
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
File: 3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft (raw, json)
Hash identifier: f/g8LAKMnfbttVicDoMJrBoTMN0xljsucV3imVPHqb0=
Subject key identifier: FE:09:A0:78:BB:5D:F8:30:60:A8:66:50:D6:78:1E:8F:06:28:45:8A
Authority key identifier: DE:D8:2F:F5:5A:44:B7:B7:48:8E:20:E9:FF:25:4E:E0:D1:F4:5D:66
Certificate issuer: /CN=ded82ff55a44b7b7488e20e9ff254ee0d1f45d66
Certificate serial: 019FA0E0F5B01CDEB7A5E63211C885C74FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:02:05 +0000
Manifest this update: Mon 27 Jul 2026 00:02:05 +0000
Manifest next update: Tue 28 Jul 2026 00:02:05 +0000
Files and hashes: 1: 3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl (hash: dyhl23/LqTFLzUtVusTmr5WTjAWtdB6uGXQrRLcnz2E=)
2: jMO6VVlm3HsEOrRN6wSSP0bIcbs.roa (hash: CBnpz7gcb9dPLoNgRFhsVVGmsFE7G/hIyF1S73+vDXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:f5:b0:1c:de:b7:a5:e6:32:11:c8:85:c7:4f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded82ff55a44b7b7488e20e9ff254ee0d1f45d66
Validity
Not Before: Jul 27 00:02:05 2026 GMT
Not After : Jul 28 00:02:05 2026 GMT
Subject: CN=fe09a078bb5df83060a86650d6781e8f0628458a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e5:38:a2:f5:65:be:cc:51:05:8d:0a:4e:79:
78:70:e5:cd:e8:ca:2a:cd:fa:be:83:c6:b1:23:cb:
25:6e:dc:a5:5e:3b:48:b7:20:75:f9:fa:1c:b7:0e:
1a:2a:66:97:e9:36:2b:58:e4:f6:08:5d:d6:e4:be:
d3:32:a8:81:19:6f:38:0e:b0:ce:a6:50:90:e8:52:
d5:e8:9d:19:26:4b:fc:1d:14:33:a7:73:69:dc:21:
9b:f1:3c:f6:f3:20:15:58:22:5d:eb:8c:23:9b:2e:
24:08:58:51:24:dc:77:f7:cf:74:41:12:95:aa:e2:
02:5c:7c:86:42:4b:a9:cd:e9:78:57:be:9e:1d:5f:
16:09:95:27:5f:80:c0:51:42:7a:62:51:3d:47:ba:
50:58:54:1f:0e:3c:aa:44:25:2f:38:64:bc:7a:f1:
92:ee:36:8d:ec:c3:23:56:47:a0:57:63:1d:17:72:
00:ff:c6:f1:c1:c3:a3:cc:05:85:4d:6e:69:87:5d:
a5:c4:c5:ac:b0:91:56:66:24:de:81:da:79:d9:e2:
94:c6:77:e9:1f:d6:b6:ca:fa:dc:67:83:99:cb:88:
d4:3c:88:a0:ca:00:db:57:d4:3f:89:0f:48:dd:cc:
2b:4f:2a:72:b3:ab:b9:5f:b3:f2:cf:93:b0:f3:1a:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:09:A0:78:BB:5D:F8:30:60:A8:66:50:D6:78:1E:8F:06:28:45:8A
X509v3 Authority Key Identifier:
keyid:DE:D8:2F:F5:5A:44:B7:B7:48:8E:20:E9:FF:25:4E:E0:D1:F4:5D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7a:ba:eb:b7:dc:0b:3c:39:56:4d:47:0d:cb:e8:18:d4:4a:
68:cd:90:7f:b0:35:a9:d3:cf:4a:c6:6c:45:5a:4e:4c:b5:71:
b5:ea:fa:a2:65:64:87:aa:8d:dd:34:a9:e8:95:53:76:8b:b4:
79:19:0e:19:64:ff:81:8b:60:62:95:92:68:ae:33:3b:59:72:
92:ab:9b:2f:02:ef:66:b8:1b:6b:b7:90:13:2c:10:27:e0:75:
5e:b0:ee:2b:e0:19:3b:73:4b:f7:31:1a:1f:ab:61:03:d9:54:
63:bb:dc:6c:29:6e:f4:87:ec:54:fb:61:59:84:c7:ac:17:ab:
36:64:1d:62:26:d9:f1:cc:5e:ec:ad:30:fa:f6:f9:ac:d4:c6:
74:5b:73:d3:24:98:c7:25:00:c9:8a:53:f3:c1:ef:bb:5b:07:
72:88:0e:e6:91:b4:b4:5e:70:a2:f0:12:b8:19:ba:1b:00:45:
fc:5a:93:04:52:3d:d3:33:9c:ee:e5:98:7a:4d:48:19:12:64:
a6:57:7e:3b:6f:a0:6c:ee:9a:7e:f2:e9:b2:3e:b6:d4:22:81:
80:e3:a7:f1:a4:dc:7b:aa:cd:1a:2b:13:8b:f4:05:6f:cd:e7:
1f:14:24:63:ef:73:e2:97:6f:d6:79:33:94:a7:ac:15:1e:6f:
2b:f2:0e:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4PWwHN63peYyEciFx0/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZDgyZmY1NWE0NGI3Yjc0ODhlMjBlOWZmMjU0ZWUwZDFm
NDVkNjYwHhcNMjYwNzI3MDAwMjA1WhcNMjYwNzI4MDAwMjA1WjAzMTEwLwYDVQQD
EyhmZTA5YTA3OGJiNWRmODMwNjBhODY2NTBkNjc4MWU4ZjA2Mjg0NThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uU4ovVlvsxRBY0KTnl4cOXN6Moq
zfq+g8axI8slbtylXjtItyB1+foctw4aKmaX6TYrWOT2CF3W5L7TMqiBGW84DrDO
plCQ6FLV6J0ZJkv8HRQzp3Np3CGb8Tz28yAVWCJd64wjmy4kCFhRJNx39890QRKV
quICXHyGQkupzel4V76eHV8WCZUnX4DAUUJ6YlE9R7pQWFQfDjyqRCUvOGS8evGS
7jaN7MMjVkegV2MdF3IA/8bxwcOjzAWFTW5ph12lxMWssJFWZiTegdp52eKUxnfp
H9a2yvrcZ4OZy4jUPIigygDbV9Q/iQ9I3cwrTypys6u5X7Pyz5Ow8xr6VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4JoHi7XfgwYKhmUNZ4Ho8GKEWKMB8GA1UdIwQY
MBaAFN7YL/VaRLe3SI4g6f8lTuDR9F1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3RndjlWcEV0N2RJamlEcF95Vk80TkgwWFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jM2Q5OWItZGMzOS00NWZjLWJlZWIt
MDk5ZTY3YmMzOWU3LzEvM3RndjlWcEV0N2RJamlEcF95Vk80TkgwWFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9jM2Q5OWItZGMzOS00NWZjLWJlZWItMDk5ZTY3YmMzOWU3
LzEvM3RndjlWcEV0N2RJamlEcF95Vk80TkgwWFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXq667fc
Czw5Vk1HDcvoGNRKaM2Qf7A1qdPPSsZsRVpOTLVxter6omVkh6qN3TSp6JVTdou0
eRkOGWT/gYtgYpWSaK4zO1lykqubLwLvZrgba7eQEywQJ+B1XrDuK+AZO3NL9zEa
H6thA9lUY7vcbClu9IfsVPthWYTHrBerNmQdYibZ8cxe7K0w+vb5rNTGdFtz0ySY
xyUAyYpT88Hvu1sHcogO5pG0tF5wovASuBm6GwBF/FqTBFI90zOc7uWYek1IGRJk
pld+O2+gbO6afvLpsj621CKBgOOn8aTce6rNGisTi/QFb83nHxQkY+9z4pdv1nkz
lKesFR5vK/IOXw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:50:10 2026 by rpki-client