Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: SGjGBV8vAEAYqW+LoUx1GPAQ2TZcjgHFF1LJOc+imXQ=
Subject key identifier: D4:CF:18:6B:7B:DF:A6:A1:13:F8:4A:FC:94:11:72:9A:20:12:AF:5D
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 019F860D23F179222C61150E2273B9416AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 19C1
Signing time: Tue 21 Jul 2026 19:00:35 +0000
Manifest this update: Tue 21 Jul 2026 19:00:35 +0000
Manifest next update: Wed 22 Jul 2026 19:00:35 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: Kunde7KGN5mdizxD2SOITtyUBhXz1SfVkBJXtGcFjxg=)
2: 4nH4XfhimtA2VpYePD6iIqgS8jg.roa (hash: WzWjp5sYk3618sDtkEiRYCtG2GQQ5fgZA4Df9TxbCmE=)
3: Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa (hash: t8YcGZN/KfNS1zoLXEsPr4LvXKVj1kisjNpdPg7jWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:23:f1:79:22:2c:61:15:0e:22:73:b9:41:6a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Jul 21 19:00:35 2026 GMT
Not After : Jul 22 19:00:35 2026 GMT
Subject: CN=d4cf186b7bdfa6a113f84afc9411729a2012af5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:bb:24:99:02:d2:d5:e2:1e:ad:bc:fc:a2:
ba:81:7a:5d:50:a0:bf:b5:ac:d9:d1:18:c8:53:71:
f0:8e:47:62:4b:be:73:e1:1c:6c:a7:b1:2f:aa:be:
26:37:4d:44:8b:59:78:4c:cb:45:c8:c0:6e:0f:4b:
d0:2f:d2:a7:65:e1:1b:ee:39:ee:96:8f:db:7b:55:
93:68:54:44:b5:10:7a:cb:cd:e9:b9:b5:b9:8f:a4:
96:17:c8:31:e1:df:29:ad:5e:a2:07:a1:b9:f2:a3:
08:e1:45:84:e4:ad:66:24:8f:c7:00:7f:11:14:cf:
cf:48:70:65:33:4c:71:72:37:35:de:ce:1f:81:f3:
8d:94:b7:e2:ed:bc:3b:8c:69:d5:d7:32:1c:d7:dd:
06:e9:ea:61:f8:00:ab:af:84:de:1d:80:be:ea:eb:
ee:1f:28:71:2d:48:a0:8a:a2:00:76:b1:40:a6:95:
79:95:9c:c9:07:fb:d5:bf:62:4d:b9:37:5e:6d:3b:
49:28:ad:f5:69:80:01:d8:c8:ee:a2:22:dc:50:74:
19:3e:40:5b:8c:1b:75:a6:a0:96:3d:e7:71:d5:ad:
2f:53:c7:ea:32:71:74:0e:cf:ab:5d:e6:a9:bb:a0:
f7:4c:17:bb:88:de:86:e0:5d:17:d5:3c:c9:55:48:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CF:18:6B:7B:DF:A6:A1:13:F8:4A:FC:94:11:72:9A:20:12:AF:5D
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ef:40:43:3e:f0:a1:6d:de:61:ce:45:fb:11:48:51:e9:9a:
65:08:46:ec:fa:b1:3a:8d:5b:a2:44:8a:1a:cf:06:2f:43:51:
55:a3:a6:eb:de:76:83:50:7e:44:c9:c8:eb:5b:dc:dd:70:ce:
29:0b:94:19:80:b3:1a:7c:ad:f1:54:f2:16:f0:53:66:7b:d4:
f8:27:d3:91:ff:26:c1:be:b7:85:30:f4:69:92:b2:35:5c:37:
57:f5:6d:ce:da:8e:e9:48:f5:f6:65:ea:a3:fa:dd:33:01:14:
5c:7f:c9:76:e9:a4:8e:5f:3e:88:97:8e:6b:ac:03:b6:1f:0e:
bb:67:f0:aa:4a:5b:3e:82:0d:54:9b:e3:4a:b1:31:88:eb:66:
5f:66:25:ec:d5:ce:1d:b2:a8:2b:48:d6:9b:19:4d:74:68:cd:
61:7f:3b:10:51:04:aa:b5:70:5c:80:3e:00:58:ce:10:b3:0f:
05:f0:2a:3b:92:cc:5c:09:af:cc:13:9a:44:35:97:ac:cc:2d:
0c:80:5d:bd:a7:73:62:a7:1d:2d:76:bc:eb:34:c4:c1:0e:45:
b7:04:42:1c:27:85:1e:a5:dd:d2:73:2f:b5:98:c0:85:89:40:
34:e5:89:64:0a:0e:d5:37:1c:a9:d9:62:83:4f:21:33:68:d7:
6e:0a:96:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GDSPxeSIsYRUOInO5QWrlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYTQ2ZWFhZTdhZWYyZjQ0ZmU2NjAxNjJiYjlkYzcwZDY1
MjVhZjEwHhcNMjYwNzIxMTkwMDM1WhcNMjYwNzIyMTkwMDM1WjAzMTEwLwYDVQQD
EyhkNGNmMTg2YjdiZGZhNmExMTNmODRhZmM5NDExNzI5YTIwMTJhZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0au7JJkC0tXiHq28/KK6gXpdUKC/
tazZ0RjIU3HwjkdiS75z4Rxsp7Evqr4mN01Ei1l4TMtFyMBuD0vQL9KnZeEb7jnu
lo/be1WTaFREtRB6y83pubW5j6SWF8gx4d8prV6iB6G58qMI4UWE5K1mJI/HAH8R
FM/PSHBlM0xxcjc13s4fgfONlLfi7bw7jGnV1zIc190G6eph+ACrr4TeHYC+6uvu
HyhxLUigiqIAdrFAppV5lZzJB/vVv2JNuTdebTtJKK31aYAB2MjuoiLcUHQZPkBb
jBt1pqCWPedx1a0vU8fqMnF0Ds+rXeapu6D3TBe7iN6G4F0X1TzJVUg/UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTPGGt736ahE/hK/JQRcpogEq9dMB8GA1UdIwQY
MBaAFN6kbqrnrvL0T+ZgFiu53HDWUlrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEt
MWZhOWFjNTgwYjhlLzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEtMWZhOWFjNTgwYjhl
LzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAke9AQz7w
oW3eYc5F+xFIUemaZQhG7PqxOo1bokSKGs8GL0NRVaOm6952g1B+RMnI61vc3XDO
KQuUGYCzGnyt8VTyFvBTZnvU+CfTkf8mwb63hTD0aZKyNVw3V/VtztqO6Uj19mXq
o/rdMwEUXH/Jdumkjl8+iJeOa6wDth8Ou2fwqkpbPoINVJvjSrExiOtmX2Yl7NXO
HbKoK0jWmxlNdGjNYX87EFEEqrVwXIA+AFjOELMPBfAqO5LMXAmvzBOaRDWXrMwt
DIBdvadzYqcdLXa86zTEwQ5FtwRCHCeFHqXd0nMvtZjAhYlANOWJZAoO1Tccqdli
g08hM2jXbgqWaw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:31:22 2026 by rpki-client