Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
File: 3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft (raw, json)
Hash identifier: eBCmEg0w0u18L3Qk2BH76lq0nwFE11ukwJw8tuC/oM4=
Subject key identifier: 29:BF:9C:6B:A9:64:FD:17:AD:B7:FD:A8:B4:4E:CF:93:C9:BC:D8:20
Authority key identifier: DC:75:85:2E:B3:D5:F4:BF:A7:E4:4E:80:EE:A9:88:19:86:40:3C:D4
Certificate issuer: /CN=dc75852eb3d5f4bfa7e44e80eea9881986403cd4
Certificate serial: 01A0010171E9354632C0E62362EF0B254F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
Manifest number: 10F2
Signing time: Fri 14 Aug 2026 16:01:06 +0000
Manifest this update: Fri 14 Aug 2026 16:01:06 +0000
Manifest next update: Sat 15 Aug 2026 16:01:06 +0000
Files and hashes: 1: 3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl (hash: P/GhTNF08AEK0ZP1Ingtj9RfiBdOF07GlioEGXWFsMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:71:e9:35:46:32:c0:e6:23:62:ef:0b:25:4f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc75852eb3d5f4bfa7e44e80eea9881986403cd4
Validity
Not Before: Aug 14 16:01:06 2026 GMT
Not After : Aug 15 16:01:06 2026 GMT
Subject: CN=29bf9c6ba964fd17adb7fda8b44ecf93c9bcd820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:1e:2d:51:b5:49:0a:d4:cb:5d:7d:0f:23:
eb:81:c5:3c:0a:d8:6e:67:11:d0:ae:11:db:61:7b:
54:bb:ee:41:a1:0a:3d:18:1c:ad:c5:db:f8:98:cd:
00:2e:61:7d:c7:b2:5e:de:2c:ff:1e:a3:12:d7:fb:
3a:c0:96:ef:f9:cf:12:32:fa:e5:3d:79:c8:72:4b:
c3:28:88:48:41:06:c6:40:69:df:26:ba:3b:54:4f:
24:de:49:e7:59:23:5b:1f:b4:9b:e4:5b:89:dd:6b:
18:4b:a2:d2:6c:a4:d2:ec:0a:75:19:30:71:d3:ca:
c7:ba:56:ce:97:90:df:6a:72:47:4a:19:b9:ac:91:
34:b0:e3:03:49:53:18:bc:51:2b:08:82:27:e2:94:
94:db:13:89:23:ce:ab:5f:f5:5c:5f:92:b6:b2:10:
34:5f:be:63:2d:a9:7f:ec:65:cb:71:2c:e9:82:d5:
0a:aa:4a:6e:b1:5a:5a:d8:0d:ca:bf:ea:07:65:06:
62:9d:69:9b:2b:c2:e3:f2:24:03:3d:a5:76:e0:ec:
78:35:9d:63:14:33:87:46:00:a3:38:40:cc:94:90:
9e:a2:4e:22:1e:73:fd:ab:d3:97:01:6c:3c:95:ec:
6b:b2:9e:7a:7b:58:88:b0:34:4a:0f:65:0b:65:51:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BF:9C:6B:A9:64:FD:17:AD:B7:FD:A8:B4:4E:CF:93:C9:BC:D8:20
X509v3 Authority Key Identifier:
keyid:DC:75:85:2E:B3:D5:F4:BF:A7:E4:4E:80:EE:A9:88:19:86:40:3C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5b5975-14af-4f26-861d-9cfae8a7597e/1/3HWFLrPV9L-n5E6A7qmIGYZAPNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a1:7e:d5:4a:cb:db:30:32:d9:ea:e8:d1:0d:c4:a6:24:13:
ad:a5:10:29:cb:5f:11:da:d4:9e:2f:e1:f2:e1:0b:74:87:0c:
07:fa:3d:2c:de:99:26:de:a8:d2:3d:02:17:ea:02:00:42:0c:
42:b3:5c:d6:13:86:97:32:ab:ac:35:ea:eb:78:81:78:0e:ee:
6a:35:3e:82:fa:75:af:9e:e9:f9:4f:43:4c:53:c8:49:13:37:
e5:cc:15:6c:b0:75:d5:47:1e:e9:fa:73:c9:79:bc:4e:66:6e:
af:f8:a9:e4:b1:52:f7:ca:75:ef:af:ca:d5:76:29:a4:b8:3f:
d8:01:51:f3:e1:12:a4:71:11:e6:61:2c:5a:06:5f:0f:42:a3:
ff:5a:20:87:4d:00:57:c8:9c:81:1f:16:c8:76:ce:74:1d:5b:
53:69:b4:17:4d:e7:06:f6:a6:2a:61:b9:3c:a6:0d:ed:98:a1:
15:74:fe:b1:fe:57:94:df:06:44:0c:73:cd:b0:08:2b:ad:03:
52:c9:27:65:b0:cb:ec:d5:d6:52:37:fc:0c:05:db:d5:98:7b:
bb:2f:45:fd:24:0e:e0:61:b5:2a:29:ec:14:0d:64:e9:1c:e5:
83:0a:54:93:c9:af:65:45:e2:11:68:ba:4f:7b:6b:7f:ab:f4:
ec:41:2f:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAXHpNUYywOYjYu8LJU9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzU4NTJlYjNkNWY0YmZhN2U0NGU4MGVlYTk4ODE5ODY0
MDNjZDQwHhcNMjYwODE0MTYwMTA2WhcNMjYwODE1MTYwMTA2WjAzMTEwLwYDVQQD
EygyOWJmOWM2YmE5NjRmZDE3YWRiN2ZkYThiNDRlY2Y5M2M5YmNkODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPEeLVG1SQrUy119DyPrgcU8Cthu
ZxHQrhHbYXtUu+5BoQo9GBytxdv4mM0ALmF9x7Je3iz/HqMS1/s6wJbv+c8SMvrl
PXnIckvDKIhIQQbGQGnfJro7VE8k3knnWSNbH7Sb5FuJ3WsYS6LSbKTS7Ap1GTBx
08rHulbOl5DfanJHShm5rJE0sOMDSVMYvFErCIIn4pSU2xOJI86rX/VcX5K2shA0
X75jLal/7GXLcSzpgtUKqkpusVpa2A3Kv+oHZQZinWmbK8Lj8iQDPaV24Ox4NZ1j
FDOHRgCjOEDMlJCeok4iHnP9q9OXAWw8lexrsp56e1iIsDRKD2ULZVFrWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCm/nGupZP0Xrbf9qLROz5PJvNggMB8GA1UdIwQY
MBaAFNx1hS6z1fS/p+ROgO6piBmGQDzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hXRkxyUFY5TC1uNUU2QTdxbUlHWVpBUE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81YjU5NzUtMTRhZi00ZjI2LTg2MWQt
OWNmYWU4YTc1OTdlLzEvM0hXRkxyUFY5TC1uNUU2QTdxbUlHWVpBUE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81YjU5NzUtMTRhZi00ZjI2LTg2MWQtOWNmYWU4YTc1OTdl
LzEvM0hXRkxyUFY5TC1uNUU2QTdxbUlHWVpBUE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvqF+1UrL
2zAy2ero0Q3EpiQTraUQKctfEdrUni/h8uELdIcMB/o9LN6ZJt6o0j0CF+oCAEIM
QrNc1hOGlzKrrDXq63iBeA7uajU+gvp1r57p+U9DTFPISRM35cwVbLB11Uce6fpz
yXm8TmZur/ip5LFS98p176/K1XYppLg/2AFR8+ESpHER5mEsWgZfD0Kj/1ogh00A
V8icgR8WyHbOdB1bU2m0F03nBvamKmG5PKYN7ZihFXT+sf5XlN8GRAxzzbAIK60D
UsknZbDL7NXWUjf8DAXb1Zh7uy9F/SQO4GG1KinsFA1k6RzlgwpUk8mvZUXiEWi6
T3trf6v07EEveQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:46 2026 by rpki-client