Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier: fhF6h/5T1CCiSfo6gjmIGT2gHGXQ0niF+O1raSqyow4=
Subject key identifier: 23:73:7D:75:B9:5C:70:C1:96:0E:D5:A6:4A:AE:9D:9F:9E:66:32:6E
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial: 019F183131EDED801E2E51CA6E37EBC8FD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number: 15CA
Signing time: Tue 30 Jun 2026 11:01:44 +0000
Manifest this update: Tue 30 Jun 2026 11:01:44 +0000
Manifest next update: Wed 01 Jul 2026 11:01:44 +0000
Files and hashes: 1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: UroFTyoaPITbaj9iTmhjUZtbPbruwBdXcQmZGGCyijY=)
2: 7cYGhHG7YtiE08uGuW1-X_rHKII.roa (hash: hmnCIat4n3k5p2akfmzZ49cT/kokW1B90E1WUFaEO78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:31:ed:ed:80:1e:2e:51:ca:6e:37:eb:c8:fd:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
Validity
Not Before: Jun 30 11:01:44 2026 GMT
Not After : Jul 1 11:01:44 2026 GMT
Subject: CN=23737d75b95c70c1960ed5a64aae9d9f9e66326e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:cc:cc:29:2c:99:11:a3:80:8f:24:cf:6e:
fe:df:40:ee:a0:51:ca:88:3d:ac:09:be:97:69:d5:
e1:46:d7:78:9d:ab:26:b9:ef:ec:15:24:a6:d0:e7:
36:97:26:cd:2f:b0:ab:a5:76:06:1a:4f:22:72:c7:
4e:d7:b9:9f:9d:0a:27:73:e3:c5:b3:e9:94:4f:b3:
aa:ed:1f:47:be:9c:0c:3b:1e:9a:9b:36:53:e9:91:
5f:a5:49:35:50:cf:53:9a:4d:fa:c3:53:d3:71:80:
6d:35:80:4f:c2:43:71:ef:69:91:b9:13:97:05:ba:
4c:c0:01:f5:f2:cd:13:e7:04:b5:9b:0f:79:57:c2:
2f:af:19:7d:4e:fb:ac:0b:fc:27:ba:11:9a:af:cb:
34:d6:a0:a7:35:7a:83:6d:5a:a2:34:7d:2b:c4:c1:
1a:0e:c0:59:e4:17:98:55:a2:2b:2b:12:a7:d9:72:
73:75:b6:3c:c6:f8:35:25:48:ae:a2:a2:24:dd:b5:
01:8f:e4:64:75:ed:4b:d6:10:a8:82:8b:7f:85:06:
ea:80:18:57:12:05:76:35:42:c3:a8:3e:12:13:dd:
54:93:d7:d3:d2:a3:27:8f:9c:0d:69:16:02:b9:c5:
91:b0:2b:a2:89:77:ab:8a:31:20:67:8d:bf:c6:a5:
a8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:73:7D:75:B9:5C:70:C1:96:0E:D5:A6:4A:AE:9D:9F:9E:66:32:6E
X509v3 Authority Key Identifier:
keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:91:24:80:d2:80:83:2f:fb:cc:58:26:50:9f:e2:76:69:09:
e5:dd:03:47:cc:56:52:88:49:d4:38:cd:7c:ce:63:64:46:a3:
d3:ab:94:fc:d5:69:bd:f9:e0:e4:77:8a:a6:0a:23:83:74:ec:
ec:65:91:d5:de:d7:d1:e9:9f:46:8a:44:ff:0d:57:c4:2c:c0:
e3:d5:53:bc:a9:81:4c:4a:40:1c:4a:81:08:26:82:81:05:de:
f2:0b:04:bc:bc:d4:e7:ac:80:64:c8:cf:60:5a:4e:bc:22:c6:
d5:8c:c9:f3:ab:44:c9:46:f0:a7:72:51:44:86:01:d9:68:5c:
56:a3:f9:5f:36:c5:37:19:d8:72:47:72:e3:e4:a5:bd:9b:21:
46:da:b4:f5:80:72:2f:df:ca:fc:12:f7:db:17:4a:0c:16:f7:
21:f7:65:f1:a8:39:61:35:f7:db:84:a4:aa:0c:18:1a:e8:26:
01:5b:0e:40:bc:e9:ea:fe:55:ee:c5:0f:fa:32:59:ef:6e:44:
9e:8e:63:70:56:40:16:06:aa:20:e9:49:6f:32:30:bd:ab:bb:
6a:64:01:48:f6:96:12:2b:d5:5c:7e:ad:60:d6:38:f8:6f:ba:
17:4b:8a:e4:c0:16:66:96:57:a7:f0:5d:fe:58:b1:7a:bb:5b:
ed:01:4d:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMTHt7YAeLlHKbjfryP1yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWI1NDg3NjJjN2Q0Y2FjY2I2MTZkODE5Y2U5NWNmNjI3
YjIwMjEwHhcNMjYwNjMwMTEwMTQ0WhcNMjYwNzAxMTEwMTQ0WjAzMTEwLwYDVQQD
EygyMzczN2Q3NWI5NWM3MGMxOTYwZWQ1YTY0YWFlOWQ5ZjllNjYzMjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYnMzCksmRGjgI8kz27+30DuoFHK
iD2sCb6XadXhRtd4nasmue/sFSSm0Oc2lybNL7CrpXYGGk8icsdO17mfnQonc+PF
s+mUT7Oq7R9HvpwMOx6amzZT6ZFfpUk1UM9Tmk36w1PTcYBtNYBPwkNx72mRuROX
BbpMwAH18s0T5wS1mw95V8Ivrxl9TvusC/wnuhGar8s01qCnNXqDbVqiNH0rxMEa
DsBZ5BeYVaIrKxKn2XJzdbY8xvg1JUiuoqIk3bUBj+Rkde1L1hCogot/hQbqgBhX
EgV2NULDqD4SE91Uk9fT0qMnj5wNaRYCucWRsCuiiXerijEgZ42/xqWokQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNzfXW5XHDBlg7VpkqunZ+eZjJuMB8GA1UdIwQY
MBaAFNzrVIdix9TKzLYW2BnOlc9ieyAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM090VWgyTEgxTXJNdGhiWUdjNlZ6Mko3SUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iZTIyMzYtYzJiYS00NzhhLWFiYzMt
YjRjZWE1MTQ1NmI0LzEvM090VWgyTEgxTXJNdGhiWUdjNlZ6Mko3SUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iZTIyMzYtYzJiYS00NzhhLWFiYzMtYjRjZWE1MTQ1NmI0
LzEvM090VWgyTEgxTXJNdGhiWUdjNlZ6Mko3SUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpEkgNKA
gy/7zFgmUJ/idmkJ5d0DR8xWUohJ1DjNfM5jZEaj06uU/NVpvfng5HeKpgojg3Ts
7GWR1d7X0emfRopE/w1XxCzA49VTvKmBTEpAHEqBCCaCgQXe8gsEvLzU56yAZMjP
YFpOvCLG1YzJ86tEyUbwp3JRRIYB2WhcVqP5XzbFNxnYckdy4+SlvZshRtq09YBy
L9/K/BL32xdKDBb3Ifdl8ag5YTX324SkqgwYGugmAVsOQLzp6v5V7sUP+jJZ725E
no5jcFZAFgaqIOlJbzIwvau7amQBSPaWEivVXH6tYNY4+G+6F0uK5MAWZpZXp/Bd
/lixertb7QFN6Q==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:27 2026 by rpki-client