Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier: idvdj1wdXJvtXnEkKvir835ZXC2rn2CaK637nvwCF5k=
Subject key identifier: 8E:F9:0D:1E:03:09:3F:25:A5:EC:36:ED:1D:11:47:1B:6B:AF:98:70
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 019F11F7F49D165F8AAA6B8FD349106E4640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number: 0FB4
Signing time: Mon 29 Jun 2026 06:01:30 +0000
Manifest this update: Mon 29 Jun 2026 06:01:30 +0000
Manifest next update: Tue 30 Jun 2026 06:01:30 +0000
Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: OmxCtuvhBF74herZ/YHunI3qTzHC3QlrqdJItXUfQBU=)
2: FvI2CfBEqCGxOU9VxVGUHdHpoa4.asa (hash: ap5sRIAkxp5GHqQokYSc9SeMBeiP5/U/kzY0Z/xAVTA=)
3: H5QErsI5RrGZOHFY6_FrSzEPwsg.roa (hash: BTdVxM8rbJfdiUp2j6fzsOE0ajTe0wntltZ6HVxnZpM=)
4: UtbWjP8TosULXxgOwSpGBsXAj1E.asa (hash: e7BKC4GZaIVKdGVBnnQIPsiQuksngCu2TeIqsWJLAi4=)
5: aAEGzSQAFN3XfOJTKzynLK0MJWQ.roa (hash: HGx+oxdetMBYVjpIjo60Q4M2urPI2bwYBUq579gQfFA=)
6: b7KDZwK5R28lE5M6tD1UYAgLTs0.roa (hash: chq9h/QyXrEES2o8hWXwMO8b44fg7JP3nOh0+1DILZ0=)
7: iTAqvs2G1UdUfx5Fmn2Z7H7-Wuo.roa (hash: L18Wb/sBRdrTPyOX3b7ZSqqO81GWE2YfQWPbOKytco8=)
8: n8wKAbeQwoniSlzobzWQkZPFQ90.roa (hash: gAASzqy3Nb3k3RF3IE7AiqoPFAF8THLrgzOMP+9Awr8=)
9: rxo-kMSJfYbIjml0McyLHchnJKw.roa (hash: 6yBdVD63LgbBLLvhVAYIbiNVvZCYYH7FdQZFXoIkCTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:f4:9d:16:5f:8a:aa:6b:8f:d3:49:10:6e:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Jun 29 06:01:30 2026 GMT
Not After : Jun 30 06:01:30 2026 GMT
Subject: CN=8ef90d1e03093f25a5ec36ed1d11471b6baf9870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d2:ca:63:77:bb:8f:af:0c:ff:f2:68:8c:73:
6d:c7:03:59:6f:a0:f9:a7:04:25:48:fb:fd:2c:91:
73:50:44:60:ca:8a:0f:4c:ed:52:ad:6f:f6:f3:aa:
c9:2f:89:f4:f4:a0:e7:8d:34:56:e5:81:3c:d0:88:
46:f8:4d:e0:39:10:8c:be:cd:8b:4e:5a:f3:bd:e3:
89:8c:f9:00:3f:1d:a3:bf:6d:e3:9b:40:9d:7c:c0:
49:ca:12:40:62:d6:e4:58:28:af:8c:e0:f3:8e:71:
99:44:15:5a:05:27:87:d4:1d:8e:02:7d:87:81:2a:
7e:36:b5:42:9c:9f:19:f0:87:c5:ca:68:7d:81:f8:
04:5e:f7:26:f5:e6:36:bb:c4:c9:1c:5e:29:9c:98:
4c:d2:fa:1c:a5:2e:21:cc:20:66:b1:64:17:82:70:
c9:75:92:15:bf:4d:f1:e7:c6:84:0b:30:61:d4:ef:
bb:78:23:2d:12:32:10:dc:02:6a:ed:5f:a0:83:41:
56:fa:47:0b:46:c0:08:37:7a:6e:74:61:53:45:69:
95:5b:0d:a0:ba:41:73:8f:94:66:ca:b1:b5:e5:f0:
59:7b:9a:55:d7:3b:95:81:f1:72:b5:dd:cf:25:78:
94:79:e2:cf:82:1d:d2:14:eb:b0:46:40:df:cc:d9:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F9:0D:1E:03:09:3F:25:A5:EC:36:ED:1D:11:47:1B:6B:AF:98:70
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:3a:6d:8a:3e:86:71:20:cb:62:ef:26:ce:c2:20:6b:3c:1b:
52:7c:70:5f:74:4b:ef:b9:ff:22:6e:13:89:06:de:3a:49:d6:
c9:dd:d4:63:f9:d9:7c:88:3a:7f:57:0d:0e:1e:6c:83:fc:bc:
5a:47:01:c2:08:80:5f:b2:49:2b:c6:99:c8:0e:80:71:b9:ae:
1a:e0:cf:cd:22:46:ab:87:5c:84:ca:49:81:cc:2c:3f:46:ec:
bd:3c:5b:f3:10:13:a8:f7:0c:e9:b6:f6:e8:49:5e:5b:80:8e:
0c:57:8f:fa:f0:d5:56:3d:dc:e6:a4:f5:91:09:b2:e6:ea:1d:
e8:44:2d:30:fa:01:19:7a:1f:0a:d4:0d:4f:7c:bb:fb:46:2d:
27:b4:72:b2:8e:90:d5:0b:bf:89:ad:11:0f:bb:12:ee:8a:e2:
af:7b:09:d5:ea:0a:14:71:5f:b5:36:a8:ca:2a:7f:5d:d6:43:
85:c7:9d:87:a1:87:47:45:5c:ef:0e:be:89:3a:1e:55:40:4d:
77:03:d4:21:7f:18:4e:23:eb:da:e7:01:f2:fc:09:5e:72:f0:
90:d4:36:a1:fb:f5:01:b8:11:06:81:19:ce:f0:d9:25:ee:d9:
69:27:69:27:2d:c7:85:1d:cb:0d:2f:ca:c8:bf:ea:0b:05:d2:
fe:25:47:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8R9/SdFl+KqmuP00kQbkZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGRjYjU2Zjc5ZjRhMWRlZDhkOTU0ODIzMzM5NjFkMDI2
NGZhYTUwHhcNMjYwNjI5MDYwMTMwWhcNMjYwNjMwMDYwMTMwWjAzMTEwLwYDVQQD
Eyg4ZWY5MGQxZTAzMDkzZjI1YTVlYzM2ZWQxZDExNDcxYjZiYWY5ODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NLKY3e7j68M//JojHNtxwNZb6D5
pwQlSPv9LJFzUERgyooPTO1SrW/286rJL4n09KDnjTRW5YE80IhG+E3gORCMvs2L
TlrzveOJjPkAPx2jv23jm0CdfMBJyhJAYtbkWCivjODzjnGZRBVaBSeH1B2OAn2H
gSp+NrVCnJ8Z8IfFymh9gfgEXvcm9eY2u8TJHF4pnJhM0vocpS4hzCBmsWQXgnDJ
dZIVv03x58aECzBh1O+7eCMtEjIQ3AJq7V+gg0FW+kcLRsAIN3pudGFTRWmVWw2g
ukFzj5RmyrG15fBZe5pV1zuVgfFytd3PJXiUeeLPgh3SFOuwRkDfzNnQfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI75DR4DCT8lpew27R0RRxtrr5hwMB8GA1UdIwQY
MBaAFN1Ny1b3n0od7Y2VSCMzlh0CZPqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2Yt
MTc3YjViYTMyMzI3LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2YtMTc3YjViYTMyMzI3
LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxDptij6G
cSDLYu8mzsIgazwbUnxwX3RL77n/Im4TiQbeOknWyd3UY/nZfIg6f1cNDh5sg/y8
WkcBwgiAX7JJK8aZyA6AcbmuGuDPzSJGq4dchMpJgcwsP0bsvTxb8xATqPcM6bb2
6EleW4CODFeP+vDVVj3c5qT1kQmy5uod6EQtMPoBGXofCtQNT3y7+0YtJ7Ryso6Q
1Qu/ia0RD7sS7orir3sJ1eoKFHFftTaoyip/XdZDhcedh6GHR0Vc7w6+iToeVUBN
dwPUIX8YTiPr2ucB8vwJXnLwkNQ2ofv1AbgRBoEZzvDZJe7ZaSdpJy3HhR3LDS/K
yL/qCwXS/iVH+Q==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:34 2026 by rpki-client