Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
File: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft (raw, json)
Hash identifier: 13Cu1jpvWbmfAwX+H/q4mbvNWwM7URIUIAvXBTviZPU=
Subject key identifier: 4C:3F:AA:3A:80:DD:33:D0:D3:6F:76:8A:2F:E4:01:CA:40:A2:17:64
Authority key identifier: DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
Certificate issuer: /CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Certificate serial: 019F17C30CB5BF10C59C87E8F9EA3241E39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
Manifest number: 10EA
Signing time: Tue 30 Jun 2026 09:01:26 +0000
Manifest this update: Tue 30 Jun 2026 09:01:26 +0000
Manifest next update: Wed 01 Jul 2026 09:01:26 +0000
Files and hashes: 1: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl (hash: dtBaaXy+EdfO8UTEnJnSDJlGrksgTU+HsbC6sYG1CW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:0c:b5:bf:10:c5:9c:87:e8:f9:ea:32:41:e3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Validity
Not Before: Jun 30 09:01:26 2026 GMT
Not After : Jul 1 09:01:26 2026 GMT
Subject: CN=4c3faa3a80dd33d0d36f768a2fe401ca40a21764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:80:63:69:78:5e:f6:33:12:e4:f8:18:22:
2b:dd:04:d5:90:6f:ee:89:92:95:bb:f9:00:f6:d7:
5a:13:cd:82:68:67:b8:bf:47:5a:dd:a8:ab:13:5c:
ba:eb:de:06:dc:bf:07:7d:63:d5:e8:c1:fd:82:57:
17:17:73:2c:1b:9c:70:f9:31:c5:37:15:df:1c:86:
4a:d8:22:ea:d5:20:b8:db:22:87:7e:9a:c8:96:70:
a5:1f:6b:36:ce:c0:b6:0e:c9:25:3f:ae:d6:7f:66:
45:18:72:30:55:dc:0d:c1:b8:5d:37:1b:1e:69:21:
71:c8:c7:3d:64:53:70:85:99:9b:49:fd:35:46:35:
ab:5d:40:c4:fe:29:8e:0b:06:6c:d2:c9:03:c8:78:
ba:c1:1a:c2:82:21:5d:5e:7b:9f:f5:b9:72:e9:da:
7f:4b:2f:56:00:25:bc:b0:99:c7:78:55:15:f9:81:
ca:25:a3:7b:37:e8:95:86:d4:15:4c:c0:32:42:a5:
9a:76:20:ed:bf:d0:25:27:86:2a:b3:f7:3b:b0:be:
5e:88:6d:88:7d:3d:3d:9e:5c:02:3a:14:bd:48:16:
db:16:72:be:48:ec:41:66:36:b3:0f:55:ac:63:3f:
6c:48:0f:d7:33:ce:fb:58:71:b5:9a:4c:c0:b6:70:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3F:AA:3A:80:DD:33:D0:D3:6F:76:8A:2F:E4:01:CA:40:A2:17:64
X509v3 Authority Key Identifier:
keyid:DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:06:94:36:a0:bc:54:db:32:95:4d:9d:33:7d:99:ac:22:a6:
26:a3:f9:83:d7:ce:87:06:6a:d4:47:eb:da:54:59:65:e7:97:
c1:b2:e5:54:da:c4:e1:09:95:72:77:0b:ff:8a:32:fb:55:99:
a1:f6:d1:b6:66:fc:3d:89:c1:bb:bb:b1:00:91:be:96:aa:0a:
9d:83:78:20:86:f8:76:6e:3e:21:37:eb:1a:e2:0c:aa:15:54:
bc:c9:95:11:3c:db:84:75:35:00:89:98:00:9d:4e:93:d3:b5:
37:b7:28:0c:a7:0f:50:19:f0:ff:9a:9f:66:1f:1d:9f:c0:56:
a4:53:9f:6b:c0:38:8a:99:93:1e:cb:03:07:32:70:d3:1a:92:
61:01:2a:14:26:68:ef:cf:36:9b:0d:3c:e8:be:2f:ad:27:44:
78:5d:d8:47:82:45:7c:63:6e:66:83:52:56:28:fd:e1:b8:bd:
d6:30:a4:b0:ca:9c:92:19:cd:37:9a:89:e8:d6:09:32:90:8d:
a0:8a:33:57:2a:e8:c7:80:7f:76:bf:7e:8b:a3:c6:35:9b:60:
f1:85:d8:16:7b:7c:89:22:dd:77:ac:e2:22:04:f0:c9:9a:b9:
a9:bd:71:73:24:75:5c:07:94:fa:ec:59:ba:02:ac:60:ad:77:
f3:76:c9:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Xwwy1vxDFnIfo+eoyQeObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTFjYzZkZjEzMzY2ZmM1OTVhNmU3MmVkMDNjNTM4MDA3
OTJiNGIwHhcNMjYwNjMwMDkwMTI2WhcNMjYwNzAxMDkwMTI2WjAzMTEwLwYDVQQD
Eyg0YzNmYWEzYTgwZGQzM2QwZDM2Zjc2OGEyZmU0MDFjYTQwYTIxNzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOmAY2l4XvYzEuT4GCIr3QTVkG/u
iZKVu/kA9tdaE82CaGe4v0da3airE1y6694G3L8HfWPV6MH9glcXF3MsG5xw+THF
NxXfHIZK2CLq1SC42yKHfprIlnClH2s2zsC2DsklP67Wf2ZFGHIwVdwNwbhdNxse
aSFxyMc9ZFNwhZmbSf01RjWrXUDE/imOCwZs0skDyHi6wRrCgiFdXnuf9bly6dp/
Sy9WACW8sJnHeFUV+YHKJaN7N+iVhtQVTMAyQqWadiDtv9AlJ4Yqs/c7sL5eiG2I
fT09nlwCOhS9SBbbFnK+SOxBZjazD1WsYz9sSA/XM877WHG1mkzAtnBsPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEw/qjqA3TPQ0292ii/kAcpAohdkMB8GA1UdIwQY
MBaAFN4RzG3xM2b8WVpucu0DxTgAeStLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hITWJmRXpadnhaV201eTdRUEZPQUI1SzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jNjQ5NGQtZmM2Ni00NTNjLWJjODMt
ZTZjNGRmNDZmMDRkLzEvM2hITWJmRXpadnhaV201eTdRUEZPQUI1SzBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jNjQ5NGQtZmM2Ni00NTNjLWJjODMtZTZjNGRmNDZmMDRk
LzEvM2hITWJmRXpadnhaV201eTdRUEZPQUI1SzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQaUNqC8
VNsylU2dM32ZrCKmJqP5g9fOhwZq1Efr2lRZZeeXwbLlVNrE4QmVcncL/4oy+1WZ
ofbRtmb8PYnBu7uxAJG+lqoKnYN4IIb4dm4+ITfrGuIMqhVUvMmVETzbhHU1AImY
AJ1Ok9O1N7coDKcPUBnw/5qfZh8dn8BWpFOfa8A4ipmTHssDBzJw0xqSYQEqFCZo
7882mw086L4vrSdEeF3YR4JFfGNuZoNSVij94bi91jCksMqckhnNN5qJ6NYJMpCN
oIozVyrox4B/dr9+i6PGNZtg8YXYFnt8iSLdd6ziIgTwyZq5qb1xcyR1XAeU+uxZ
ugKsYK1383bJMw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:47 2026 by rpki-client