Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: flWEbwMzeebcH9O6c1vjbP9pd33vpUgsETALwKPFhME=
Subject key identifier: A3:BB:D1:C4:FE:AB:00:11:27:17:0D:B1:97:5D:C5:22:C9:EC:F3:13
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 01A00101D059DD71026E110002284586606A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 16:01:31 +0000
Manifest this update: Fri 14 Aug 2026 16:01:31 +0000
Manifest next update: Sat 15 Aug 2026 16:01:31 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: 08vybXerJ+znpxQrFq47aQkpW+iZ+QjaXNMZtTRNmrw=)
2: 8J_-hWHGPWEYN0vjZgr-eCklQg4.roa (hash: qBQWLHkgusN1QQCqlJvTYnenuo1KralG8LLl2synFhs=)
3: elKDEgk9yKtQtzq3PdJ4l_cpSZQ.roa (hash: 8uKk6fr9oWkQeVcBDQrXHD0Zpv9/C37D7zWtE6D01OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:d0:59:dd:71:02:6e:11:00:02:28:45:86:60:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Aug 14 16:01:31 2026 GMT
Not After : Aug 15 16:01:31 2026 GMT
Subject: CN=a3bbd1c4feab001127170db1975dc522c9ecf313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:30:44:da:b8:ba:1c:72:9d:d1:44:b1:9e:
93:2a:9e:19:13:5f:2f:27:57:d5:89:61:46:f3:3d:
5f:1a:10:88:13:7a:34:57:de:6f:29:16:8e:ad:44:
78:f2:1e:d5:c5:9b:49:a1:ef:0d:6d:08:af:0a:28:
40:9e:cb:c4:d6:89:35:c9:4e:cd:db:df:98:26:2a:
65:6d:00:df:0e:5c:fc:3d:3e:65:31:d1:a2:8b:9a:
83:32:82:7d:70:78:62:ff:c9:45:95:ab:94:9a:db:
96:72:48:d8:a8:70:98:80:a0:99:2e:3a:a5:d6:ba:
ce:4a:23:f8:d3:2c:19:38:a1:0e:d8:fe:3c:2c:f0:
18:bd:2f:fe:35:3a:9e:89:a9:4e:b3:2a:f2:24:02:
be:80:95:7d:09:d8:97:cc:d2:09:bb:df:2e:27:38:
b2:2e:c6:46:d3:5f:80:ac:d8:45:1c:97:e5:06:34:
75:6b:85:4c:63:27:71:0d:1f:7b:f8:63:ed:40:f1:
72:52:2e:27:79:03:f9:68:2b:f0:e9:bb:9f:4f:b7:
d6:84:d7:72:07:f3:af:f0:e8:b7:ee:70:e6:e4:c0:
09:13:2d:8a:8f:bf:80:e2:2f:63:27:3a:fe:25:ce:
8e:1f:14:a0:d5:d8:64:19:30:1d:02:0a:07:59:ee:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BB:D1:C4:FE:AB:00:11:27:17:0D:B1:97:5D:C5:22:C9:EC:F3:13
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ba:74:fc:e6:74:0c:4c:93:4b:b8:04:93:1b:40:76:e4:75:
9f:f1:f4:7e:4f:94:66:8d:5f:f7:e1:91:e7:ea:33:a9:63:e4:
a1:d4:e9:ca:23:9e:6a:90:69:d1:8e:8e:5c:e6:6e:22:c2:ea:
e0:43:58:12:1a:a3:c1:9d:1a:f9:5e:54:31:12:47:41:62:c7:
83:09:e8:da:7c:bd:c8:d8:c3:38:96:c0:d7:ca:aa:3c:61:d6:
10:ab:55:80:06:5d:57:4d:7d:33:7f:b0:33:0c:fe:0d:c5:28:
e0:1a:f2:1b:de:03:7a:b4:a0:52:67:e3:89:10:c2:c4:e5:7c:
97:eb:b2:ec:69:38:83:a3:65:ee:f1:0a:37:3f:21:b9:b5:87:
23:9e:5d:55:03:49:20:73:a0:49:27:ca:46:06:88:18:85:20:
1c:9e:8c:ce:94:bb:6f:6f:d2:5a:f0:4b:dd:7d:d6:95:33:98:
72:84:20:e4:1a:50:bd:6c:c0:3c:cb:bc:b5:e6:30:a5:f7:0d:
7d:3d:85:14:35:45:13:2e:01:a3:6a:96:84:c8:65:fb:ab:0a:
0e:05:31:db:c5:4a:f8:d4:c1:d2:3e:30:b5:46:7b:b3:63:90:
3b:7a:42:02:5b:1d:29:34:ba:16:d8:ae:57:14:43:86:dd:ac:
86:5b:a6:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAdBZ3XECbhEAAihFhmBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTFkYTMyNzYyYTZmOWMxMjZkNjNiYTcwNWQ2MmMwNTBi
ODQ4NGUwHhcNMjYwODE0MTYwMTMxWhcNMjYwODE1MTYwMTMxWjAzMTEwLwYDVQQD
EyhhM2JiZDFjNGZlYWIwMDExMjcxNzBkYjE5NzVkYzUyMmM5ZWNmMzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w0wRNq4uhxyndFEsZ6TKp4ZE18v
J1fViWFG8z1fGhCIE3o0V95vKRaOrUR48h7VxZtJoe8NbQivCihAnsvE1ok1yU7N
29+YJiplbQDfDlz8PT5lMdGii5qDMoJ9cHhi/8lFlauUmtuWckjYqHCYgKCZLjql
1rrOSiP40ywZOKEO2P48LPAYvS/+NTqeialOsyryJAK+gJV9CdiXzNIJu98uJziy
LsZG01+ArNhFHJflBjR1a4VMYydxDR97+GPtQPFyUi4neQP5aCvw6bufT7fWhNdy
B/Ov8Oi37nDm5MAJEy2Kj7+A4i9jJzr+Jc6OHxSg1dhkGTAdAgoHWe7kMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKO70cT+qwARJxcNsZddxSLJ7PMTMB8GA1UdIwQY
MBaAFN5R2jJ2Km+cEm1junBdYsBQuEhOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzBkYjQtNjJlYS00OWRiLTgzMTkt
Y2RmYTYwMTIyNjkwLzEvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mNzBkYjQtNjJlYS00OWRiLTgzMTktY2RmYTYwMTIyNjkw
LzEvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7p0/OZ0
DEyTS7gEkxtAduR1n/H0fk+UZo1f9+GR5+ozqWPkodTpyiOeapBp0Y6OXOZuIsLq
4ENYEhqjwZ0a+V5UMRJHQWLHgwno2ny9yNjDOJbA18qqPGHWEKtVgAZdV019M3+w
Mwz+DcUo4BryG94DerSgUmfjiRDCxOV8l+uy7Gk4g6Nl7vEKNz8hubWHI55dVQNJ
IHOgSSfKRgaIGIUgHJ6MzpS7b2/SWvBL3X3WlTOYcoQg5BpQvWzAPMu8teYwpfcN
fT2FFDVFEy4Bo2qWhMhl+6sKDgUx28VK+NTB0j4wtUZ7s2OQO3pCAlsdKTS6Ftiu
VxRDht2shlumvw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:05 2026 by rpki-client