Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: buB9pVDCeMt+MbwY56470FO1w59MzSWFISSaSgWwies=
Subject key identifier: AD:53:BF:88:F8:64:97:D0:8B:FD:42:8B:CA:4B:1D:CF:92:8E:04:63
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 019F189DF4ABD57D067CA295A5FCB219143A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 07BD
Signing time: Tue 30 Jun 2026 13:00:32 +0000
Manifest this update: Tue 30 Jun 2026 13:00:32 +0000
Manifest next update: Wed 01 Jul 2026 13:00:32 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: z7XSt96AQBz8ovuuvr9ZRDdip0N+gVYinHhXPjpnwA4=)
2: HrUPMg6A27LayY1nzJVXakWil-8.roa (hash: 6oiaD9+R084Ie04PfQ9j94YYcX9VFnuvxlsXJPk70DA=)
3: LsW7E92fgqyb4h0SFoyQ1iS_A-A.roa (hash: lZdLHI5/Pom2chJvXWn7/eiTGrnfbJ5HoDaiu046MUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9d:f4:ab:d5:7d:06:7c:a2:95:a5:fc:b2:19:14:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Jun 30 13:00:32 2026 GMT
Not After : Jul 1 13:00:32 2026 GMT
Subject: CN=ad53bf88f86497d08bfd428bca4b1dcf928e0463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:c4:91:84:23:c3:a2:ef:fa:40:f1:a5:4d:
fe:c0:52:c9:a3:05:bf:d6:01:79:ab:5a:b1:44:74:
5d:3f:bc:5d:3a:83:ca:da:b9:50:f2:46:15:5d:10:
b4:16:98:1b:da:13:22:27:80:b8:5d:8e:11:2b:0f:
7d:5f:ee:38:b4:28:d4:04:26:43:ea:d3:fb:dd:98:
3f:2a:6d:d5:52:ef:d4:66:cf:30:1d:ef:61:0c:ca:
1f:e4:c1:b7:be:2b:ff:a1:a1:88:4a:67:0f:77:d9:
d6:f6:56:bc:31:4e:1e:6c:33:2e:f3:b4:45:e5:97:
15:ec:7d:ff:91:d6:5b:fa:a4:a2:78:81:c7:bb:7c:
c9:11:12:92:0e:b6:17:c7:16:c8:31:db:2e:59:0c:
54:71:3d:0b:fd:da:d3:0f:3d:4f:7a:ed:08:3d:74:
1b:02:80:74:1d:dd:60:da:7e:48:4f:5c:6e:a3:49:
7a:4c:ad:d2:60:76:90:b9:fb:aa:8f:8f:3c:33:f7:
cf:7d:cc:0f:ec:d5:71:29:8a:dc:d4:4b:c3:03:fa:
f1:9a:c6:4f:c5:a5:1c:10:96:3d:6b:02:3b:27:66:
1c:45:2f:01:b6:b3:d4:23:3f:66:f4:a9:79:20:f8:
3b:e9:df:6f:e8:c8:21:ec:e5:e5:43:b5:5c:58:bd:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:53:BF:88:F8:64:97:D0:8B:FD:42:8B:CA:4B:1D:CF:92:8E:04:63
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8b:8e:83:a1:e9:6c:69:48:0d:ff:29:ca:39:ef:c3:87:db:
4c:7f:2f:46:08:b5:d3:74:f0:6d:10:8b:08:5f:91:4e:4f:0e:
d2:54:a5:60:20:1f:8d:f5:6b:a2:89:63:32:9e:ac:60:5e:8a:
66:98:b1:78:ae:df:92:08:c8:30:c1:4b:b4:23:f1:22:00:1d:
12:ab:f5:c7:f6:02:62:1f:99:35:98:03:49:f6:a8:90:3a:5e:
eb:18:26:ee:d7:a2:f7:fb:31:95:19:fc:6f:69:db:1d:04:45:
71:1a:c7:2c:0b:04:bc:bd:42:e9:28:10:59:bb:20:34:cb:14:
ab:41:6f:af:b5:e2:46:b1:08:ba:52:7c:fa:cc:8b:29:b9:1f:
27:39:ad:c5:85:c4:34:c3:be:8e:88:47:e3:cd:1d:30:f7:34:
49:6e:44:a9:ef:5f:81:b1:fe:9c:c5:8e:2f:fa:4b:31:a3:f0:
e2:c1:9c:a6:7e:14:93:2a:63:63:af:39:e8:17:91:c9:6d:83:
c3:c5:28:f5:b6:41:f8:ca:5b:92:61:3f:a6:fa:30:42:62:8a:
aa:cc:ad:a3:7e:e4:e1:ac:93:41:18:73:33:75:18:eb:21:1c:
44:ef:9d:dd:d4:0b:13:4f:07:00:32:e8:12:ff:f6:3c:8a:b2:
a6:57:94:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnfSr1X0GfKKVpfyyGRQ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZDk3NzBjMzA3ZWEzOTYwYzhkYTI2OGE4ODY1YTRhOWZh
NjM0YzkwHhcNMjYwNjMwMTMwMDMyWhcNMjYwNzAxMTMwMDMyWjAzMTEwLwYDVQQD
EyhhZDUzYmY4OGY4NjQ5N2QwOGJmZDQyOGJjYTRiMWRjZjkyOGUwNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/7EkYQjw6Lv+kDxpU3+wFLJowW/
1gF5q1qxRHRdP7xdOoPK2rlQ8kYVXRC0Fpgb2hMiJ4C4XY4RKw99X+44tCjUBCZD
6tP73Zg/Km3VUu/UZs8wHe9hDMof5MG3viv/oaGISmcPd9nW9la8MU4ebDMu87RF
5ZcV7H3/kdZb+qSieIHHu3zJERKSDrYXxxbIMdsuWQxUcT0L/drTDz1Peu0IPXQb
AoB0Hd1g2n5IT1xuo0l6TK3SYHaQufuqj488M/fPfcwP7NVxKYrc1EvDA/rxmsZP
xaUcEJY9awI7J2YcRS8BtrPUIz9m9Kl5IPg76d9v6Mgh7OXlQ7VcWL1/tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1Tv4j4ZJfQi/1Ci8pLHc+SjgRjMB8GA1UdIwQY
MBaAFN3ZdwwwfqOWDI2iaKiGWkqfpjTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUt
ZjJmZTBkMDRiZmJmLzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUtZjJmZTBkMDRiZmJm
LzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvYuOg6Hp
bGlIDf8pyjnvw4fbTH8vRgi103TwbRCLCF+RTk8O0lSlYCAfjfVrooljMp6sYF6K
ZpixeK7fkgjIMMFLtCPxIgAdEqv1x/YCYh+ZNZgDSfaokDpe6xgm7tei9/sxlRn8
b2nbHQRFcRrHLAsEvL1C6SgQWbsgNMsUq0Fvr7XiRrEIulJ8+syLKbkfJzmtxYXE
NMO+johH480dMPc0SW5Eqe9fgbH+nMWOL/pLMaPw4sGcpn4UkypjY6856BeRyW2D
w8Uo9bZB+MpbkmE/pvowQmKKqsyto37k4ayTQRhzM3UY6yEcRO+d3dQLE08HADLo
Ev/2PIqypleURQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:19 2026 by rpki-client