Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: jKI2EKIvsn6FSG3ZyhxY8gkIo8tnVvOq1e+4rpC5j/w=
Subject key identifier: A2:07:20:15:43:42:08:84:EA:08:01:49:38:92:06:A9:B4:B0:B9:CB
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 01A000CA1079CC82EF36F51295892073CBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 15:00:37 +0000
Manifest this update: Fri 14 Aug 2026 15:00:37 +0000
Manifest next update: Sat 15 Aug 2026 15:00:37 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: mlEabLFI+xFGM7iO4MfY+0RD5ZLK6oCyKjmGA8m/7ks=)
2: 9yUNTQu4D8dEJY0vZu2yaAiRefU.roa (hash: lrso5MYVylYk+QUiDaPruFaOoSE7UzGRAVXufFOfA74=)
3: jnbS6eM3y8l2eIAi24P02_6sYnE.roa (hash: oehLYvqq0N9O64TqK28Nu+Air9RUEnLzPzRmB5KAv7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:10:79:cc:82:ef:36:f5:12:95:89:20:73:cb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Aug 14 15:00:37 2026 GMT
Not After : Aug 15 15:00:37 2026 GMT
Subject: CN=a207201543420884ea080149389206a9b4b0b9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6c:b2:b9:13:77:ec:14:32:69:da:eb:31:10:
cb:b8:d0:48:ee:0d:97:c2:a8:2e:af:4b:2a:65:9d:
68:dc:d1:af:57:37:ff:77:ad:d8:04:10:55:e9:2b:
6d:63:07:c3:e2:fe:22:d1:b1:b9:a9:72:20:a9:43:
8f:0d:de:da:9b:e8:36:63:54:45:3a:7e:65:b3:99:
31:c0:58:22:1f:4c:57:04:54:54:80:97:82:af:04:
0c:3e:e9:b6:e1:55:c7:55:ff:53:d7:2a:2c:78:d4:
f8:b6:90:9a:21:7e:d8:5f:72:c3:57:f4:80:86:34:
ff:84:38:b4:b5:79:a9:5b:36:cc:60:a4:17:53:c2:
7b:78:5f:00:c6:9a:56:c4:d9:d5:d3:dd:5d:6b:6a:
c5:20:96:a4:9e:b7:55:59:fb:10:12:17:6b:b1:eb:
e3:f3:42:50:32:fa:13:26:32:47:ce:b2:51:2c:d3:
82:de:4c:82:84:ef:40:cd:cd:2b:ed:98:83:e2:e7:
21:d0:3e:8e:54:f8:75:a0:99:73:87:a7:55:39:ed:
c8:1c:94:c1:19:69:15:5f:ed:9d:24:d3:55:35:13:
e1:07:c2:bc:9c:ec:22:e3:5e:e2:bb:a3:94:5e:61:
f2:2e:5c:19:ae:d9:dc:05:d2:e3:1b:3b:61:c1:56:
ff:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:07:20:15:43:42:08:84:EA:08:01:49:38:92:06:A9:B4:B0:B9:CB
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b4:58:ab:3f:c1:a3:17:4a:1a:00:b2:21:36:1d:40:5b:88:
ee:6b:d2:47:62:72:bb:d2:60:0b:54:93:fd:8e:27:81:56:05:
9b:41:03:d4:20:7a:49:81:cd:68:10:12:d5:b4:a2:c4:38:ea:
a2:93:99:b2:87:11:ba:96:7c:44:f5:8c:9e:24:1e:35:d2:f0:
17:b2:39:19:8b:29:c1:cd:b4:85:28:a7:ef:f0:69:4f:b1:a1:
d9:f4:8b:c6:a4:a2:af:80:cb:45:a9:71:a5:e7:8f:5c:36:e2:
e6:42:13:68:24:df:a7:52:59:1e:70:20:e1:23:dc:a8:d2:d9:
ae:75:33:67:b9:98:63:7a:32:3d:99:d6:2c:2f:6c:8f:03:19:
51:31:ba:93:5e:d8:7a:ef:05:2c:3e:f6:6f:f4:e8:55:32:ee:
6e:ff:5f:ee:cb:44:ce:2c:0c:49:94:13:79:1f:0f:92:28:6c:
6f:0b:89:48:3b:44:3a:6a:ed:06:9b:83:c7:45:d8:71:8d:99:
b0:4d:d1:af:10:45:ea:21:4c:27:3d:a8:ff:bc:cb:b5:99:e1:
9c:ae:61:1d:2b:cd:50:a2:fb:c7:ef:b9:c7:95:7c:f6:b8:c3:
4f:3f:f0:37:7a:f1:2b:c8:22:3b:ee:fa:ce:d5:ca:20:fb:f6:
4f:50:62:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyhB5zILvNvUSlYkgc8u2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzAwYjk2ZTlhN2EwZjlkYjg5YmY1ZTE4MTE1YjEyYTNl
ZjE2OTIwHhcNMjYwODE0MTUwMDM3WhcNMjYwODE1MTUwMDM3WjAzMTEwLwYDVQQD
EyhhMjA3MjAxNTQzNDIwODg0ZWEwODAxNDkzODkyMDZhOWI0YjBiOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2yyuRN37BQyadrrMRDLuNBI7g2X
wqgur0sqZZ1o3NGvVzf/d63YBBBV6SttYwfD4v4i0bG5qXIgqUOPDd7am+g2Y1RF
On5ls5kxwFgiH0xXBFRUgJeCrwQMPum24VXHVf9T1yoseNT4tpCaIX7YX3LDV/SA
hjT/hDi0tXmpWzbMYKQXU8J7eF8AxppWxNnV091da2rFIJaknrdVWfsQEhdrsevj
80JQMvoTJjJHzrJRLNOC3kyChO9Azc0r7ZiD4uch0D6OVPh1oJlzh6dVOe3IHJTB
GWkVX+2dJNNVNRPhB8K8nOwi417iu6OUXmHyLlwZrtncBdLjGzthwVb/YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIHIBVDQgiE6ggBSTiSBqm0sLnLMB8GA1UdIwQY
MBaAFNxwC5bpp6D524m/XhgRWxKj7xaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zY2VkZmUtMDI2Yy00ZDc4LWI4Yzgt
NTI1MjMwZTIwNjgxLzEvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8zY2VkZmUtMDI2Yy00ZDc4LWI4YzgtNTI1MjMwZTIwNjgx
LzEvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLRYqz/B
oxdKGgCyITYdQFuI7mvSR2Jyu9JgC1ST/Y4ngVYFm0ED1CB6SYHNaBAS1bSixDjq
opOZsocRupZ8RPWMniQeNdLwF7I5GYspwc20hSin7/BpT7Gh2fSLxqSir4DLRalx
peePXDbi5kITaCTfp1JZHnAg4SPcqNLZrnUzZ7mYY3oyPZnWLC9sjwMZUTG6k17Y
eu8FLD72b/ToVTLubv9f7stEziwMSZQTeR8PkihsbwuJSDtEOmrtBpuDx0XYcY2Z
sE3RrxBF6iFMJz2o/7zLtZnhnK5hHSvNUKL7x++5x5V89rjDTz/wN3rxK8giO+76
ztXKIPv2T1BiHw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:42 2026 by rpki-client