Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
File: 3rwtwyLztJZucDtdjIi3FvDZsOk.mft (raw, json)
Hash identifier: VHTa3A1/6WF4m8OvauA0TL1Pi2V3R6JlTChcaKsUniE=
Subject key identifier: FA:AB:7A:E6:2B:61:33:51:8F:5B:06:E0:3B:92:E9:68:42:E6:FC:92
Authority key identifier: DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
Certificate issuer: /CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Certificate serial: 019FF91165C47E03FFF3C18935AF2D5CC1BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
Manifest number: 17BA
Signing time: Thu 13 Aug 2026 03:01:34 +0000
Manifest this update: Thu 13 Aug 2026 03:01:34 +0000
Manifest next update: Fri 14 Aug 2026 03:01:34 +0000
Files and hashes: 1: 3rwtwyLztJZucDtdjIi3FvDZsOk.crl (hash: fGavgV2bep36lNhP6QjcHou3rAkBDxZd3MznhAJpea0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:11:65:c4:7e:03:ff:f3:c1:89:35:af:2d:5c:c1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Validity
Not Before: Aug 13 03:01:34 2026 GMT
Not After : Aug 14 03:01:34 2026 GMT
Subject: CN=faab7ae62b6133518f5b06e03b92e96842e6fc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:ed:a0:ad:20:df:fe:1e:dd:72:f4:74:6c:
9d:d2:5b:70:13:bd:31:f9:7d:2f:1f:b5:61:1c:70:
69:e5:28:db:14:6a:2e:a7:20:80:3a:7b:6a:bb:d6:
f7:5f:82:3c:83:0f:13:13:27:d0:2a:de:e7:a9:e4:
59:62:08:58:a6:64:30:3e:97:f7:12:a2:b6:59:be:
44:93:c7:77:31:95:35:4e:08:75:02:a0:08:4b:68:
34:38:57:df:14:4a:97:be:29:87:89:02:aa:9d:99:
f8:aa:e6:df:79:95:d6:07:23:d1:81:50:d9:15:6c:
1f:f4:40:e6:40:dd:b9:13:ab:66:74:45:04:0d:55:
c2:f7:36:f1:c5:53:38:37:79:88:88:8b:5d:c2:30:
0f:a2:fc:80:ed:ed:e3:92:71:fb:d6:84:cd:3e:8b:
38:47:00:75:63:4c:e6:0e:19:72:93:fb:cd:c7:95:
d4:38:16:73:a3:a7:0a:2b:69:e4:74:61:99:01:97:
17:20:36:97:84:ff:c2:46:50:2a:ac:2e:8c:5d:ce:
f8:d8:cc:18:f4:be:60:9e:82:9a:17:9a:37:87:17:
d4:9c:67:94:dd:9e:69:df:f2:63:dc:b7:72:69:85:
06:db:c9:30:3f:bd:b9:e1:bf:a9:ba:40:89:6d:84:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AB:7A:E6:2B:61:33:51:8F:5B:06:E0:3B:92:E9:68:42:E6:FC:92
X509v3 Authority Key Identifier:
keyid:DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:34:c7:9a:f5:15:bf:a6:9f:59:ce:27:55:5b:68:e3:4f:0f:
ed:e7:64:af:32:96:f6:1e:66:1a:02:6b:be:58:cc:84:61:23:
dd:41:37:30:fe:fc:50:17:c6:6d:46:5a:84:8a:3d:a5:c7:59:
35:05:b8:a5:a8:ec:b7:19:2f:51:40:91:a7:c6:ca:e8:c1:45:
92:4e:22:c6:ea:d7:1d:49:a0:6c:8e:61:68:bb:48:d6:64:00:
91:32:9b:0a:17:be:6c:06:b3:07:65:8f:83:97:24:94:2f:81:
38:6a:0b:81:b3:5a:91:fa:a5:aa:43:89:37:13:65:63:91:10:
bb:11:57:b3:fb:c6:75:e6:08:23:85:24:87:4e:f2:2c:70:64:
ce:26:08:9f:4a:26:ad:29:b3:ea:7b:72:73:06:f4:c5:00:92:
62:e7:fe:ea:55:c8:d8:1b:e3:c1:82:2b:d5:71:ee:38:58:2f:
03:a5:db:bd:cd:59:bf:56:84:95:df:8c:d4:19:27:f0:a7:47:
f6:1e:79:76:e0:a3:f6:5a:fa:2e:42:b7:1a:ed:22:cd:24:5e:
7a:b6:e2:61:2c:88:4f:12:fa:76:f5:c3:17:7c:0d:f5:ca:eb:
2a:5b:8f:21:ff:8e:85:7c:45:20:e5:58:1e:39:29:02:54:f6:
5f:dc:b0:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/5EWXEfgP/88GJNa8tXMG6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYmMyZGMzMjJmM2I0OTY2ZTcwM2I1ZDhjODhiNzE2ZjBk
OWIwZTkwHhcNMjYwODEzMDMwMTM0WhcNMjYwODE0MDMwMTM0WjAzMTEwLwYDVQQD
EyhmYWFiN2FlNjJiNjEzMzUxOGY1YjA2ZTAzYjkyZTk2ODQyZTZmYzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiftoK0g3/4e3XL0dGyd0ltwE70x
+X0vH7VhHHBp5SjbFGoupyCAOntqu9b3X4I8gw8TEyfQKt7nqeRZYghYpmQwPpf3
EqK2Wb5Ek8d3MZU1Tgh1AqAIS2g0OFffFEqXvimHiQKqnZn4qubfeZXWByPRgVDZ
FWwf9EDmQN25E6tmdEUEDVXC9zbxxVM4N3mIiItdwjAPovyA7e3jknH71oTNPos4
RwB1Y0zmDhlyk/vNx5XUOBZzo6cKK2nkdGGZAZcXIDaXhP/CRlAqrC6MXc742MwY
9L5gnoKaF5o3hxfUnGeU3Z5p3/Jj3LdyaYUG28kwP7254b+pukCJbYS0kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqreuYrYTNRj1sG4DuS6WhC5vySMB8GA1UdIwQY
MBaAFN68LcMi87SWbnA7XYyItxbw2bDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3J3dHd5THp0Slp1Y0R0ZGpJaTNGdkRac09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84MDBkZWMtYjY2Yy00ZTFhLWE2Y2Mt
ZTg4ZTFhNjY4YmU0LzEvM3J3dHd5THp0Slp1Y0R0ZGpJaTNGdkRac09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84MDBkZWMtYjY2Yy00ZTFhLWE2Y2MtZTg4ZTFhNjY4YmU0
LzEvM3J3dHd5THp0Slp1Y0R0ZGpJaTNGdkRac09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjTHmvUV
v6afWc4nVVto408P7edkrzKW9h5mGgJrvljMhGEj3UE3MP78UBfGbUZahIo9pcdZ
NQW4pajstxkvUUCRp8bK6MFFkk4ixurXHUmgbI5haLtI1mQAkTKbChe+bAazB2WP
g5cklC+BOGoLgbNakfqlqkOJNxNlY5EQuxFXs/vGdeYII4Ukh07yLHBkziYIn0om
rSmz6ntycwb0xQCSYuf+6lXI2BvjwYIr1XHuOFgvA6Xbvc1Zv1aEld+M1Bkn8KdH
9h55duCj9lr6LkK3Gu0izSReerbiYSyITxL6dvXDF3wN9crrKluPIf+OhXxFIOVY
HjkpAlT2X9ywcQ==
-----END CERTIFICATE-----
Generated at Thu Aug 13 10:50:18 2026 by rpki-client