Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
File: 3EFBHpPiXV7GUJlWmxtcX63Brj0.mft (raw, json)
Hash identifier: 5XZ4MIhdEluvnHNKXol73jBJoOXNaIsFan7Y7oKbnhs=
Subject key identifier: 27:A2:2F:4A:4E:F6:03:28:01:68:E1:0F:E4:3A:B2:A4:35:4A:9C:6C
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 019FA33C8DCF0CAD4D94274C7BA43995B539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
Manifest number: 159A
Signing time: Mon 27 Jul 2026 11:01:22 +0000
Manifest this update: Mon 27 Jul 2026 11:01:22 +0000
Manifest next update: Tue 28 Jul 2026 11:01:22 +0000
Files and hashes: 1: 2uJAkewiUJwsbNaj2yvunQboIco.roa (hash: FFjpTcabKOY4bvHAqUpVIWDG0dv6yHtpa4jSe9dcbIQ=)
2: 3EFBHpPiXV7GUJlWmxtcX63Brj0.crl (hash: AyWiADeBkKJllD1/tyFtjkGwl1CHd1KgTq/+4AqRauU=)
3: B1STsfdesV5NfTBKRKCVN2ABrCw.roa (hash: NWB6mpqgZNqK5Ki19/Fr7idV+OhlroMe3Jwdlj+J+M0=)
4: VaQhwNUDpB1f377_pgDC7bKIVs8.roa (hash: yIsP2S+y7+H5E1qVaCf/heokAGlt0wDZeCh1+1PijTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:8d:cf:0c:ad:4d:94:27:4c:7b:a4:39:95:b5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Jul 27 11:01:22 2026 GMT
Not After : Jul 28 11:01:22 2026 GMT
Subject: CN=27a22f4a4ef603280168e10fe43ab2a4354a9c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:11:e9:85:0e:72:02:6f:42:23:15:d1:9b:
29:ba:d1:54:72:2c:cb:2a:98:2a:3c:bd:02:0c:96:
b2:ce:71:35:66:a2:0b:d7:52:d4:5b:84:f1:d3:52:
af:34:c4:73:6b:26:69:07:f7:37:d2:49:6e:84:68:
9a:27:d9:ce:39:99:c9:bf:17:39:03:62:29:e6:ba:
f5:ce:50:7d:e6:7d:32:3c:bf:9f:17:22:9b:24:25:
35:cd:5c:b1:bb:08:29:46:e0:d4:ec:34:32:02:d4:
4e:1a:ac:75:76:cd:ef:e8:9f:d7:9e:5f:a5:9f:b7:
fe:e7:9b:9e:48:7b:3c:84:49:53:db:59:cb:11:3a:
71:21:51:2d:24:2d:9a:21:ef:85:11:9e:20:68:79:
84:c8:e7:e7:99:8f:86:cb:0e:45:ef:af:30:db:f8:
a7:f9:98:cc:58:36:e3:a6:b9:f7:09:7f:a4:b4:f3:
5d:e5:c6:a5:22:57:14:94:f0:2e:c2:94:87:13:e0:
12:8a:48:88:ef:04:d9:6b:f8:38:44:bf:e7:5a:ba:
1a:6a:ec:bf:df:4a:b6:35:09:90:7d:0b:0f:04:cd:
73:b4:4f:ea:64:e6:2f:90:3d:bc:11:60:77:cf:c4:
57:a4:e2:16:50:45:cb:13:c5:48:64:55:2a:3c:59:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A2:2F:4A:4E:F6:03:28:01:68:E1:0F:E4:3A:B2:A4:35:4A:9C:6C
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8b:bd:10:b9:b4:24:db:7a:63:2a:c7:39:b9:0d:80:89:d1:
19:32:e5:d6:44:82:8b:7c:8a:50:bb:c1:71:c3:f5:84:cb:fd:
8e:31:80:fd:e2:fb:fd:9a:34:e9:e3:44:c3:9b:b9:2b:a6:5f:
05:c8:58:23:a8:9e:4e:d9:9a:f7:4d:07:1a:15:44:54:94:17:
15:9f:38:bc:cb:f2:27:f3:d8:c8:ec:50:66:8f:af:61:b2:c8:
6b:b8:2b:5a:b3:f6:d2:b7:27:60:87:dd:88:03:de:6b:e4:08:
77:be:94:9a:0b:56:2d:0d:69:90:5b:69:42:de:8e:3a:90:6d:
25:3c:1c:4c:85:bf:8b:02:60:37:90:49:0b:59:08:bd:53:8a:
2a:e6:a2:88:3d:27:7a:5a:04:f9:29:bd:ed:81:af:7c:78:75:
4f:28:fd:88:0e:39:b4:70:54:bf:b4:1d:c7:a3:01:be:1b:c2:
61:66:e0:87:6e:59:cc:ba:55:69:16:69:35:d7:7c:71:89:e8:
d7:d0:6f:5f:b4:9d:59:b0:63:71:c1:d7:dc:45:49:fb:bb:86:
f9:35:12:47:a8:f4:73:c0:e2:90:9d:6f:63:3b:6b:b4:a5:d8:
97:e3:07:31:f0:ba:c4:c4:f1:90:9e:25:50:2e:4a:54:00:8f:
11:d3:8e:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jPI3PDK1NlCdMe6Q5lbU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDE0MTFlOTNlMjVkNWVjNjUwOTk1NjliMWI1YzVmYWRj
MWFlM2QwHhcNMjYwNzI3MTEwMTIyWhcNMjYwNzI4MTEwMTIyWjAzMTEwLwYDVQQD
EygyN2EyMmY0YTRlZjYwMzI4MDE2OGUxMGZlNDNhYjJhNDM1NGE5YzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tUR6YUOcgJvQiMV0ZsputFUcizL
KpgqPL0CDJayznE1ZqIL11LUW4Tx01KvNMRzayZpB/c30kluhGiaJ9nOOZnJvxc5
A2Ip5rr1zlB95n0yPL+fFyKbJCU1zVyxuwgpRuDU7DQyAtROGqx1ds3v6J/Xnl+l
n7f+55ueSHs8hElT21nLETpxIVEtJC2aIe+FEZ4gaHmEyOfnmY+Gyw5F768w2/in
+ZjMWDbjprn3CX+ktPNd5calIlcUlPAuwpSHE+ASikiI7wTZa/g4RL/nWroaauy/
30q2NQmQfQsPBM1ztE/qZOYvkD28EWB3z8RXpOIWUEXLE8VIZFUqPFmoxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeiL0pO9gMoAWjhD+Q6sqQ1SpxsMB8GA1UdIwQY
MBaAFNxBQR6T4l1exlCZVpsbXF+twa49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEt
NTEzODdkMTYwYmE5LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEtNTEzODdkMTYwYmE5
LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIu9ELm0
JNt6YyrHObkNgInRGTLl1kSCi3yKULvBccP1hMv9jjGA/eL7/Zo06eNEw5u5K6Zf
BchYI6ieTtma900HGhVEVJQXFZ84vMvyJ/PYyOxQZo+vYbLIa7grWrP20rcnYIfd
iAPea+QId76UmgtWLQ1pkFtpQt6OOpBtJTwcTIW/iwJgN5BJC1kIvVOKKuaiiD0n
eloE+Sm97YGvfHh1Tyj9iA45tHBUv7Qdx6MBvhvCYWbgh25ZzLpVaRZpNdd8cYno
19BvX7SdWbBjccHX3EVJ+7uG+TUSR6j0c8DikJ1vYztrtKXYl+MHMfC6xMTxkJ4l
UC5KVACPEdOOyA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:38:34 2026 by rpki-client