Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier: ZlPxC/2tDeA8G1lswqdSUqLG3oN8iBVSdBMxeX6Lfq4=
Subject key identifier: 51:2F:0F:B6:1C:AE:2A:EC:0D:56:E9:E9:CA:91:8E:87:6B:E7:EC:73
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial: 019FA0DFEB94E80D1222DE20D17D0B374C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number: 07D3
Signing time: Mon 27 Jul 2026 00:00:57 +0000
Manifest this update: Mon 27 Jul 2026 00:00:57 +0000
Manifest next update: Tue 28 Jul 2026 00:00:57 +0000
Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: 4n/0SwfEo8YyUdsR/R5zAhte+sYuhjRfb1Axz8wH9pc=)
2: WoN0CrYvueqPk1KqmXJffVK7ib4.roa (hash: 4FA6Dc/pCbAQFuPtL5vNxbuQK2/hlz7MGBa9RY6awaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:eb:94:e8:0d:12:22:de:20:d1:7d:0b:37:4c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Validity
Not Before: Jul 27 00:00:57 2026 GMT
Not After : Jul 28 00:00:57 2026 GMT
Subject: CN=512f0fb61cae2aec0d56e9e9ca918e876be7ec73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:fe:d1:4a:d2:81:4e:72:74:2a:4b:f7:9e:
58:90:d9:c8:45:fa:05:68:c3:4b:85:aa:6a:7c:7b:
a2:3e:6b:4b:ad:e9:48:82:37:75:79:12:59:cd:3a:
db:19:e3:24:69:5f:aa:58:61:3b:27:c6:7e:d5:e8:
77:21:a4:14:5d:40:9b:af:65:bc:61:48:99:49:da:
4b:75:0c:1d:a9:66:87:85:50:5e:43:7d:c6:3f:3c:
fd:b5:de:8c:b8:e8:28:64:fb:87:37:22:51:3e:92:
e8:45:92:2b:a1:a6:56:ab:ff:11:cb:71:0e:e7:8f:
0a:6a:53:a5:f6:6d:62:c2:b2:15:05:e0:be:6d:59:
1c:2b:2b:9b:f9:83:b3:33:78:1a:a8:e6:f1:7f:ee:
b2:db:cd:37:a3:d3:3d:38:a0:b0:24:6e:22:ed:21:
a3:58:e5:ec:28:f8:05:a4:36:a2:51:3a:ba:37:80:
fe:2d:93:b8:fe:5e:81:90:22:76:1a:f4:84:ff:e3:
8a:88:2a:a0:46:7b:7b:74:f9:0a:04:d9:bc:50:2f:
e8:bf:28:84:a2:bc:b5:0a:df:c8:df:62:0c:cd:c1:
71:b3:64:da:39:29:40:e9:22:9d:af:18:85:c9:1e:
a4:b6:a9:f1:b3:36:5b:f5:b4:92:37:fd:38:62:2e:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2F:0F:B6:1C:AE:2A:EC:0D:56:E9:E9:CA:91:8E:87:6B:E7:EC:73
X509v3 Authority Key Identifier:
keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:30:d2:62:2c:1b:ff:d2:f3:e4:f5:a8:41:5e:e7:33:94:43:
a4:17:16:a2:4c:c8:c7:7c:1a:16:58:22:82:f0:cf:fc:e2:f5:
53:62:d5:67:4c:00:27:f6:0d:31:13:30:e7:84:e5:d1:75:10:
bd:67:a2:62:e5:ee:4d:29:11:a6:08:9a:6b:41:73:93:d6:e3:
6a:5c:3e:1f:37:eb:df:d5:27:af:9c:4d:d8:fe:54:2b:66:1a:
1a:d0:ae:05:8a:92:4e:a9:e6:68:c1:41:25:c9:28:5f:82:24:
41:c3:27:0e:9d:31:a6:53:48:cd:81:50:7c:a4:79:66:e2:ba:
69:39:85:75:92:c5:30:d1:e1:c1:24:1e:4c:9a:0c:d1:0a:27:
91:8b:1b:97:60:73:90:c4:00:1c:ac:d5:e1:1f:13:5e:89:36:
db:63:4d:82:b9:07:1e:9e:bc:40:3f:f5:f4:a8:28:aa:9e:34:
a9:fb:6f:b7:90:22:6d:db:32:64:7e:32:26:14:9f:ac:e6:b5:
f6:d4:b5:37:69:88:62:d2:9a:40:64:8c:14:b1:c6:ec:66:41:
04:83:9d:11:01:31:c7:2c:98:14:25:e5:bf:85:a3:5c:c9:10:
ce:4e:64:d6:67:8b:81:c4:3c:e6:93:2c:d8:2c:c3:fd:22:f9:
c3:7e:4e:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g3+uU6A0SIt4g0X0LN0wHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGY5MGE5M2RjOTQyNzg1NTY0NDkwM2NiNzBjMWY3NGI5
MzE3ODYwHhcNMjYwNzI3MDAwMDU3WhcNMjYwNzI4MDAwMDU3WjAzMTEwLwYDVQQD
Eyg1MTJmMGZiNjFjYWUyYWVjMGQ1NmU5ZTljYTkxOGU4NzZiZTdlYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro/+0UrSgU5ydCpL955YkNnIRfoF
aMNLhapqfHuiPmtLrelIgjd1eRJZzTrbGeMkaV+qWGE7J8Z+1eh3IaQUXUCbr2W8
YUiZSdpLdQwdqWaHhVBeQ33GPzz9td6MuOgoZPuHNyJRPpLoRZIroaZWq/8Ry3EO
548KalOl9m1iwrIVBeC+bVkcKyub+YOzM3gaqObxf+6y2803o9M9OKCwJG4i7SGj
WOXsKPgFpDaiUTq6N4D+LZO4/l6BkCJ2GvSE/+OKiCqgRnt7dPkKBNm8UC/ovyiE
ory1Ct/I32IMzcFxs2TaOSlA6SKdrxiFyR6ktqnxszZb9bSSN/04Yi7YewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEvD7YcrirsDVbp6cqRjodr5+xzMB8GA1UdIwQY
MBaAFNxPkKk9yUJ4VWRJA8twwfdLkxeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUt
NjMxNzdmYjE5YWJlLzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUtNjMxNzdmYjE5YWJl
LzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDDSYiwb
/9Lz5PWoQV7nM5RDpBcWokzIx3waFlgigvDP/OL1U2LVZ0wAJ/YNMRMw54Tl0XUQ
vWeiYuXuTSkRpgiaa0Fzk9bjalw+Hzfr39Unr5xN2P5UK2YaGtCuBYqSTqnmaMFB
JckoX4IkQcMnDp0xplNIzYFQfKR5ZuK6aTmFdZLFMNHhwSQeTJoM0QonkYsbl2Bz
kMQAHKzV4R8TXok222NNgrkHHp68QD/19Kgoqp40qftvt5AibdsyZH4yJhSfrOa1
9tS1N2mIYtKaQGSMFLHG7GZBBIOdEQExxyyYFCXlv4WjXMkQzk5k1meLgcQ85pMs
2CzD/SL5w35OLw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:01:12 2026 by rpki-client