
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: +zd0QGKdOhuqEmGq39m2wZqzYNLMh5Ci7qapNhvwfKI=
Subject key identifier: 28:2E:0B:26:E2:00:7B:C2:9C:29:8B:48:80:F1:70:48:94:9F:0E:6B
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 01A0016F3F8DCD458093D2C22F085F3ECD21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0F27
Signing time: Fri 14 Aug 2026 18:01:02 +0000
Manifest this update: Fri 14 Aug 2026 18:01:02 +0000
Manifest next update: Sat 15 Aug 2026 18:01:02 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: 4K2QEJYCPFvUspBE4+nu1TxZe2CYg8KbhWqbEeuuJWY=)
2: KUy8l_kE9Ez8yOXsZsPg_xu8U88.roa (hash: Q8NXv7/aGohuJqdBeBqSqaYcBq21Vr5wijgoX0wzMFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:3f:8d:cd:45:80:93:d2:c2:2f:08:5f:3e:cd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Aug 14 18:01:02 2026 GMT
Not After : Aug 15 18:01:02 2026 GMT
Subject: CN=282e0b26e2007bc29c298b4880f17048949f0e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:ad:b5:cd:b9:fc:81:ea:7c:74:8b:ff:5e:
57:c6:de:75:8e:b9:cc:7f:96:42:2d:21:ac:e0:77:
ad:1f:45:ee:c4:25:bd:bf:4c:93:37:53:bb:fa:75:
44:2d:78:8a:4f:4b:a8:40:fb:26:cb:bf:44:b8:68:
02:d4:3e:20:1a:6d:27:c1:76:9c:e0:93:af:2f:28:
70:25:fa:36:ed:de:06:31:cb:2b:ef:61:73:b5:c8:
fc:64:ff:1e:e7:85:c5:e1:6d:da:cd:73:79:42:7c:
b3:1e:68:82:95:86:4a:7a:80:48:dd:a7:0c:54:d4:
95:c0:c7:8e:34:5f:ec:6e:38:48:f3:e9:77:90:ee:
d5:bb:6e:44:29:33:6c:2a:c4:96:80:79:71:fe:be:
3b:bc:f0:82:ae:b1:9b:e8:e3:59:8c:00:93:a6:a1:
13:8c:ca:69:aa:cd:13:f4:64:d3:9f:60:66:d9:e9:
c9:9d:08:24:1d:68:fa:1e:99:ba:37:b7:d2:e9:53:
ab:37:88:8f:7e:b9:bb:ae:6c:85:fa:a2:ee:2b:72:
a8:e1:25:ac:55:c0:16:b4:8d:04:fb:43:92:7c:ea:
f6:c8:27:c0:7c:d5:12:6a:5d:bd:53:39:46:6b:9f:
1b:1f:ee:a7:d0:1b:a5:a7:87:66:2a:af:68:40:b3:
64:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2E:0B:26:E2:00:7B:C2:9C:29:8B:48:80:F1:70:48:94:9F:0E:6B
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f6:ba:fc:d5:30:08:51:de:1e:a0:1b:7c:3e:1f:45:04:30:
f0:8d:43:5d:90:18:67:2c:14:66:99:b9:65:69:78:74:ad:33:
f2:24:5e:56:ce:83:63:ae:7d:44:97:92:1c:66:bb:09:84:52:
b3:1e:2c:98:f5:f5:25:35:e8:f4:db:74:4d:4a:e3:66:f9:94:
f8:a3:94:70:37:43:41:5c:f1:ad:b6:97:69:4e:23:32:42:fe:
61:88:b4:eb:8f:e2:8b:b5:00:9a:2f:55:e0:b7:16:5b:69:c6:
b5:ce:26:15:ec:ce:18:1a:bf:b5:27:e0:55:aa:af:22:3e:32:
2b:e7:da:2d:56:bc:07:87:75:b1:37:08:d4:80:7e:83:9f:0d:
fb:46:08:42:57:a3:37:c7:a7:9a:27:86:f8:86:b3:07:3b:2f:
44:6c:45:2d:c1:12:46:b2:59:73:8d:e8:e1:32:c3:ca:e6:45:
5f:99:29:b5:8e:a4:30:74:66:6c:3e:b9:03:6d:1d:49:df:75:
97:21:e6:0a:dd:34:bc:5d:7f:c3:b4:6b:d6:17:d9:4c:02:f4:
b6:2c:56:31:c5:52:5e:a8:9e:fa:a1:a3:f5:ad:86:8f:ec:1b:
04:2a:12:ab:81:a7:5d:21:2d:ae:79:96:e3:17:46:0f:0d:ca:
6d:41:95:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABbz+NzUWAk9LCLwhfPs0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYzc1NmFmNzdkYWZlYmNhMTA2ODRkNjg1NTZiYWFjZDcx
NzM2MTcwHhcNMjYwODE0MTgwMTAyWhcNMjYwODE1MTgwMTAyWjAzMTEwLwYDVQQD
EygyODJlMGIyNmUyMDA3YmMyOWMyOThiNDg4MGYxNzA0ODk0OWYwZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ6ttc25/IHqfHSL/15Xxt51jrnM
f5ZCLSGs4HetH0XuxCW9v0yTN1O7+nVELXiKT0uoQPsmy79EuGgC1D4gGm0nwXac
4JOvLyhwJfo27d4GMcsr72Fztcj8ZP8e54XF4W3azXN5QnyzHmiClYZKeoBI3acM
VNSVwMeONF/sbjhI8+l3kO7Vu25EKTNsKsSWgHlx/r47vPCCrrGb6ONZjACTpqET
jMppqs0T9GTTn2Bm2enJnQgkHWj6Hpm6N7fS6VOrN4iPfrm7rmyF+qLuK3Ko4SWs
VcAWtI0E+0OSfOr2yCfAfNUSal29UzlGa58bH+6n0Bulp4dmKq9oQLNk9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCguCybiAHvCnCmLSIDxcEiUnw5rMB8GA1UdIwQY
MBaAFN7HVq932v68oQaE1oVWuqzXFzYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3NkV3IzZmFfcnloQm9UV2hWYTZyTmNYTmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MWI4MmItY2RlMC00YWY2LTk1MmMt
N2UwYzdkMzUyNjcxLzEvM3NkV3IzZmFfcnloQm9UV2hWYTZyTmNYTmhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS80MWI4MmItY2RlMC00YWY2LTk1MmMtN2UwYzdkMzUyNjcx
LzEvM3NkV3IzZmFfcnloQm9UV2hWYTZyTmNYTmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/a6/NUw
CFHeHqAbfD4fRQQw8I1DXZAYZywUZpm5ZWl4dK0z8iReVs6DY659RJeSHGa7CYRS
sx4smPX1JTXo9Nt0TUrjZvmU+KOUcDdDQVzxrbaXaU4jMkL+YYi064/ii7UAmi9V
4LcWW2nGtc4mFezOGBq/tSfgVaqvIj4yK+faLVa8B4d1sTcI1IB+g58N+0YIQlej
N8enmieG+IazBzsvRGxFLcESRrJZc43o4TLDyuZFX5kptY6kMHRmbD65A20dSd91
lyHmCt00vF1/w7Rr1hfZTAL0tixWMcVSXqie+qGj9a2Gj+wbBCoSq4GnXSEtrnmW
4xdGDw3KbUGVjA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:58 2026 by rpki-client