Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
File: 3ohLjkYvPsE6QCTWaamdlK8FzbI.mft (raw, json)
Hash identifier: pm85iIDzeohqzP/lC5sjJxSkBDA9K2uaqZQPj6RLab8=
Subject key identifier: 42:9A:D7:4E:95:C7:BD:33:33:44:D0:6A:CC:60:A8:21:9B:BF:68:C9
Authority key identifier: DE:88:4B:8E:46:2F:3E:C1:3A:40:24:D6:69:A9:9D:94:AF:05:CD:B2
Certificate issuer: /CN=de884b8e462f3ec13a4024d669a99d94af05cdb2
Certificate serial: 019F9F27F28496763D5CB40529EAB0B72C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
Manifest number: 0A7D
Signing time: Sun 26 Jul 2026 16:00:23 +0000
Manifest this update: Sun 26 Jul 2026 16:00:23 +0000
Manifest next update: Mon 27 Jul 2026 16:00:23 +0000
Files and hashes: 1: 3ohLjkYvPsE6QCTWaamdlK8FzbI.crl (hash: Q74+rYw6i5/WiYcbwYWzjJKmsJSo2KXiFop77oV5cNo=)
2: KyIGNZFDdjiF9uvViG3nRW9Bmw8.roa (hash: DzYiLKcYFU2Q0VtZNwQkwth/5N+BuGWGx0hMS551gkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:27:f2:84:96:76:3d:5c:b4:05:29:ea:b0:b7:2c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de884b8e462f3ec13a4024d669a99d94af05cdb2
Validity
Not Before: Jul 26 16:00:23 2026 GMT
Not After : Jul 27 16:00:23 2026 GMT
Subject: CN=429ad74e95c7bd333344d06acc60a8219bbf68c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:3f:3e:12:53:5f:d5:da:ad:c9:5f:11:19:
c2:d8:80:d4:8e:27:ff:b3:2e:34:92:2f:4a:a8:bd:
45:67:7c:63:57:e8:05:2c:e8:14:a4:4c:ca:0e:87:
f3:53:0a:70:f3:25:ab:3e:04:f9:d8:09:99:24:1a:
2d:2c:27:46:37:d2:c5:ad:a6:bb:56:bf:4b:9f:9f:
5e:ab:38:60:ff:c2:f3:ca:04:9e:44:32:b5:e4:8d:
b7:ef:68:e2:9b:84:80:62:e8:5c:80:68:82:d4:12:
91:a7:d7:92:e8:f5:cb:92:b6:11:ca:16:b9:8c:5f:
71:a4:1f:0e:e3:53:87:08:93:f0:f1:6b:76:3d:e1:
db:c0:c0:35:c2:06:22:31:a7:20:d5:b4:c2:31:6b:
d8:9e:d9:f2:75:85:3b:65:74:23:a6:de:6f:8a:9d:
c9:bd:f1:65:cd:67:b7:57:85:e5:69:2d:42:f7:51:
6e:bc:ee:9b:25:20:39:9a:78:3a:10:b9:e2:b4:b9:
dd:80:c3:d7:f2:90:10:41:ba:8e:a8:36:df:60:ef:
b8:d4:14:d8:c3:4b:d6:15:76:d6:71:86:fe:b1:68:
74:35:39:8f:4c:50:df:a2:82:ea:b9:e7:71:5a:38:
27:40:e8:60:f9:01:58:e4:1a:3d:a7:45:05:6e:9b:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9A:D7:4E:95:C7:BD:33:33:44:D0:6A:CC:60:A8:21:9B:BF:68:C9
X509v3 Authority Key Identifier:
keyid:DE:88:4B:8E:46:2F:3E:C1:3A:40:24:D6:69:A9:9D:94:AF:05:CD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:86:20:64:fc:41:f6:30:cb:6e:5d:d0:3f:c8:8c:9e:34:2b:
ec:ab:fb:56:4b:e8:9f:a3:ba:64:c8:75:5c:7c:04:8a:0b:dc:
15:64:95:58:2d:83:45:95:25:89:98:aa:f8:7d:72:97:a5:fe:
c8:58:c1:c8:12:20:d0:42:a6:71:67:5c:c6:91:b1:44:81:97:
f5:70:c7:b8:41:97:e9:8b:3a:0b:cc:ce:9e:d4:50:6f:c7:ed:
83:d2:16:15:a7:22:07:af:da:9b:4e:94:1e:ea:19:4d:67:70:
c8:29:1a:ca:af:46:d5:31:79:43:91:cd:ae:49:62:4e:38:e0:
01:27:b7:f5:a1:61:07:5d:30:10:dc:85:97:84:99:51:1c:6b:
b8:b1:84:c2:33:07:1f:11:5f:a5:c1:c0:31:18:2a:67:d3:ab:
c1:7a:d1:a0:15:13:2f:60:43:a2:e0:da:f8:5b:d6:90:c9:2b:
bc:ac:b1:e7:a9:be:a2:93:7e:32:d0:ef:eb:2a:2e:1c:99:f6:
ec:3d:28:8b:36:33:dd:54:32:79:7a:cf:c7:fe:af:70:1a:96:
5e:e0:cc:8d:e0:51:d3:f1:ea:c5:b6:8e:9c:b8:2f:f3:84:cd:
70:d8:e6:4e:e7:2d:51:c4:68:de:5a:e3:82:41:bc:5a:c7:38:
cf:fa:b0:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fJ/KElnY9XLQFKeqwtywBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlODg0YjhlNDYyZjNlYzEzYTQwMjRkNjY5YTk5ZDk0YWYw
NWNkYjIwHhcNMjYwNzI2MTYwMDIzWhcNMjYwNzI3MTYwMDIzWjAzMTEwLwYDVQQD
Eyg0MjlhZDc0ZTk1YzdiZDMzMzM0NGQwNmFjYzYwYTgyMTliYmY2OGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoQ/PhJTX9XarclfERnC2IDUjif/
sy40ki9KqL1FZ3xjV+gFLOgUpEzKDofzUwpw8yWrPgT52AmZJBotLCdGN9LFraa7
Vr9Ln59eqzhg/8LzygSeRDK15I2372jim4SAYuhcgGiC1BKRp9eS6PXLkrYRyha5
jF9xpB8O41OHCJPw8Wt2PeHbwMA1wgYiMacg1bTCMWvYntnydYU7ZXQjpt5vip3J
vfFlzWe3V4XlaS1C91FuvO6bJSA5mng6ELnitLndgMPX8pAQQbqOqDbfYO+41BTY
w0vWFXbWcYb+sWh0NTmPTFDfooLquedxWjgnQOhg+QFY5Bo9p0UFbpvsIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKa106Vx70zM0TQasxgqCGbv2jJMB8GA1UdIwQY
MBaAFN6IS45GLz7BOkAk1mmpnZSvBc2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM29oTGprWXZQc0U2UUNUV2FhbWRsSzhGemJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NWRmNTYtZGQzMi00MzNjLWI0NGUt
NGFmNzA0MDJiMjcwLzEvM29oTGprWXZQc0U2UUNUV2FhbWRsSzhGemJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80NWRmNTYtZGQzMi00MzNjLWI0NGUtNGFmNzA0MDJiMjcw
LzEvM29oTGprWXZQc0U2UUNUV2FhbWRsSzhGemJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYYgZPxB
9jDLbl3QP8iMnjQr7Kv7Vkvon6O6ZMh1XHwEigvcFWSVWC2DRZUliZiq+H1yl6X+
yFjByBIg0EKmcWdcxpGxRIGX9XDHuEGX6Ys6C8zOntRQb8ftg9IWFaciB6/am06U
HuoZTWdwyCkayq9G1TF5Q5HNrkliTjjgASe39aFhB10wENyFl4SZURxruLGEwjMH
HxFfpcHAMRgqZ9OrwXrRoBUTL2BDouDa+FvWkMkrvKyx56m+opN+MtDv6youHJn2
7D0oizYz3VQyeXrPx/6vcBqWXuDMjeBR0/HqxbaOnLgv84TNcNjmTuctUcRo3lrj
gkG8Wsc4z/qwug==
-----END CERTIFICATE-----
Generated at Sun Jul 26 20:28:17 2026 by rpki-client