Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
File: 3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json)
Hash identifier: VolyegKCAO9RY3zEDEk+ktLlcLtcgggZrJfgonVMN0c=
Subject key identifier: 52:48:2B:93:59:D6:9F:48:20:36:03:A8:98:46:43:E0:1E:F5:77:DE
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 019FCB25DC81740C031037B5DB94D90B4B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
Manifest number: 1953
Signing time: Tue 04 Aug 2026 05:01:23 +0000
Manifest this update: Tue 04 Aug 2026 05:01:23 +0000
Manifest next update: Wed 05 Aug 2026 05:01:23 +0000
Files and hashes: 1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: wrVbDsBqHGx12MODA/AkCp0OEdXoLrkajDQ4s2hV03s=)
2: 7UD9mSTFV8lFN4ROehlHuZ5VKzk.roa (hash: 7/SDaPbxGJSgvje7ZyVfzpaTxUzpeca2cxXLtLcUMNc=)
3: 9QdlknWZ4OMboGxjAADXJxO9UPA.roa (hash: sI6mV2VF/PMi0q/p4atmEH2bb6DPFyZGr7glssOf33c=)
4: WNlY6EleMRRBrp6sZUEH7DxvZlc.roa (hash: dLCuSMcuIVzwoKSwK9PkR1g78fv8OGI64PcrszyfgyA=)
5: ekV3uRphNew5aOcMQo-s8iHH-AY.roa (hash: FE+IQctGJcO3sSaP7HNmckkGvxU4kU9yBANBqpeU4lI=)
6: f4_ZJ0TCTzsSkqudnJSIXp4bLQ0.roa (hash: W6ac4Me1PrNz+AfdrWTNIVyjCCLobhnKb0ISiPAW2p8=)
7: nWay-kjM-uXQonlEIzksgPJ2hIY.roa (hash: QNv+cuZE5AYtfPUCgiQFK8fsilnJCXuMMkCSBo7INTo=)
8: trpSFTYBfP1Vvg7yfH-5OGH9MeQ.roa (hash: VU1m0yBvVvk7PN74r9OfMGcifzfFHUwb4uMDuxPUkZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:25:dc:81:74:0c:03:10:37:b5:db:94:d9:0b:4b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Aug 4 05:01:23 2026 GMT
Not After : Aug 5 05:01:23 2026 GMT
Subject: CN=52482b9359d69f48203603a8984643e01ef577de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:c4:72:d7:22:3e:d3:07:b3:66:d1:1c:e4:
a6:ee:e3:ce:08:81:84:0b:98:b9:24:b4:4b:50:3a:
c3:4c:26:e4:33:c3:ea:6f:e8:a9:d3:6d:94:ff:1d:
47:88:b1:7e:b9:0c:98:12:91:60:4a:c1:6b:1f:de:
9e:bc:9d:6e:f5:8b:09:3d:5f:9c:d7:0a:ae:5f:1c:
47:8c:bc:ba:b3:64:14:c2:78:63:ef:5a:21:10:2c:
0a:27:98:f2:5b:be:f9:5e:11:8c:03:83:ec:92:6f:
f5:4f:72:6d:fb:5d:41:1f:f4:93:59:29:af:2b:aa:
35:d6:92:df:b1:8d:08:ef:8d:ad:6d:41:81:9e:df:
06:c9:0a:04:3a:f3:e0:a0:14:9f:5f:37:1c:fb:51:
a9:cf:c4:c6:da:fd:b8:d5:f1:ef:b4:ca:e2:1f:e3:
9f:f9:c8:83:b2:74:07:ab:70:5a:27:b3:d2:4e:f0:
9c:8e:31:bb:2a:1e:1d:ba:bb:ee:bf:7d:7f:de:c3:
1f:b7:e4:62:78:89:de:2c:f9:75:ca:7b:89:ad:bd:
a5:8e:b1:4b:b9:65:f0:70:9c:ae:b6:b4:b2:b1:15:
20:51:b6:fa:ac:e2:2f:50:e0:7f:0c:ec:4c:69:f4:
6b:9c:42:8c:ab:8a:10:5f:a7:a7:5b:09:bb:95:af:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:48:2B:93:59:D6:9F:48:20:36:03:A8:98:46:43:E0:1E:F5:77:DE
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b5:06:63:d0:bf:7f:69:61:8a:93:88:be:61:60:a8:a8:2d:
5b:83:bb:5d:ab:ae:39:53:d8:51:98:0c:c0:fc:61:77:75:b9:
08:57:77:a0:2b:00:f6:94:61:3d:e7:3e:e4:7b:85:c3:e4:b3:
bb:9f:4b:f1:e3:f7:a8:b0:8b:f4:10:23:99:af:a5:dc:f3:31:
7e:60:18:c5:6d:48:90:38:a2:ba:0b:3f:0a:01:e2:81:eb:d1:
bc:75:8d:de:bb:43:1b:d0:74:37:29:49:8b:81:2b:d4:f1:eb:
79:b1:75:6c:a7:37:b4:4f:95:04:6c:8a:0e:15:58:fc:bc:61:
24:0f:a7:f7:33:9e:dd:95:bd:44:67:24:ff:51:2a:5e:45:a5:
0a:03:04:99:ce:57:17:1c:8b:43:59:c2:d0:59:21:17:75:bf:
16:9c:46:75:ca:1b:b3:85:14:95:ac:08:25:64:8b:ca:8f:f0:
5c:f2:8d:5d:37:ad:c3:c6:4e:9d:4f:aa:d2:4f:83:b8:cb:45:
92:a4:15:15:c9:9f:f9:ce:05:82:f5:fc:29:4c:4a:2a:82:1b:
4e:9d:72:d0:eb:01:56:b1:c6:ed:a4:7d:83:e5:45:3b:00:c4:
73:8b:ec:50:dd:4a:92:f9:13:83:11:15:cf:53:90:37:9d:4e:
1c:d0:e3:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/LJdyBdAwDEDe125TZC0uYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjYwODA0MDUwMTIzWhcNMjYwODA1MDUwMTIzWjAzMTEwLwYDVQQD
Eyg1MjQ4MmI5MzU5ZDY5ZjQ4MjAzNjAzYTg5ODQ2NDNlMDFlZjU3N2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJPEctciPtMHs2bRHOSm7uPOCIGE
C5i5JLRLUDrDTCbkM8Pqb+ip022U/x1HiLF+uQyYEpFgSsFrH96evJ1u9YsJPV+c
1wquXxxHjLy6s2QUwnhj71ohECwKJ5jyW775XhGMA4Pskm/1T3Jt+11BH/STWSmv
K6o11pLfsY0I742tbUGBnt8GyQoEOvPgoBSfXzcc+1Gpz8TG2v241fHvtMriH+Of
+ciDsnQHq3BaJ7PSTvCcjjG7Kh4durvuv31/3sMft+RieIneLPl1ynuJrb2ljrFL
uWXwcJyutrSysRUgUbb6rOIvUOB/DOxMafRrnEKMq4oQX6enWwm7la9DoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJIK5NZ1p9IIDYDqJhGQ+Ae9XfeMB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7UGY9C/
f2lhipOIvmFgqKgtW4O7XauuOVPYUZgMwPxhd3W5CFd3oCsA9pRhPec+5HuFw+Sz
u59L8eP3qLCL9BAjma+l3PMxfmAYxW1IkDiiugs/CgHigevRvHWN3rtDG9B0NylJ
i4Er1PHrebF1bKc3tE+VBGyKDhVY/LxhJA+n9zOe3ZW9RGck/1EqXkWlCgMEmc5X
FxyLQ1nC0FkhF3W/FpxGdcobs4UUlawIJWSLyo/wXPKNXTetw8ZOnU+q0k+DuMtF
kqQVFcmf+c4FgvX8KUxKKoIbTp1y0OsBVrHG7aR9g+VFOwDEc4vsUN1KkvkTgxEV
z1OQN51OHNDjLQ==
-----END CERTIFICATE-----
Generated at Tue Aug 4 08:47:57 2026 by rpki-client