate serial: 019FFE374CCE21D3C552DE7AF7CD56A66288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
Manifest number: 0992
Signing time: Fri 14 Aug 2026 03:01:04 +0000
Manifest this update: Fri 14 Aug 2026 03:01:04 +0000
Manifest next update: Sat 15 Aug 2026 03:01:04 +0000
Files and hashes: 1: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl (hash: UK/aYTBvwrzEAu5zaRrXRJp/O4cDedZxJO/aErnUAGY=)
2: hBUefaIMV4VxrEK-fm1hTMzaWD8.roa (hash: ULTyVqCoLmJTp6EzOZiZ2uvQqGHDruUXv80DgFEK1ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:37:4c:ce:21:d3:c5:52:de:7a:f7:cd:56:a6:62:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea85f21668a98d7e81a74183f0cce513086601b
Validity
Not Before: Aug 14 03:01:04 2026 GMT
Not After : Aug 15 03:01:04 2026 GMT
Subject: CN=a66a26792b35a9ad3c8c569fae59670aa5fa3086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:8c:96:0b:57:0f:35:24:f4:62:7d:96:97:
18:11:d9:d0:07:a2:75:db:c7:89:45:05:c3:28:d0:
88:9e:a0:ae:c8:db:db:93:88:34:7e:f9:ef:b8:32:
47:81:95:c0:6a:32:57:bc:56:f3:a9:fb:09:6a:b6:
3e:e6:2a:ce:3a:61:40:0e:ed:d7:b8:f8:dc:e0:87:
ec:21:c6:60:ea:d2:9b:7c:b6:c6:9c:7e:6f:31:3d:
eb:c3:90:5b:d2:e5:93:f7:05:ac:f9:6d:67:4f:71:
c5:f4:c5:f1:21:f1:a3:47:19:1b:45:c5:15:d4:df:
e0:1a:6d:31:84:5d:52:4c:15:3a:5a:0a:99:d6:a9:
93:fb:87:40:e7:00:4e:28:40:15:a5:3c:66:b6:b6:
76:9e:f5:e9:ae:c6:2e:ec:bc:4f:46:89:7a:20:c0:
bf:0f:8a:c9:dc:3b:6e:f5:f6:65:f0:56:6b:4a:c1:
2a:30:59:af:15:3a:35:65:c8:0c:dd:4f:cf:99:eb:
81:41:95:1a:2d:78:d7:12:bc:46:a4:25:16:7c:0e:
44:e4:5b:11:81:7c:05:71:e4:ed:4b:ae:9b:6d:69:
04:f0:a3:de:e4:3d:c7:95:1e:11:63:79:9a:13:a9:
2a:ec:e0:30:f4:03:b1:39:4f:6b:79:72:2c:7d:0f:
e2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6A:26:79:2B:35:A9:AD:3C:8C:56:9F:AE:59:67:0A:A5:FA:30:86
X509v3 Authority Key Identifier:
keyid:DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fb:d6:54:cb:9f:13:9e:7a:2a:aa:1e:95:bc:6f:d3:63:fd:
97:ca:2a:8e:47:43:d4:43:ba:1f:d5:3e:51:05:60:a1:a7:8e:
53:db:66:1e:8d:fb:ed:2e:96:3c:86:1d:7b:47:ec:4a:51:3d:
00:60:7e:9a:85:01:a3:50:54:1d:d2:60:83:aa:0b:7f:19:96:
55:d0:0b:1e:b2:b3:c0:b3:8a:32:64:57:1a:38:0c:c9:3f:b1:
fe:29:05:62:78:5d:56:25:4b:0a:97:81:31:e3:9e:e8:28:bd:
14:ab:ad:30:66:eb:88:26:20:ea:7a:e6:95:d4:6c:7d:30:f5:
d2:ea:67:a7:3d:fa:41:2a:11:f4:4a:5a:e0:09:2f:c2:ac:ff:
bc:0f:b1:37:ae:87:a3:36:aa:a9:84:e3:3c:fe:4b:cd:7b:02:
93:a7:6d:b6:0c:d3:eb:d2:1a:88:f6:d9:b1:5a:30:e8:4a:d1:
4b:f5:37:4f:93:06:1f:35:02:98:46:69:c5:4b:01:a8:9c:96:
9a:cd:27:80:0a:98:3c:c6:bc:e8:37:e3:2b:ff:17:6f:21:54:
70:33:7e:02:f3:d0:39:c6:d8:41:ac:d6:73:ea:df:24:00:b7:
fc:47:69:b8:ab:41:4f:56:db:5f:95:d2:f8:ad:fc:c9:68:28:
7e:b6:e2:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/+N0zOIdPFUt56981WpmKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYTg1ZjIxNjY4YTk4ZDdlODFhNzQxODNmMGNjZTUxMzA4
NjYwMWIwHhcNMjYwODE0MDMwMTA0WhcNMjYwODE1MDMwMTA0WjAzMTEwLwYDVQQD
EyhhNjZhMjY3OTJiMzVhOWFkM2M4YzU2OWZhZTU5NjcwYWE1ZmEzMDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZWMlgtXDzUk9GJ9lpcYEdnQB6J1
28eJRQXDKNCInqCuyNvbk4g0fvnvuDJHgZXAajJXvFbzqfsJarY+5irOOmFADu3X
uPjc4IfsIcZg6tKbfLbGnH5vMT3rw5Bb0uWT9wWs+W1nT3HF9MXxIfGjRxkbRcUV
1N/gGm0xhF1STBU6WgqZ1qmT+4dA5wBOKEAVpTxmtrZ2nvXprsYu7LxPRol6IMC/
D4rJ3Dtu9fZl8FZrSsEqMFmvFTo1ZcgM3U/PmeuBQZUaLXjXErxGpCUWfA5E5FsR
gXwFceTtS66bbWkE8KPe5D3HlR4RY3maE6kq7OAw9AOxOU9reXIsfQ/ivwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZqJnkrNamtPIxWn65ZZwql+jCGMB8GA1UdIwQY
MBaAFN6oXyFmipjX6Bp0GD8MzlEwhmAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3FoZklXYUttTmZvR25RWVB3ek9VVENHWUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85NDlkYWEtMWVkMS00MDg4LTljNGIt
NTJmOGZmMThkMDY5LzEvM3FoZklXYUttTmZvR25RWVB3ek9VVENHWUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85NDlkYWEtMWVkMS00MDg4LTljNGItNTJmOGZmMThkMDY5
LzEvM3FoZklXYUttTmZvR25RWVB3ek9VVENHWUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvvWVMuf
E556Kqoelbxv02P9l8oqjkdD1EO6H9U+UQVgoaeOU9tmHo377S6WPIYde0fsSlE9
AGB+moUBo1BUHdJgg6oLfxmWVdALHrKzwLOKMmRXGjgMyT+x/ikFYnhdViVLCpeB
MeOe6Ci9FKutMGbriCYg6nrmldRsfTD10upnpz36QSoR9Epa4Akvwqz/vA+xN66H
ozaqqYTjPP5LzXsCk6dttgzT69IaiPbZsVow6ErRS/U3T5MGHzUCmEZpxUsBqJyW
ms0ngAqYPMa86DfjK/8XbyFUcDN+AvPQOcbYQazWc+rfJAC3/EdpuKtBT1bbX5XS
+K38yWgofrbirQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 06:11:20 2026 by rpki-client