Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier: DJqxvYZ6s9b3KotWVqYT33Aw+L7yxLah6cHDNqt28b0=
Subject key identifier: FC:94:86:ED:98:83:A7:FC:03:CE:1C:28:22:FF:4D:4D:3F:1B:EC:94
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial: 019F39735E2F026580E9B640D2F2C4D75326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number: 0888
Signing time: Mon 06 Jul 2026 22:01:29 +0000
Manifest this update: Mon 06 Jul 2026 22:01:29 +0000
Manifest next update: Tue 07 Jul 2026 22:01:29 +0000
Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: bu3hCNeohjZVfsd2c6BqcfuXUJUmKB9cPfjXSNILwFk=)
2: TTHpThh0WFBegnNfmmfbon5C7Nk.roa (hash: XL1bQibK3g0HnLkkJsFNT1Xil79v588WbG0+6ygTsbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 20:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:73:5e:2f:02:65:80:e9:b6:40:d2:f2:c4:d7:53:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Validity
Not Before: Jul 6 22:01:29 2026 GMT
Not After : Jul 7 22:01:29 2026 GMT
Subject: CN=fc9486ed9883a7fc03ce1c2822ff4d4d3f1bec94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:18:2b:66:a8:bd:46:5d:c5:2c:62:56:27:
e3:99:fe:33:1d:5d:8d:6f:b3:b8:d7:ca:98:93:d3:
bd:5a:93:d7:96:9c:38:93:77:0c:30:56:ce:bb:2e:
8d:43:50:31:e4:dc:83:0d:0e:30:b1:11:ad:2a:88:
cd:bc:3a:5a:24:7a:3b:c1:f6:77:90:58:9e:f9:bd:
01:47:49:f5:64:2c:d7:b9:77:fa:41:89:2d:42:d1:
01:94:8c:d8:28:e8:27:52:3a:17:64:39:92:64:d4:
94:95:68:ee:c3:3f:83:0a:a2:fb:45:f0:ae:2e:f6:
b2:5d:ee:8d:21:11:80:4c:7d:dd:a9:91:d7:b8:c5:
8c:57:32:af:d0:53:67:97:06:af:b9:e4:44:4b:d2:
2e:d9:98:f0:60:85:2d:9a:13:b4:5e:2d:c7:02:3a:
da:87:7c:0f:01:16:37:15:09:55:21:3f:3b:16:66:
24:5f:59:69:1a:32:0f:6f:9c:b2:b9:4a:5e:da:7d:
8b:90:3c:17:6b:bb:36:b8:ee:56:ca:6f:05:16:d4:
9b:53:e6:c7:59:0f:2d:a0:19:be:df:bb:5c:32:d3:
94:88:38:aa:57:c9:29:22:a6:ba:51:ad:10:f2:8b:
fc:05:a9:d1:b8:93:2a:9e:4d:c6:50:f3:da:3b:cb:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:94:86:ED:98:83:A7:FC:03:CE:1C:28:22:FF:4D:4D:3F:1B:EC:94
X509v3 Authority Key Identifier:
keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d6:7d:03:49:fc:42:38:ef:6d:55:8f:2a:36:7b:b1:6f:30:
a4:66:22:22:cf:97:01:97:27:4b:16:5c:6e:8e:79:1a:42:96:
38:68:6e:a3:09:ee:47:94:16:cc:d8:6b:02:09:1f:4a:0a:34:
d1:3d:74:e1:d1:2f:cb:e0:19:17:d3:1b:05:0d:d7:e0:fc:5c:
ff:81:2c:81:93:dc:0b:ca:9c:6f:5c:05:09:2b:c1:c7:0b:a6:
cb:63:07:f1:ed:44:1b:2c:7f:21:f2:0d:ac:5a:ea:21:dd:6e:
35:02:15:6d:b3:81:9f:16:0b:62:e2:3f:46:62:b5:7f:6a:86:
1e:8c:5c:8e:43:65:2c:99:69:9b:f8:37:b9:c2:29:4a:42:af:
95:eb:40:8c:2f:da:19:ab:81:2d:69:64:7d:1e:f6:7c:f6:8a:
30:ba:d4:8f:9d:26:5a:d1:ce:f5:d5:c4:62:ed:da:53:97:3d:
12:36:bb:08:04:26:ad:66:a6:31:42:ff:64:d2:f2:25:da:61:
bd:01:44:d7:7f:a5:16:dd:2d:8a:53:aa:16:51:c9:60:08:42:
86:b9:71:8b:3d:45:91:13:f5:b4:c4:35:34:31:b0:64:2e:a0:
63:0e:6c:58:35:e7:49:38:2c:22:e4:a7:11:a4:ac:6e:d1:f9:
97:53:45:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ85c14vAmWA6bZA0vLE11MmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWZhZGExMGUyY2UyMGUxYzk2Zjg5NWJiOGVjMzJhNTgw
OGY2M2YwHhcNMjYwNzA2MjIwMTI5WhcNMjYwNzA3MjIwMTI5WjAzMTEwLwYDVQQD
EyhmYzk0ODZlZDk4ODNhN2ZjMDNjZTFjMjgyMmZmNGQ0ZDNmMWJlYzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun0YK2aovUZdxSxiVifjmf4zHV2N
b7O418qYk9O9WpPXlpw4k3cMMFbOuy6NQ1Ax5NyDDQ4wsRGtKojNvDpaJHo7wfZ3
kFie+b0BR0n1ZCzXuXf6QYktQtEBlIzYKOgnUjoXZDmSZNSUlWjuwz+DCqL7RfCu
LvayXe6NIRGATH3dqZHXuMWMVzKv0FNnlwavueRES9Iu2ZjwYIUtmhO0Xi3HAjra
h3wPARY3FQlVIT87FmYkX1lpGjIPb5yyuUpe2n2LkDwXa7s2uO5Wym8FFtSbU+bH
WQ8toBm+37tcMtOUiDiqV8kpIqa6Ua0Q8ov8BanRuJMqnk3GUPPaO8t2wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyUhu2Yg6f8A84cKCL/TU0/G+yUMB8GA1UdIwQY
MBaAFNyvraEOLOIOHJb4lbuOwypYCPY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQt
YTY2Zjg0ZWRiZDZkLzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQtYTY2Zjg0ZWRiZDZk
LzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs9Z9A0n8
QjjvbVWPKjZ7sW8wpGYiIs+XAZcnSxZcbo55GkKWOGhuownuR5QWzNhrAgkfSgo0
0T104dEvy+AZF9MbBQ3X4Pxc/4EsgZPcC8qcb1wFCSvBxwumy2MH8e1EGyx/IfIN
rFrqId1uNQIVbbOBnxYLYuI/RmK1f2qGHoxcjkNlLJlpm/g3ucIpSkKvletAjC/a
GauBLWlkfR72fPaKMLrUj50mWtHO9dXEYu3aU5c9Eja7CAQmrWamMUL/ZNLyJdph
vQFE13+lFt0tilOqFlHJYAhChrlxiz1FkRP1tMQ1NDGwZC6gYw5sWDXnSTgsIuSn
EaSsbtH5l1NF2w==
-----END CERTIFICATE-----
Generated at Tue Jul 7 00:09:53 2026 by rpki-client