Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: /bmFadRgWhK0tj0O22FgKWoICFrTjH7dfC+2+VgLv8A=
Subject key identifier: 2F:94:B9:76:BF:A5:FC:8C:66:3A:48:3D:8E:53:12:B7:BE:0F:82:32
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 019FAB63C1A5CA8027A7271CCB92C809C70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 13BA
Signing time: Wed 29 Jul 2026 01:01:09 +0000
Manifest this update: Wed 29 Jul 2026 01:01:09 +0000
Manifest next update: Thu 30 Jul 2026 01:01:09 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: N+6AFywEJVX+VVVyWcptXkmSzvIHwXdubOtOE+4KJzY=)
2: 5NCPJAHZuuvT_Y3OLL7H8HuHVKg.roa (hash: Bkja5xY8wPIuCivflgBr5uP8e0j+G2X5xzd/ng/E16A=)
3: D6_vhrKcdm3SeocdHjY0RSl6kYk.roa (hash: 7HV4a9Y3R1hQs2yh9xBaiZSckY1ztfOLxpIEor4i7PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:c1:a5:ca:80:27:a7:27:1c:cb:92:c8:09:c7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Jul 29 01:01:09 2026 GMT
Not After : Jul 30 01:01:09 2026 GMT
Subject: CN=2f94b976bfa5fc8c663a483d8e5312b7be0f8232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:b3:73:60:b5:51:13:fc:aa:9a:5d:8d:e5:
03:2a:fe:74:77:15:79:4e:db:38:7a:24:46:59:86:
12:b0:df:e7:ea:9d:8c:d9:b2:46:44:b1:b0:dd:3f:
50:70:7d:75:9c:7c:1e:28:9e:e1:6a:73:4d:ad:ee:
e4:cf:b3:eb:a9:8b:23:df:c2:2c:a6:4d:e7:21:a5:
5b:5c:6e:4b:c2:a8:a1:4f:92:83:49:cf:50:0d:e9:
d9:8a:b0:17:9a:e7:09:bd:30:27:76:1a:64:4f:3d:
58:9d:53:b0:d8:f8:19:d6:e3:e6:11:ab:e2:56:d6:
3b:e1:51:fd:e1:d9:5f:d1:65:c0:ea:a7:2c:bd:ce:
91:01:43:cf:07:0d:1a:ca:53:4e:c5:e3:a0:12:ff:
af:6f:45:0e:4c:0d:94:cf:43:dd:b2:eb:a9:3a:b4:
8f:9d:1c:7f:28:38:69:7c:ec:ea:df:76:77:2a:d8:
bb:69:65:63:4d:b5:14:01:09:17:bf:af:ae:90:d0:
c0:29:f1:7e:17:ff:3e:c9:f2:3e:d5:db:3b:11:e0:
27:ca:84:36:b6:1b:42:0c:06:7c:0d:eb:93:83:19:
33:07:9f:b8:2b:03:c1:54:12:60:ff:70:d3:e2:0d:
a6:0f:94:bf:2e:26:cc:74:b3:4a:2c:e0:24:24:04:
06:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:94:B9:76:BF:A5:FC:8C:66:3A:48:3D:8E:53:12:B7:BE:0F:82:32
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:29:fe:cb:e4:f5:b2:8d:80:4e:38:d6:bb:51:4c:a4:54:cd:
ad:1a:51:59:b2:d4:7f:ba:70:52:40:7c:1d:ed:80:ee:ca:06:
ae:71:60:ab:25:83:a5:8a:ba:b8:67:a3:c2:ea:1f:25:1a:fc:
56:75:0f:fc:cc:fe:df:8b:14:14:3e:e3:f4:5b:54:f0:86:ef:
7e:04:b2:ea:de:cd:0d:44:c1:40:58:d6:ec:41:c8:8c:02:04:
b3:01:f4:fe:8a:77:90:65:20:9f:fd:10:a7:06:7a:5e:94:60:
7c:20:14:88:cf:fb:69:3a:98:3d:fa:5a:6d:e2:22:c8:2a:4e:
93:0a:ea:ae:6d:0a:55:22:5a:dd:dc:10:0b:f2:d0:5e:c0:2f:
6c:e6:00:4f:81:05:59:b9:99:9d:23:9c:5d:db:c8:4d:8a:be:
b6:ea:58:29:fb:6a:72:7b:dc:84:c1:c6:6b:6c:19:e1:7f:d1:
a0:49:c2:3a:0c:36:79:e0:20:a8:e3:17:1d:7e:45:4b:89:dc:
22:89:84:18:a5:2a:3a:97:06:c7:1e:a5:e3:96:83:d7:2c:ed:
b7:5f:0b:44:28:3e:95:b4:41:04:dc:7f:ff:f8:94:9b:04:b6:
bc:11:e3:80:37:cd:f5:f5:21:33:dd:aa:6c:a1:5b:23:2a:99:
1d:25:c8:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY8GlyoAnpyccy5LICccNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTRhNDI5ZTY2NThhYmI3MGEzNzkyYzE3MmQ3ZWQ2MmVi
OGZhMjYwHhcNMjYwNzI5MDEwMTA5WhcNMjYwNzMwMDEwMTA5WjAzMTEwLwYDVQQD
EygyZjk0Yjk3NmJmYTVmYzhjNjYzYTQ4M2Q4ZTUzMTJiN2JlMGY4MjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcSzc2C1URP8qppdjeUDKv50dxV5
Tts4eiRGWYYSsN/n6p2M2bJGRLGw3T9QcH11nHweKJ7hanNNre7kz7PrqYsj38Is
pk3nIaVbXG5LwqihT5KDSc9QDenZirAXmucJvTAndhpkTz1YnVOw2PgZ1uPmEavi
VtY74VH94dlf0WXA6qcsvc6RAUPPBw0aylNOxeOgEv+vb0UOTA2Uz0PdsuupOrSP
nRx/KDhpfOzq33Z3Kti7aWVjTbUUAQkXv6+ukNDAKfF+F/8+yfI+1ds7EeAnyoQ2
thtCDAZ8DeuTgxkzB5+4KwPBVBJg/3DT4g2mD5S/LibMdLNKLOAkJAQGPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+UuXa/pfyMZjpIPY5TEre+D4IyMB8GA1UdIwQY
MBaAFN4UpCnmZYq7cKN5LBctftYuuPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEt
MDVkOWMxY2Q3NDI1LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEtMDVkOWMxY2Q3NDI1
LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSn+y+T1
so2ATjjWu1FMpFTNrRpRWbLUf7pwUkB8He2A7soGrnFgqyWDpYq6uGejwuofJRr8
VnUP/Mz+34sUFD7j9FtU8IbvfgSy6t7NDUTBQFjW7EHIjAIEswH0/op3kGUgn/0Q
pwZ6XpRgfCAUiM/7aTqYPfpabeIiyCpOkwrqrm0KVSJa3dwQC/LQXsAvbOYAT4EF
WbmZnSOcXdvITYq+tupYKftqcnvchMHGa2wZ4X/RoEnCOgw2eeAgqOMXHX5FS4nc
IomEGKUqOpcGxx6l45aD1yztt18LRCg+lbRBBNx///iUmwS2vBHjgDfN9fUhM92q
bKFbIyqZHSXIaQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:33:35 2026 by rpki-client