Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: zHNv8OjtXWcn49OP7/xXgWdegg6iM6e2S+T7o6nhuWQ=
Subject key identifier: 59:FB:39:85:F4:AF:0B:76:BE:04:6A:80:AF:DA:85:F1:6C:72:51:A5
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 01A001A6496E495690E173652A9905B1A58B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 16A5
Signing time: Fri 14 Aug 2026 19:01:09 +0000
Manifest this update: Fri 14 Aug 2026 19:01:09 +0000
Manifest next update: Sat 15 Aug 2026 19:01:09 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: Now//c8Ftv+ZsdIO/L+vuSZMRYUQxXRBAHFD70QdeGw=)
2: INE61DSnT0byRQAlBRacyXpwM4M.roa (hash: ZjFf2bVbEAR4MMNRtk1mizzAeZIxKBJHJE2Ioiflxw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:49:6e:49:56:90:e1:73:65:2a:99:05:b1:a5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Aug 14 19:01:09 2026 GMT
Not After : Aug 15 19:01:09 2026 GMT
Subject: CN=59fb3985f4af0b76be046a80afda85f16c7251a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3b:16:c0:7e:76:36:12:65:7f:bc:0e:45:ef:
2a:da:f4:e7:ab:f9:11:78:c7:c2:3b:90:b4:2c:dc:
ba:68:af:e0:55:66:08:75:25:51:7a:53:0c:77:4e:
07:97:69:eb:cf:02:f4:75:f8:9c:ed:b3:8f:0e:61:
0c:78:4f:31:43:b8:2d:3c:48:3f:77:13:1d:4c:63:
7a:a9:a9:54:8e:9a:90:27:c8:e9:f4:03:b3:a2:7f:
d3:40:bf:6a:ce:36:f5:8f:bc:95:b1:54:e6:3c:93:
75:bf:ce:16:3b:ac:07:31:67:c8:f0:27:a6:a2:a8:
aa:d2:25:6d:ff:b9:87:8d:72:48:81:59:7f:f5:a9:
fa:1f:d3:04:2e:75:4e:e8:9c:9a:1d:38:db:53:5c:
1f:24:6e:10:d5:d4:21:d7:d3:f6:d7:fc:85:86:ae:
3a:f7:ea:43:b1:13:55:cf:2c:35:75:f8:05:6d:27:
36:35:32:30:b8:7d:bd:2f:01:6b:4f:c3:9b:14:ea:
84:21:3b:aa:92:7b:d4:2f:a3:fb:1c:90:a3:d5:69:
19:07:ee:ce:3a:97:24:98:48:2b:c9:9f:95:37:9a:
9f:c5:56:0d:65:29:96:40:4b:84:28:28:7a:57:f4:
b0:cb:7a:32:fa:ed:d4:9a:0c:20:f9:f4:47:f4:e3:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FB:39:85:F4:AF:0B:76:BE:04:6A:80:AF:DA:85:F1:6C:72:51:A5
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7b:77:1c:cc:d0:7e:9d:da:4f:35:76:1e:8f:67:dc:72:1f:
46:b8:21:cf:33:38:74:29:16:03:ba:1c:7a:0d:66:88:a6:e0:
4b:7a:03:ed:8e:11:1a:ff:ec:2b:69:5a:9b:47:8a:93:53:ca:
96:12:f6:46:66:43:5b:36:c6:47:0d:bc:a3:90:b4:b9:4f:86:
70:3a:0b:5d:27:cb:3c:d7:af:a2:f6:9e:40:09:32:c1:33:28:
b9:9b:6d:b6:e7:44:7d:ab:4f:04:57:a5:43:bb:68:bd:62:ec:
4c:a4:d5:13:19:42:a2:90:a7:47:64:d4:b9:c3:41:a2:ae:6a:
0a:6a:f3:67:7f:cc:a2:65:27:4a:d0:90:96:31:98:32:2f:f8:
96:15:62:fe:80:a7:ba:57:21:9c:64:ff:92:e4:13:83:3d:67:
c9:88:23:55:18:b2:16:71:a0:1d:d3:03:90:06:30:1a:bf:ad:
1c:a3:9b:0e:9a:20:42:01:19:1d:2f:4e:39:d5:fa:a1:f1:c7:
5b:12:42:52:27:7e:01:a6:e6:e5:fc:3e:a6:d9:ef:82:51:e8:
7d:70:d5:e4:a2:5f:30:c4:99:a6:f3:dd:df:3a:ef:cc:e8:21:
2b:d4:dd:8a:b3:1a:ed:25:e1:6f:22:4a:3f:23:01:85:0e:cd:
6a:c9:c4:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpkluSVaQ4XNlKpkFsaWLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTFjM2M1ZGRjNGZiNjEzODFjM2JlYTI0YzFiYTRmNzQ5
OThlYWIwHhcNMjYwODE0MTkwMTA5WhcNMjYwODE1MTkwMTA5WjAzMTEwLwYDVQQD
Eyg1OWZiMzk4NWY0YWYwYjc2YmUwNDZhODBhZmRhODVmMTZjNzI1MWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jsWwH52NhJlf7wORe8q2vTnq/kR
eMfCO5C0LNy6aK/gVWYIdSVRelMMd04Hl2nrzwL0dfic7bOPDmEMeE8xQ7gtPEg/
dxMdTGN6qalUjpqQJ8jp9AOzon/TQL9qzjb1j7yVsVTmPJN1v84WO6wHMWfI8Cem
oqiq0iVt/7mHjXJIgVl/9an6H9MELnVO6JyaHTjbU1wfJG4Q1dQh19P21/yFhq46
9+pDsRNVzyw1dfgFbSc2NTIwuH29LwFrT8ObFOqEITuqknvUL6P7HJCj1WkZB+7O
OpckmEgryZ+VN5qfxVYNZSmWQEuEKCh6V/Swy3oy+u3Umgwg+fRH9OO91wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFn7OYX0rwt2vgRqgK/ahfFsclGlMB8GA1UdIwQY
MBaAFN5Rw8XdxPthOBw76iTBuk90mY6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEt
YTUzMjVkNDQxNzAyLzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEtYTUzMjVkNDQxNzAy
LzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHt3HMzQ
fp3aTzV2Ho9n3HIfRrghzzM4dCkWA7oceg1miKbgS3oD7Y4RGv/sK2lam0eKk1PK
lhL2RmZDWzbGRw28o5C0uU+GcDoLXSfLPNevovaeQAkywTMouZtttudEfatPBFel
Q7tovWLsTKTVExlCopCnR2TUucNBoq5qCmrzZ3/MomUnStCQljGYMi/4lhVi/oCn
ulchnGT/kuQTgz1nyYgjVRiyFnGgHdMDkAYwGr+tHKObDpogQgEZHS9OOdX6ofHH
WxJCUid+Aabm5fw+ptnvglHofXDV5KJfMMSZpvPd3zrvzOghK9TdirMa7SXhbyJK
PyMBhQ7NasnEjA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:38 2026 by rpki-client