Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.mft
File: 3HHQ9j9WHOyzoosMvCRZEC9vA_o.mft (raw, json)
Hash identifier: 9DPmyn98ej+d3jrLwEhxieiFC/sOXuOHn/ZUfoMrF6Q=
Subject key identifier: AC:ED:84:91:50:58:B4:99:ED:A2:04:4A:74:FD:48:62:F8:B1:0E:36
Authority key identifier: DC:71:D0:F6:3F:56:1C:EC:B3:A2:8B:0C:BC:24:59:10:2F:6F:03:FA
Certificate issuer: /CN=dc71d0f63f561cecb3a28b0cbc2459102f6f03fa
Certificate serial: 01A0035E7368B64CDBA3BAFC2C3621DC39E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HHQ9j9WHOyzoosMvCRZEC9vA_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.mft
Manifest number: 7B
Signing time: Sat 15 Aug 2026 03:01:56 +0000
Manifest this update: Sat 15 Aug 2026 03:01:56 +0000
Manifest next update: Sun 16 Aug 2026 03:01:56 +0000
Files and hashes: 1: 3HHQ9j9WHOyzoosMvCRZEC9vA_o.crl (hash: t1HpwSwbrPWNDIBweQL1TtgZvZ006EK18zda4ULBiac=)
2: BApSbsESE-proQA3IjR2Fc5FrQg.roa (hash: tsQTTQkFusyAqW/gQnJmPH0odJMuP2a12omZQ3HbkX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HHQ9j9WHOyzoosMvCRZEC9vA_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5e:73:68:b6:4c:db:a3:ba:fc:2c:36:21:dc:39:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc71d0f63f561cecb3a28b0cbc2459102f6f03fa
Validity
Not Before: Aug 15 03:01:56 2026 GMT
Not After : Aug 16 03:01:56 2026 GMT
Subject: CN=aced84915058b499eda2044a74fd4862f8b10e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:62:51:39:7a:ca:20:79:e1:51:7a:32:be:
4c:82:c8:41:43:a6:bc:cb:67:69:95:dd:0d:c1:2b:
76:f6:1c:69:ad:c2:5c:d0:f8:cc:d1:51:c8:01:f7:
ce:f8:fe:8b:01:20:35:9b:5b:58:a0:ee:22:27:86:
df:5b:68:e7:1a:e9:91:e4:b8:bd:24:93:9b:f0:b4:
c8:7e:58:3e:bd:fa:4b:75:04:8a:28:7e:2a:a8:3e:
67:6b:d7:67:4b:27:78:d5:0d:b2:92:4b:6f:ea:c0:
f1:52:54:32:18:22:f0:30:e0:eb:4a:9b:53:50:66:
c6:b9:37:79:fa:e9:df:aa:24:e0:a5:69:5a:a7:33:
7e:96:b0:1d:35:42:7a:7c:96:ac:1b:1c:35:d8:73:
08:2d:72:d4:58:f0:af:1f:5a:7d:37:b4:f9:2e:19:
42:77:54:7c:72:a0:25:73:2d:91:2b:34:ae:77:bd:
74:ce:fd:ad:08:f3:2f:8e:ca:5f:bb:9d:5a:81:2a:
8a:34:2f:6c:db:76:72:2f:56:7d:a1:fc:9e:ee:4b:
0b:9a:b9:3b:93:e0:21:40:b2:c6:0c:b4:30:f9:e4:
aa:e1:11:2f:c2:a8:f2:c5:b3:ca:b3:e1:86:25:11:
d0:0f:e9:4f:a3:68:0c:b3:4a:42:ae:56:8c:fd:26:
57:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:ED:84:91:50:58:B4:99:ED:A2:04:4A:74:FD:48:62:F8:B1:0E:36
X509v3 Authority Key Identifier:
keyid:DC:71:D0:F6:3F:56:1C:EC:B3:A2:8B:0C:BC:24:59:10:2F:6F:03:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HHQ9j9WHOyzoosMvCRZEC9vA_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b9:68:67:05:4d:1e:1b:d1:dd:49:de:cb:49:a4:87:71:08:
3c:d7:5f:e5:44:5c:d5:d3:c0:5f:f0:c3:26:20:b8:1d:9a:4a:
c6:b0:31:e4:c1:21:36:0f:69:44:65:f0:6f:c3:c5:8a:e4:5c:
9d:1a:25:75:a2:af:a9:12:fd:6e:a5:16:ea:84:bd:75:c3:9d:
b3:7d:52:4f:bb:f5:7c:90:a6:8c:83:8a:37:a0:af:c9:dd:11:
1b:59:93:dc:b9:ed:e4:50:e7:ac:59:ea:13:cd:f6:8f:61:0e:
83:9b:fb:6b:67:1e:72:40:e1:60:92:0b:c6:30:03:f0:8e:88:
ff:43:b1:67:c7:66:34:2d:91:0d:89:1a:c2:42:7b:c1:37:c7:
1c:f4:6c:cf:a8:14:fe:88:b4:7c:26:86:a5:88:11:bb:7f:9d:
26:a9:32:1a:2a:bd:10:a3:ce:d3:06:a8:ce:0d:1d:88:79:2d:
9d:ec:55:bf:16:7a:29:ad:c9:6f:e6:35:92:39:b9:d4:9f:5e:
0a:29:3b:3c:ff:47:db:78:d4:c7:0f:3d:06:30:3f:ff:5a:e0:
1e:ea:0a:b3:a1:3a:a1:24:75:0c:c2:cc:2e:5b:0f:01:45:c3:
9e:0d:73:90:d9:ea:cf:8a:e9:e2:84:61:71:1a:71:e6:f9:00:
de:bc:9b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADXnNotkzbo7r8LDYh3DngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzFkMGY2M2Y1NjFjZWNiM2EyOGIwY2JjMjQ1OTEwMmY2
ZjAzZmEwHhcNMjYwODE1MDMwMTU2WhcNMjYwODE2MDMwMTU2WjAzMTEwLwYDVQQD
EyhhY2VkODQ5MTUwNThiNDk5ZWRhMjA0NGE3NGZkNDg2MmY4YjEwZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjRiUTl6yiB54VF6Mr5MgshBQ6a8
y2dpld0NwSt29hxprcJc0PjM0VHIAffO+P6LASA1m1tYoO4iJ4bfW2jnGumR5Li9
JJOb8LTIflg+vfpLdQSKKH4qqD5na9dnSyd41Q2ykktv6sDxUlQyGCLwMODrSptT
UGbGuTd5+unfqiTgpWlapzN+lrAdNUJ6fJasGxw12HMILXLUWPCvH1p9N7T5LhlC
d1R8cqAlcy2RKzSud710zv2tCPMvjspfu51agSqKNC9s23ZyL1Z9ofye7ksLmrk7
k+AhQLLGDLQw+eSq4REvwqjyxbPKs+GGJRHQD+lPo2gMs0pCrlaM/SZXVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzthJFQWLSZ7aIESnT9SGL4sQ42MB8GA1UdIwQY
MBaAFNxx0PY/Vhzss6KLDLwkWRAvbwP6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hIUTlqOVdIT3l6b29zTXZDUlpFQzl2QV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ZDQwMDQtYWFjMC00ZWFkLWE1ODAt
YzY2NGI0ZTg2YWI1LzEvM0hIUTlqOVdIT3l6b29zTXZDUlpFQzl2QV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ZDQwMDQtYWFjMC00ZWFkLWE1ODAtYzY2NGI0ZTg2YWI1
LzEvM0hIUTlqOVdIT3l6b29zTXZDUlpFQzl2QV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7loZwVN
HhvR3Uney0mkh3EIPNdf5URc1dPAX/DDJiC4HZpKxrAx5MEhNg9pRGXwb8PFiuRc
nRoldaKvqRL9bqUW6oS9dcOds31ST7v1fJCmjIOKN6Cvyd0RG1mT3Lnt5FDnrFnq
E832j2EOg5v7a2ceckDhYJILxjAD8I6I/0OxZ8dmNC2RDYkawkJ7wTfHHPRsz6gU
/oi0fCaGpYgRu3+dJqkyGiq9EKPO0waozg0diHktnexVvxZ6Ka3Jb+Y1kjm51J9e
Cik7PP9H23jUxw89BjA//1rgHuoKs6E6oSR1DMLMLlsPAUXDng1zkNnqz4rp4oRh
cRpx5vkA3rybfg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:17:55 2026 by rpki-client