Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
File: 3DC4_dBG72WGgJfwNrinyFVyqtA.mft (raw, json)
Hash identifier: Ah33vu4RKxeIu0jjESAI7IH6sHLzosFg9C0Jmt+OVCE=
Subject key identifier: 90:CE:C3:4F:8B:6F:BB:99:BB:F4:28:CC:6C:6E:97:FD:57:B8:CF:A0
Authority key identifier: DC:30:B8:FD:D0:46:EF:65:86:80:97:F0:36:B8:A7:C8:55:72:AA:D0
Certificate issuer: /CN=dc30b8fdd046ef65868097f036b8a7c85572aad0
Certificate serial: 019FAA8735083AF8ECC818EDACE9B5EF06A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 21:00:15 +0000
Manifest this update: Tue 28 Jul 2026 21:00:15 +0000
Manifest next update: Wed 29 Jul 2026 21:00:15 +0000
Files and hashes: 1: 3DC4_dBG72WGgJfwNrinyFVyqtA.crl (hash: D2QTvXIdfWNpppu6yxOh+rn5w+q7qUnrg8SBBoTj5Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:35:08:3a:f8:ec:c8:18:ed:ac:e9:b5:ef:06:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc30b8fdd046ef65868097f036b8a7c85572aad0
Validity
Not Before: Jul 28 21:00:15 2026 GMT
Not After : Jul 29 21:00:15 2026 GMT
Subject: CN=90cec34f8b6fbb99bbf428cc6c6e97fd57b8cfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:3b:84:92:a0:2e:9d:bc:0d:36:07:0f:62:
13:6c:87:cd:53:5c:16:5a:45:e5:cd:fa:c6:d5:0f:
d1:33:79:1a:e0:2f:69:1f:50:4e:81:39:50:c6:43:
e8:4b:11:19:83:63:72:f9:b4:34:12:aa:ef:83:ae:
e7:31:44:0f:bb:9c:b8:28:4f:f8:46:23:33:e0:b7:
23:5e:c6:fe:68:40:84:be:0f:5f:8b:5b:92:2e:aa:
62:b2:b1:87:4e:f5:06:4e:1f:59:5e:2c:3e:f8:cc:
d3:79:81:44:71:d3:5e:44:4f:ee:07:5d:46:b9:ed:
0f:64:44:93:f4:61:63:f7:ae:ea:df:13:b6:9a:7f:
fa:ad:24:a5:d3:0e:ab:e8:15:7d:9a:e8:1c:bb:7d:
4c:cb:c0:76:57:4b:3c:08:b9:02:8e:f6:20:12:5c:
f3:41:ab:b9:ff:4a:a0:6e:56:c6:31:26:e4:f0:92:
46:80:80:ff:6f:73:2f:1f:64:6a:7e:ff:df:51:93:
f9:bf:ea:ca:6a:90:cf:d1:0d:9f:28:f6:07:e4:45:
29:51:de:0a:60:86:0e:c9:47:43:44:f9:70:67:0d:
c5:25:6c:ba:b8:85:78:79:3c:64:56:62:9f:01:d7:
f3:de:14:2d:33:b6:1c:56:18:ef:96:90:7a:a3:e5:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CE:C3:4F:8B:6F:BB:99:BB:F4:28:CC:6C:6E:97:FD:57:B8:CF:A0
X509v3 Authority Key Identifier:
keyid:DC:30:B8:FD:D0:46:EF:65:86:80:97:F0:36:B8:A7:C8:55:72:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DC4_dBG72WGgJfwNrinyFVyqtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/53933c-d1b8-4362-9e1f-29a0aa6c4ad1/1/3DC4_dBG72WGgJfwNrinyFVyqtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:86:9f:7b:ca:5f:26:18:a2:1c:10:55:1c:eb:41:c5:73:1f:
25:bc:ef:49:9c:98:80:0b:44:74:7d:d7:eb:2a:be:03:1f:26:
39:58:91:e6:af:bc:ed:ff:fb:30:9e:6b:6d:bc:53:20:5d:35:
f9:82:79:16:89:16:08:76:17:f7:40:b6:cb:63:7c:8b:18:5c:
14:dd:6f:18:75:6f:1d:ac:16:98:f8:d9:b3:a2:d6:8a:ea:71:
65:81:3e:b6:11:d4:b2:fc:b9:ed:49:3d:15:3c:85:74:e9:fc:
8b:65:9a:e0:ee:39:49:b6:0d:1b:d6:47:07:6e:7d:48:26:18:
2c:b6:8e:2f:2a:b3:bb:e5:7c:c5:dc:93:a7:80:e7:7c:23:35:
7c:67:a4:01:9f:32:39:ed:b3:27:a5:d8:6e:b3:c1:f5:1a:4b:
13:19:16:55:6d:a1:29:f8:c4:ab:45:56:2c:82:5d:a7:3d:f6:
41:c3:48:c1:4f:e9:8e:9a:1f:c8:c0:a5:94:9d:7c:8d:ac:79:
1b:eb:82:56:a5:79:60:a3:d9:9e:e5:9d:97:2b:42:85:37:cf:
79:ed:c9:98:12:b4:a1:c6:ce:6a:24:5b:7a:21:17:b2:18:d6:
ae:9f:89:4d:20:2a:3c:ad:94:6d:6d:41:3d:c8:e2:f6:f7:8a:
7b:fb:78:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qhzUIOvjsyBjtrOm17waiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMzBiOGZkZDA0NmVmNjU4NjgwOTdmMDM2YjhhN2M4NTU3
MmFhZDAwHhcNMjYwNzI4MjEwMDE1WhcNMjYwNzI5MjEwMDE1WjAzMTEwLwYDVQQD
Eyg5MGNlYzM0ZjhiNmZiYjk5YmJmNDI4Y2M2YzZlOTdmZDU3YjhjZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOI7hJKgLp28DTYHD2ITbIfNU1wW
WkXlzfrG1Q/RM3ka4C9pH1BOgTlQxkPoSxEZg2Ny+bQ0Eqrvg67nMUQPu5y4KE/4
RiMz4LcjXsb+aECEvg9fi1uSLqpisrGHTvUGTh9ZXiw++MzTeYFEcdNeRE/uB11G
ue0PZEST9GFj967q3xO2mn/6rSSl0w6r6BV9mugcu31My8B2V0s8CLkCjvYgElzz
Qau5/0qgblbGMSbk8JJGgID/b3MvH2Rqfv/fUZP5v+rKapDP0Q2fKPYH5EUpUd4K
YIYOyUdDRPlwZw3FJWy6uIV4eTxkVmKfAdfz3hQtM7YcVhjvlpB6o+W3WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDOw0+Lb7uZu/QozGxul/1XuM+gMB8GA1UdIwQY
MBaAFNwwuP3QRu9lhoCX8Da4p8hVcqrQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0RDNF9kQkc3MldHZ0pmd05yaW55RlZ5cXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81MzkzM2MtZDFiOC00MzYyLTllMWYt
MjlhMGFhNmM0YWQxLzEvM0RDNF9kQkc3MldHZ0pmd05yaW55RlZ5cXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81MzkzM2MtZDFiOC00MzYyLTllMWYtMjlhMGFhNmM0YWQx
LzEvM0RDNF9kQkc3MldHZ0pmd05yaW55RlZ5cXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoafe8pf
JhiiHBBVHOtBxXMfJbzvSZyYgAtEdH3X6yq+Ax8mOViR5q+87f/7MJ5rbbxTIF01
+YJ5FokWCHYX90C2y2N8ixhcFN1vGHVvHawWmPjZs6LWiupxZYE+thHUsvy57Uk9
FTyFdOn8i2Wa4O45SbYNG9ZHB259SCYYLLaOLyqzu+V8xdyTp4DnfCM1fGekAZ8y
Oe2zJ6XYbrPB9RpLExkWVW2hKfjEq0VWLIJdpz32QcNIwU/pjpofyMCllJ18jax5
G+uCVqV5YKPZnuWdlytChTfPee3JmBK0ocbOaiRbeiEXshjWrp+JTSAqPK2UbW1B
Pcji9veKe/t4nQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:04:04 2026 by rpki-client