Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File: 3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier: JdI/qww++IQIiY58dbcMA7TwTXvv6YV1REzciEgPhzw=
Subject key identifier: BD:2F:0E:36:FA:38:BE:CF:9A:FC:F9:05:3B:7B:BB:B1:12:E2:07:31
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial: 019FC410ECACF9FDF2955C0B3EF38FB12C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number: 19F5
Signing time: Sun 02 Aug 2026 20:01:11 +0000
Manifest this update: Sun 02 Aug 2026 20:01:11 +0000
Manifest next update: Mon 03 Aug 2026 20:01:11 +0000
Files and hashes: 1: 2W3yWm1HMzPskIDqOBKTk5NLDnk.roa (hash: zkzysD/L4UIm9OcLl6P6Mv4weJO+FXhHhd0t2XLROjI=)
2: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: Q7VW6ILO0VTCi8Abu5qWtD0ulBlHRcgrxL4p7WWc8ew=)
3: K3l-f-R4fzp0JNI40Ow_kAwQElE.roa (hash: lzT7cfBjG064YjxJ7JvC+eelDCQdNhykEA7ZwxG3cvA=)
4: PKWl5L-Kf_6-uLjkK3IrLmDHIJ8.roa (hash: a8KnYbin0YfzPy81a2Ft5OJRitrpc3uTgAStWm8odkA=)
5: WVGS-uOqCUSz2p_N5CL2Cz4z-K0.roa (hash: IB5UKLk0ZZT7DbiIeOg9ZlXwRRXDT147MF0fykJ8TKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c4:10:ec:ac:f9:fd:f2:95:5c:0b:3e:f3:8f:b1:2c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Validity
Not Before: Aug 2 20:01:11 2026 GMT
Not After : Aug 3 20:01:11 2026 GMT
Subject: CN=bd2f0e36fa38becf9afcf9053b7bbbb112e20731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:73:df:ad:b8:3e:f2:2d:bf:66:20:bd:03:
ac:5d:c3:f0:df:89:bb:7c:66:76:cc:69:e3:9b:55:
df:5b:76:45:a3:6e:3d:18:64:81:d9:e8:40:9f:00:
fd:ca:ac:fd:49:fe:d2:1e:c1:4e:67:dc:8b:c1:41:
25:c0:29:5d:21:72:cc:04:38:07:71:92:d3:b3:ee:
24:60:90:20:6d:24:43:ca:67:6d:71:17:61:80:21:
d9:28:9d:01:a0:ce:a7:57:16:31:9b:a9:26:16:48:
39:42:df:9d:d1:d3:a4:c7:56:be:0a:87:27:5e:31:
5b:a9:68:71:bf:7b:5c:46:67:67:ee:8c:c3:70:ae:
9a:e6:34:5d:ce:c3:40:28:1e:46:12:5f:88:6b:6b:
36:5c:89:6a:86:a5:f8:ab:6c:3c:44:26:a5:d7:1b:
11:c9:f3:bf:8f:0e:d0:76:c8:86:02:21:3f:55:a7:
a5:ad:e2:eb:41:e1:33:18:fd:e6:30:94:62:f5:32:
12:ca:c3:b4:23:06:aa:29:ee:73:21:b3:ce:63:5f:
1d:f3:9f:2b:e0:30:e8:39:24:46:1c:52:c1:4f:3c:
bf:23:9a:9f:be:07:7f:2f:d2:ed:01:e9:45:30:38:
d2:09:06:29:95:ee:25:12:d6:9f:1a:a4:85:f4:09:
ba:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2F:0E:36:FA:38:BE:CF:9A:FC:F9:05:3B:7B:BB:B1:12:E2:07:31
X509v3 Authority Key Identifier:
keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cd:32:59:e3:e4:d7:a3:84:10:1d:e4:1c:9e:51:ec:24:8f:
53:59:80:1f:f9:8b:51:a7:1c:b6:f0:87:cb:79:6a:db:5e:da:
3d:b2:50:6c:27:05:a5:36:f5:d7:07:ea:04:ea:0b:54:b2:93:
c5:ec:b2:ca:bc:50:bc:be:99:28:8a:bd:f3:3f:c3:55:c6:79:
0c:f6:04:c5:fb:d0:cf:a9:f9:9f:8f:c7:a6:1e:c3:97:d7:85:
65:db:10:c9:b6:f2:8f:c7:17:6e:88:03:be:61:ed:fe:ec:cc:
95:93:c6:d4:62:22:14:68:14:29:05:d7:b8:70:07:b8:1a:4d:
2f:f9:13:9f:df:93:24:d2:1f:8b:5f:b9:7a:70:ec:20:1b:21:
5b:ee:01:5d:51:c5:15:e2:7c:0b:b4:cf:20:a4:3f:36:23:be:
40:1d:dd:6a:95:f9:93:a0:13:31:d3:5d:af:d3:fa:e6:2d:b5:
35:6e:f1:2a:26:ae:fe:f4:a9:e0:92:db:95:56:49:55:a1:21:
90:80:86:02:d5:8d:4d:67:3f:a3:68:f1:ab:b0:f5:ad:c8:12:
87:07:b6:81:5c:7c:a6:cc:d6:51:64:7d:eb:38:8b:1d:63:31:
5a:a6:a8:07:3d:de:d0:36:a2:0f:9f:3f:e8:85:ac:14:ab:6f:
aa:86:a9:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/EEOys+f3ylVwLPvOPsSx3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYjY1YTkwZWQzY2Y0YWUwNDUyNTU0ZWUzNGI5MmE4NDc2
ZGNmMTAwHhcNMjYwODAyMjAwMTExWhcNMjYwODAzMjAwMTExWjAzMTEwLwYDVQQD
EyhiZDJmMGUzNmZhMzhiZWNmOWFmY2Y5MDUzYjdiYmJiMTEyZTIwNzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkBz3624PvItv2YgvQOsXcPw34m7
fGZ2zGnjm1XfW3ZFo249GGSB2ehAnwD9yqz9Sf7SHsFOZ9yLwUElwCldIXLMBDgH
cZLTs+4kYJAgbSRDymdtcRdhgCHZKJ0BoM6nVxYxm6kmFkg5Qt+d0dOkx1a+Cocn
XjFbqWhxv3tcRmdn7ozDcK6a5jRdzsNAKB5GEl+Ia2s2XIlqhqX4q2w8RCal1xsR
yfO/jw7QdsiGAiE/VaelreLrQeEzGP3mMJRi9TISysO0IwaqKe5zIbPOY18d858r
4DDoOSRGHFLBTzy/I5qfvgd/L9LtAelFMDjSCQYple4lEtafGqSF9Am6QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0vDjb6OL7Pmvz5BTt7u7ES4gcxMB8GA1UdIwQY
MBaAFNy2WpDtPPSuBFJVTuNLkqhHbc8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEt
ODVhOTU1ZjIxNjNiLzEvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEtODVhOTU1ZjIxNjNi
LzEvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYc0yWePk
16OEEB3kHJ5R7CSPU1mAH/mLUacctvCHy3lq217aPbJQbCcFpTb11wfqBOoLVLKT
xeyyyrxQvL6ZKIq98z/DVcZ5DPYExfvQz6n5n4/Hph7Dl9eFZdsQybbyj8cXbogD
vmHt/uzMlZPG1GIiFGgUKQXXuHAHuBpNL/kTn9+TJNIfi1+5enDsIBshW+4BXVHF
FeJ8C7TPIKQ/NiO+QB3dapX5k6ATMdNdr9P65i21NW7xKiau/vSp4JLblVZJVaEh
kICGAtWNTWc/o2jxq7D1rcgShwe2gVx8pszWUWR96ziLHWMxWqaoBz3e0DaiD58/
6IWsFKtvqoapUg==
-----END CERTIFICATE-----
Generated at Sun Aug 2 22:51:12 2026 by rpki-client