Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
File: 3-KkwH5N3j8ePKw5ujshNTGsy7k.mft (raw, json)
Hash identifier: RRokGnj7DIuu/7Pyg9nPqbh8Bq+PIALVYcnYNJxFPAs=
Subject key identifier: FF:8D:43:23:79:28:B0:32:B4:DF:77:CC:D3:50:5E:09:A2:C1:67:90
Authority key identifier: DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
Certificate issuer: /CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Certificate serial: 019F9FCD5C9E1AE99BA8B2ADDBD6E69FAC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
Manifest number: 017D
Signing time: Sun 26 Jul 2026 19:01:03 +0000
Manifest this update: Sun 26 Jul 2026 19:01:03 +0000
Manifest next update: Mon 27 Jul 2026 19:01:03 +0000
Files and hashes: 1: 3-KkwH5N3j8ePKw5ujshNTGsy7k.crl (hash: tQZxI7/IoMRhRAEVq9QcJgNk2KgYmSj5zVda8IHWDQE=)
2: Bq6stHEFxMFxnWEoWkNnr2q_nfU.roa (hash: FRvotk1GU1c0bgTGRLjQpv9XYU8csQF9vIzVahVu7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:5c:9e:1a:e9:9b:a8:b2:ad:db:d6:e6:9f:ac:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Validity
Not Before: Jul 26 19:01:03 2026 GMT
Not After : Jul 27 19:01:03 2026 GMT
Subject: CN=ff8d43237928b032b4df77ccd3505e09a2c16790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:73:b5:52:18:12:e2:79:27:44:22:b5:82:ff:
17:ef:25:db:af:59:92:72:b4:62:a3:17:71:51:a6:
54:f4:a4:0a:f1:50:3f:6e:83:af:5d:e4:b3:b8:ff:
67:7e:d8:78:39:b0:36:ef:aa:67:23:87:3f:7f:50:
3c:dc:83:90:99:90:84:1e:bc:fc:d2:38:6b:95:de:
e6:25:b2:d5:f7:a4:4d:50:a1:1f:fe:00:f6:be:ac:
24:c5:41:6c:10:7f:0b:ba:05:19:00:71:1c:7d:d7:
73:78:b9:d0:89:6d:56:26:49:2d:1b:70:c2:67:e2:
0e:40:de:74:0b:34:71:f2:b5:4f:8d:37:be:49:5f:
06:ad:e2:61:57:81:cd:00:1d:02:79:d2:e6:73:ae:
8c:14:4d:5a:c5:1b:49:19:4e:d3:30:bb:27:6a:0a:
53:1f:89:77:4f:ac:25:9d:44:44:f0:b9:21:78:63:
64:07:cf:90:9f:f3:ba:19:c6:c8:4a:0b:33:22:27:
4e:60:d2:8b:35:fe:8c:20:d0:1f:99:1d:44:70:f9:
81:63:67:d6:92:e9:c4:e6:52:88:22:fa:a2:c4:71:
79:c9:19:f8:f1:d3:11:2c:95:40:3a:a2:e4:42:03:
2c:45:4c:80:13:f9:90:1b:42:2e:bc:35:02:eb:fa:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8D:43:23:79:28:B0:32:B4:DF:77:CC:D3:50:5E:09:A2:C1:67:90
X509v3 Authority Key Identifier:
keyid:DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9f:79:16:af:31:df:34:1c:a2:99:6c:c5:e7:ac:ee:c9:37:
2b:ce:84:c4:70:da:9b:55:a9:3a:4c:60:67:23:27:bf:f2:68:
65:9b:cf:af:8d:49:f7:e7:b6:69:b4:79:74:d4:d1:95:d4:ea:
0b:fc:83:9a:df:2d:3e:37:b4:ce:21:ef:02:ae:b5:97:bb:49:
ce:5d:59:5d:44:da:68:7f:04:75:2d:d9:0c:be:76:a6:14:b7:
ac:d5:03:b1:fe:53:34:09:70:f2:d5:d7:e6:c2:77:d7:b2:43:
35:51:25:2d:22:43:5e:3e:12:56:a3:8a:5c:11:31:61:26:b7:
16:9a:1a:aa:c7:9f:75:42:0d:66:79:d1:66:e2:d9:5c:89:a4:
12:31:f3:bf:8a:e3:d2:49:02:cb:7f:57:53:9f:ad:41:4a:ed:
57:0c:84:ba:11:de:7f:6a:24:43:a7:47:6a:13:72:54:59:c9:
42:11:c1:25:4c:14:6c:ef:fd:76:82:26:8d:2b:9a:ef:51:d8:
8d:da:80:45:13:2a:e6:f2:01:16:28:7c:28:d9:dc:f6:e6:c9:
5f:6a:bc:5f:99:a3:c1:60:24:31:8d:0c:8d:88:bf:42:62:20:
e9:b4:e1:fd:5a:e3:c6:44:95:92:ea:39:5c:67:88:02:e9:00:
2d:51:59:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fzVyeGumbqLKt29bmn6xkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZTJhNGMwN2U0ZGRlM2YxZTNjYWMzOWJhM2IyMTM1MzFh
Y2NiYjkwHhcNMjYwNzI2MTkwMTAzWhcNMjYwNzI3MTkwMTAzWjAzMTEwLwYDVQQD
EyhmZjhkNDMyMzc5MjhiMDMyYjRkZjc3Y2NkMzUwNWUwOWEyYzE2NzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HO1UhgS4nknRCK1gv8X7yXbr1mS
crRioxdxUaZU9KQK8VA/boOvXeSzuP9nfth4ObA276pnI4c/f1A83IOQmZCEHrz8
0jhrld7mJbLV96RNUKEf/gD2vqwkxUFsEH8LugUZAHEcfddzeLnQiW1WJkktG3DC
Z+IOQN50CzRx8rVPjTe+SV8GreJhV4HNAB0CedLmc66MFE1axRtJGU7TMLsnagpT
H4l3T6wlnURE8LkheGNkB8+Qn/O6GcbISgszIidOYNKLNf6MINAfmR1EcPmBY2fW
kunE5lKIIvqixHF5yRn48dMRLJVAOqLkQgMsRUyAE/mQG0IuvDUC6/rKsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+NQyN5KLAytN93zNNQXgmiwWeQMB8GA1UdIwQY
MBaAFN/ipMB+Td4/HjysObo7ITUxrMu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy1La3dINU4zajhlUEt3NXVqc2hOVEdzeTdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi80NGJhMTItMGJiOC00ZmY3LThiOTUt
YWVmOTYwMTZjM2VjLzEvMy1La3dINU4zajhlUEt3NXVqc2hOVEdzeTdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi80NGJhMTItMGJiOC00ZmY3LThiOTUtYWVmOTYwMTZjM2Vj
LzEvMy1La3dINU4zajhlUEt3NXVqc2hOVEdzeTdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADp95Fq8x
3zQcoplsxees7sk3K86ExHDam1WpOkxgZyMnv/JoZZvPr41J9+e2abR5dNTRldTq
C/yDmt8tPje0ziHvAq61l7tJzl1ZXUTaaH8EdS3ZDL52phS3rNUDsf5TNAlw8tXX
5sJ317JDNVElLSJDXj4SVqOKXBExYSa3FpoaqsefdUINZnnRZuLZXImkEjHzv4rj
0kkCy39XU5+tQUrtVwyEuhHef2okQ6dHahNyVFnJQhHBJUwUbO/9doImjSua71HY
jdqARRMq5vIBFih8KNnc9ubJX2q8X5mjwWAkMY0MjYi/QmIg6bTh/VrjxkSVkuo5
XGeIAukALVFZWw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:30:35 2026 by rpki-client