Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.mft
File: D3EroUxCsiiWFXFTV4pt3N7T3DU.mft (raw, json)
Hash identifier: gDzVKO8TScEpptaZeP9YMwp0F+pS6L3KB07auz/HkfA=
Subject key identifier: 0F:B0:BA:49:C6:BA:47:1A:B1:A6:57:29:28:E2:40:51:72:75:0B:75
Authority key identifier: 0F:71:2B:A1:4C:42:B2:28:96:15:71:53:57:8A:6D:DC:DE:D3:DC:35
Certificate issuer: /CN=0f712ba14c42b22896157153578a6ddcded3dc35
Certificate serial: 019FA0E0F22C6AE632CE89F493301861487F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3EroUxCsiiWFXFTV4pt3N7T3DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:02:04 +0000
Manifest this update: Mon 27 Jul 2026 00:02:04 +0000
Manifest next update: Tue 28 Jul 2026 00:02:04 +0000
Files and hashes: 1: D3EroUxCsiiWFXFTV4pt3N7T3DU.crl (hash: o6xCZFNJf6vqdTO5kVxm3fTMC66pzg9rejrmuLiABFc=)
2: XJeijONfdCexlEZTiQ2-0wtFkjU.roa (hash: QjzatZEcE3yyHHM21yG7Bv904Jd1j3rI9DssFnvI/Ls=)
3: n3lR-lpuGAiXgRrmixMN2OPkEaw.roa (hash: s10of/A82nI3tslY3AoBVKAzN9hCZPMlXpS+Trtgfpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3EroUxCsiiWFXFTV4pt3N7T3DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:f2:2c:6a:e6:32:ce:89:f4:93:30:18:61:48:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f712ba14c42b22896157153578a6ddcded3dc35
Validity
Not Before: Jul 27 00:02:04 2026 GMT
Not After : Jul 28 00:02:04 2026 GMT
Subject: CN=0fb0ba49c6ba471ab1a6572928e2405172750b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:d7:d2:85:14:3c:c4:cf:4b:fe:8a:9e:20:
10:49:1a:87:de:eb:38:e4:48:8b:c5:38:c4:a7:bb:
25:9f:c3:a7:ab:b8:61:b4:14:e6:49:1f:99:e4:10:
36:12:b2:08:cf:d1:3f:1f:8b:89:7b:21:b7:2f:e1:
1d:19:72:3d:33:2c:b8:78:d5:98:5f:29:46:b0:e3:
46:28:78:a0:d6:0d:d2:26:0b:0a:ef:82:72:e3:66:
6f:72:df:2c:14:c5:96:5b:a9:04:ec:e8:23:b7:12:
14:05:f7:96:d4:98:97:62:12:7c:80:54:82:f7:1d:
a4:03:34:e1:9c:01:10:a3:bc:77:0f:db:00:79:6a:
04:28:7b:72:60:38:de:aa:62:ef:b7:96:b6:74:ff:
44:88:98:e2:a8:6d:9c:97:63:40:b7:e0:7d:f7:69:
a1:fc:9c:e3:b0:0d:a9:fa:1b:1e:2e:26:08:4e:f1:
e0:f8:3a:a1:52:6a:64:99:7b:8e:f4:7f:1b:23:a5:
38:c5:87:70:e9:be:7c:fb:e8:32:0d:6e:8c:3d:1f:
fb:3a:ae:e0:8d:3d:3e:db:8d:8b:9a:67:89:c3:d1:
ad:05:86:2e:e9:8a:65:41:60:b3:57:5f:64:ba:68:
0e:7f:ff:4d:a9:50:f2:dc:ed:2d:66:01:26:09:d1:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B0:BA:49:C6:BA:47:1A:B1:A6:57:29:28:E2:40:51:72:75:0B:75
X509v3 Authority Key Identifier:
keyid:0F:71:2B:A1:4C:42:B2:28:96:15:71:53:57:8A:6D:DC:DE:D3:DC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3EroUxCsiiWFXFTV4pt3N7T3DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e9:4b:f3:ee:8d:64:d7:82:97:21:ff:11:ff:55:e5:7f:10:
f4:c4:4c:26:c3:77:dd:04:d9:50:33:d9:60:d2:6b:b6:3e:0a:
44:22:06:41:dc:4b:85:20:f6:b7:40:58:c9:d4:d0:2e:e7:9c:
3f:52:c9:10:4c:b7:b8:e1:3a:33:e5:6f:93:a7:20:1f:94:46:
c5:05:43:55:19:58:ce:fb:74:d0:fc:ff:42:2f:7a:c6:85:5b:
62:44:23:21:b6:23:86:09:71:5d:30:10:7b:d7:0a:8d:2a:b9:
ba:8f:b0:30:6b:e8:3f:55:44:4e:a9:81:6f:b3:8a:0a:5a:f3:
93:4c:0b:88:ae:7e:77:a4:fd:61:83:de:f8:c2:50:63:6a:58:
62:71:98:a7:85:b3:78:f1:a9:da:e2:d8:39:de:54:8d:03:51:
4a:fc:ad:45:2d:58:40:54:a1:99:6e:c3:3d:24:df:4e:cb:ee:
0e:67:6c:0e:65:fa:d9:fa:cc:f0:2f:bc:a3:6d:b0:5f:96:78:
f5:b2:3d:01:5d:d8:f0:72:48:7d:1e:55:2d:22:49:e5:ee:e9:
64:40:49:f4:55:31:ab:48:6b:08:0b:a8:c2:d3:74:72:ef:a7:
cb:7c:99:89:ea:ab:c7:01:2d:4d:79:96:cc:9b:80:14:ac:ec:
42:e9:ff:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4PIsauYyzon0kzAYYUh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzEyYmExNGM0MmIyMjg5NjE1NzE1MzU3OGE2ZGRjZGVk
M2RjMzUwHhcNMjYwNzI3MDAwMjA0WhcNMjYwNzI4MDAwMjA0WjAzMTEwLwYDVQQD
EygwZmIwYmE0OWM2YmE0NzFhYjFhNjU3MjkyOGUyNDA1MTcyNzUwYjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/nX0oUUPMTPS/6KniAQSRqH3us4
5EiLxTjEp7sln8Onq7hhtBTmSR+Z5BA2ErIIz9E/H4uJeyG3L+EdGXI9Myy4eNWY
XylGsONGKHig1g3SJgsK74Jy42Zvct8sFMWWW6kE7OgjtxIUBfeW1JiXYhJ8gFSC
9x2kAzThnAEQo7x3D9sAeWoEKHtyYDjeqmLvt5a2dP9EiJjiqG2cl2NAt+B992mh
/JzjsA2p+hseLiYITvHg+DqhUmpkmXuO9H8bI6U4xYdw6b58++gyDW6MPR/7Oq7g
jT0+242LmmeJw9GtBYYu6YplQWCzV19kumgOf/9NqVDy3O0tZgEmCdHHMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+wuknGukcasaZXKSjiQFFydQt1MB8GA1UdIwQY
MBaAFA9xK6FMQrIolhVxU1eKbdze09w1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNFcm9VeENzaWlXRlhGVFY0cHQzTjdUM0RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgt
YTQyOTZhZDk4NjM1LzEvRDNFcm9VeENzaWlXRlhGVFY0cHQzTjdUM0RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgtYTQyOTZhZDk4NjM1
LzEvRDNFcm9VeENzaWlXRlhGVFY0cHQzTjdUM0RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUulL8+6N
ZNeClyH/Ef9V5X8Q9MRMJsN33QTZUDPZYNJrtj4KRCIGQdxLhSD2t0BYydTQLuec
P1LJEEy3uOE6M+Vvk6cgH5RGxQVDVRlYzvt00Pz/Qi96xoVbYkQjIbYjhglxXTAQ
e9cKjSq5uo+wMGvoP1VETqmBb7OKClrzk0wLiK5+d6T9YYPe+MJQY2pYYnGYp4Wz
ePGp2uLYOd5UjQNRSvytRS1YQFShmW7DPSTfTsvuDmdsDmX62frM8C+8o22wX5Z4
9bI9AV3Y8HJIfR5VLSJJ5e7pZEBJ9FUxq0hrCAuowtN0cu+ny3yZieqrxwEtTXmW
zJuAFKzsQun/IQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:22:10 2026 by rpki-client