Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: IL7amesER2OOsYtjanWerrQJ55lAsQkgeUt8Wi+bLVc=
Subject key identifier: 3C:C4:DD:11:13:48:D2:DC:E3:5E:E2:02:48:53:D7:1F:51:2E:A0:8F
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 019F1830A498C2BA5125FA1B48AA869A0466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 191A
Signing time: Tue 30 Jun 2026 11:01:08 +0000
Manifest this update: Tue 30 Jun 2026 11:01:08 +0000
Manifest next update: Wed 01 Jul 2026 11:01:08 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: KqF+sosMLWzebMqzy0nP40HqbLQ+6R0jFUxoTeWgfkg=)
2: w3_eDrVHUYCcKtbza7c41NLDYIM.roa (hash: IPJ09SAjboh4Vep0OkCZipCIUFqGArpEx9t2oIDtFc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:a4:98:c2:ba:51:25:fa:1b:48:aa:86:9a:04:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Jun 30 11:01:08 2026 GMT
Not After : Jul 1 11:01:08 2026 GMT
Subject: CN=3cc4dd111348d2dce35ee2024853d71f512ea08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:08:e3:bc:7d:0d:44:34:c9:a1:79:49:80:
91:f9:f2:3f:2c:81:b3:dc:f0:86:aa:8e:a4:3d:3d:
83:b1:15:2f:db:52:e7:a2:05:09:7d:2a:27:b3:4c:
0a:cd:8a:dc:aa:7a:fb:4f:e6:60:da:4f:7a:82:43:
61:4d:c7:47:c6:fd:25:31:de:c3:26:98:9d:37:62:
32:c2:63:18:93:50:b2:5b:01:2d:e6:80:51:3d:15:
1a:36:c3:e3:41:4f:f1:b3:bb:af:f4:25:b7:8e:c2:
f7:50:19:35:2b:89:cb:98:31:85:65:ca:2c:67:37:
21:cf:af:29:7d:49:fe:76:eb:32:c8:e2:4a:fe:7f:
f7:af:cb:e2:77:fc:cd:e4:7a:58:c7:73:14:c5:38:
b1:38:c6:f3:40:d6:c0:db:4e:0d:5e:ae:bb:09:7e:
c8:9b:38:97:79:93:35:11:d2:66:a8:11:fc:74:a0:
33:d9:4e:6e:8a:c6:59:18:d7:4a:e5:fe:fe:5b:b6:
72:a8:1c:b4:a2:cf:9a:82:ce:e0:8b:ce:39:70:f7:
8d:4d:5c:b5:e5:d3:8f:ac:1f:91:74:ac:9e:3a:b0:
5e:6b:bf:1f:bf:7c:c0:e1:e0:12:08:d9:73:34:be:
5a:e2:22:3f:98:d3:78:43:a5:fd:92:bf:70:34:20:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C4:DD:11:13:48:D2:DC:E3:5E:E2:02:48:53:D7:1F:51:2E:A0:8F
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:97:cd:0a:10:a1:a5:89:01:24:be:50:43:03:10:ad:1d:56:
5a:cd:96:12:0a:58:82:2e:c3:d1:af:4d:42:3d:80:58:4d:c5:
5b:51:19:b6:e8:d2:f7:8d:47:62:e3:bc:3a:94:2b:f7:fc:4a:
da:20:2e:87:85:27:96:1d:99:88:e1:ba:15:12:b9:cc:ab:20:
bc:73:d3:04:7a:4e:dd:55:39:01:ae:12:71:67:19:40:42:ae:
8c:13:fb:0f:aa:2a:35:ac:9f:0d:cc:b9:b2:8c:77:07:02:07:
61:b0:78:2a:b3:3d:73:3b:a4:a0:f8:9b:da:5b:10:fb:29:16:
e9:5d:5c:d2:e5:4a:b3:47:a6:71:41:ef:88:5f:6f:ee:38:86:
c3:da:d2:7b:ae:1b:a2:03:38:94:ae:a3:4b:4c:e5:bb:ec:84:
1c:82:9a:fd:2b:a3:28:d0:63:da:db:e3:0c:2b:97:f4:e4:d0:
41:25:7e:13:6d:5f:02:34:80:7f:f4:1e:05:a7:2c:cc:fe:b7:
07:50:ac:ca:3b:5b:e4:a5:6e:74:46:63:3d:c7:4d:6b:d0:be:
57:5c:13:ea:6a:1e:ed:94:57:ba:4d:88:ee:82:60:e4:65:49:
69:6b:4e:d2:47:13:f4:f7:3e:d0:86:de:15:50:dd:cf:f4:b1:
77:c8:8e:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMKSYwrpRJfobSKqGmgRmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTVlYzE3NWY2ZWU3YTFmYzFmODlhZGY3NTRiYjJhMDg2
MjU3OGEwHhcNMjYwNjMwMTEwMTA4WhcNMjYwNzAxMTEwMTA4WjAzMTEwLwYDVQQD
EygzY2M0ZGQxMTEzNDhkMmRjZTM1ZWUyMDI0ODUzZDcxZjUxMmVhMDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI4I47x9DUQ0yaF5SYCR+fI/LIGz
3PCGqo6kPT2DsRUv21LnogUJfSons0wKzYrcqnr7T+Zg2k96gkNhTcdHxv0lMd7D
JpidN2IywmMYk1CyWwEt5oBRPRUaNsPjQU/xs7uv9CW3jsL3UBk1K4nLmDGFZcos
Zzchz68pfUn+dusyyOJK/n/3r8vid/zN5HpYx3MUxTixOMbzQNbA204NXq67CX7I
mziXeZM1EdJmqBH8dKAz2U5uisZZGNdK5f7+W7ZyqBy0os+ags7gi845cPeNTVy1
5dOPrB+RdKyeOrBea78fv3zA4eASCNlzNL5a4iI/mNN4Q6X9kr9wNCBJEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzE3RETSNLc417iAkhT1x9RLqCPMB8GA1UdIwQY
MBaAFN1V7Bdfbueh/B+JrfdUuyoIYleKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80MGQ0MDctMWVhYy00MzgxLThmYTYt
NDZjMmNjMjgwMmYxLzEvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80MGQ0MDctMWVhYy00MzgxLThmYTYtNDZjMmNjMjgwMmYx
LzEvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZfNChCh
pYkBJL5QQwMQrR1WWs2WEgpYgi7D0a9NQj2AWE3FW1EZtujS941HYuO8OpQr9/xK
2iAuh4Unlh2ZiOG6FRK5zKsgvHPTBHpO3VU5Aa4ScWcZQEKujBP7D6oqNayfDcy5
sox3BwIHYbB4KrM9czukoPib2lsQ+ykW6V1c0uVKs0emcUHviF9v7jiGw9rSe64b
ogM4lK6jS0zlu+yEHIKa/SujKNBj2tvjDCuX9OTQQSV+E21fAjSAf/QeBacszP63
B1Csyjtb5KVudEZjPcdNa9C+V1wT6moe7ZRXuk2I7oJg5GVJaWtO0kcT9Pc+0Ibe
FVDdz/Sxd8iOnw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:01 2026 by rpki-client