Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
File: 3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json)
Hash identifier: 76i9ijsUqU592MPi1VGW+ZW9rsPo9As9hyG3jQFvEEI=
Subject key identifier: 56:8D:CD:10:29:6C:0E:18:5A:95:A7:C3:73:B4:BA:7D:BE:26:14:37
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 019FA8626469D0567BFE41CD740CF344AB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
Manifest number: 1941
Signing time: Tue 28 Jul 2026 11:00:48 +0000
Manifest this update: Tue 28 Jul 2026 11:00:48 +0000
Manifest next update: Wed 29 Jul 2026 11:00:48 +0000
Files and hashes: 1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: 4f9luCGvMYQJe8wW2hdoqCY4q+svL9nMj99eUFPdABk=)
2: 7UD9mSTFV8lFN4ROehlHuZ5VKzk.roa (hash: 7/SDaPbxGJSgvje7ZyVfzpaTxUzpeca2cxXLtLcUMNc=)
3: 9QdlknWZ4OMboGxjAADXJxO9UPA.roa (hash: sI6mV2VF/PMi0q/p4atmEH2bb6DPFyZGr7glssOf33c=)
4: WNlY6EleMRRBrp6sZUEH7DxvZlc.roa (hash: dLCuSMcuIVzwoKSwK9PkR1g78fv8OGI64PcrszyfgyA=)
5: ekV3uRphNew5aOcMQo-s8iHH-AY.roa (hash: FE+IQctGJcO3sSaP7HNmckkGvxU4kU9yBANBqpeU4lI=)
6: f4_ZJ0TCTzsSkqudnJSIXp4bLQ0.roa (hash: W6ac4Me1PrNz+AfdrWTNIVyjCCLobhnKb0ISiPAW2p8=)
7: nWay-kjM-uXQonlEIzksgPJ2hIY.roa (hash: QNv+cuZE5AYtfPUCgiQFK8fsilnJCXuMMkCSBo7INTo=)
8: trpSFTYBfP1Vvg7yfH-5OGH9MeQ.roa (hash: VU1m0yBvVvk7PN74r9OfMGcifzfFHUwb4uMDuxPUkZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:64:69:d0:56:7b:fe:41:cd:74:0c:f3:44:ab:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jul 28 11:00:48 2026 GMT
Not After : Jul 29 11:00:48 2026 GMT
Subject: CN=568dcd10296c0e185a95a7c373b4ba7dbe261437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a2:96:41:fa:1a:18:1e:1b:91:a8:26:0a:3b:
17:ad:76:59:66:a4:3d:05:a1:8c:3d:d1:d2:e6:88:
3e:66:c6:c1:d8:7a:82:e7:58:27:10:26:15:32:1a:
db:97:8c:79:78:f4:67:ee:c3:a7:98:46:9f:eb:1d:
ae:72:2c:14:61:a1:df:83:c5:fc:0b:8e:a4:cc:57:
4c:cd:4f:f7:4f:95:20:55:68:b6:b5:40:81:98:1e:
bf:d0:83:3e:8a:ea:b3:7c:38:c6:8c:0a:ea:ed:b5:
42:a5:61:40:fb:50:f8:d0:b5:57:a5:cb:a6:74:bd:
bf:49:b3:4d:5d:4d:bd:bd:10:e8:75:64:94:05:9f:
b1:c9:ca:1b:29:bb:34:9f:43:ec:c0:12:32:18:f2:
83:d4:e1:7e:0d:fd:33:8d:18:73:f7:14:7d:ee:b3:
78:d1:89:7a:23:ca:76:fa:c4:b5:4d:2e:51:f1:4d:
83:e5:08:a0:13:73:20:7a:c5:63:c4:e4:50:64:be:
9f:36:c2:2e:e6:22:da:81:70:b7:25:3a:6e:e7:ea:
f9:55:fb:b8:58:17:72:36:d2:04:ad:ed:04:a4:05:
02:72:77:d0:7a:10:cc:53:a2:88:13:10:ef:17:b0:
21:22:0e:b8:eb:5e:13:4f:c8:8f:ce:15:c7:b7:99:
39:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8D:CD:10:29:6C:0E:18:5A:95:A7:C3:73:B4:BA:7D:BE:26:14:37
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2d:6a:5e:59:18:55:21:9f:77:fb:99:f3:fe:0a:a2:33:46:
30:db:a8:fd:30:ba:8d:c1:c3:4c:83:55:77:38:79:76:24:48:
10:90:45:4f:db:77:30:95:be:af:22:cf:59:26:4e:17:80:97:
57:d2:96:0a:78:e0:4f:87:d4:8a:cc:62:26:b4:58:4b:3a:8f:
aa:f2:31:d4:4a:cf:c7:fe:fe:84:0c:16:82:97:ea:b0:4b:ff:
d2:b5:4f:64:f1:98:ea:ad:1c:71:93:53:9e:7f:a8:8f:6b:17:
60:45:7c:da:20:d3:71:b2:17:18:62:23:b9:08:32:5c:d1:fb:
20:cc:8b:73:7f:74:cd:61:c1:de:0a:9a:ef:82:ed:fc:67:72:
1e:f5:d5:7f:fe:c6:fc:4c:ac:11:d5:80:f0:81:87:57:dc:2d:
ba:e5:b7:2e:96:66:2c:3f:ae:00:4b:28:f5:81:88:01:b6:86:
73:51:c7:b3:63:be:1d:cd:90:c9:5b:21:67:60:f0:76:86:55:
37:8c:c8:0d:86:30:e2:c7:6a:58:87:39:34:7e:3d:a6:72:34:
2b:3e:8e:3c:05:8f:e0:74:25:3e:c4:27:89:b1:9e:75:e7:ec:
61:5c:d5:25:75:5b:cf:08:bb:40:d7:3d:17:59:23:03:42:4c:
4f:1f:e2:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oYmRp0FZ7/kHNdAzzRKuCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjYwNzI4MTEwMDQ4WhcNMjYwNzI5MTEwMDQ4WjAzMTEwLwYDVQQD
Eyg1NjhkY2QxMDI5NmMwZTE4NWE5NWE3YzM3M2I0YmE3ZGJlMjYxNDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KKWQfoaGB4bkagmCjsXrXZZZqQ9
BaGMPdHS5og+ZsbB2HqC51gnECYVMhrbl4x5ePRn7sOnmEaf6x2uciwUYaHfg8X8
C46kzFdMzU/3T5UgVWi2tUCBmB6/0IM+iuqzfDjGjArq7bVCpWFA+1D40LVXpcum
dL2/SbNNXU29vRDodWSUBZ+xycobKbs0n0PswBIyGPKD1OF+Df0zjRhz9xR97rN4
0Yl6I8p2+sS1TS5R8U2D5QigE3MgesVjxORQZL6fNsIu5iLagXC3JTpu5+r5Vfu4
WBdyNtIEre0EpAUCcnfQehDMU6KIExDvF7AhIg64614TT8iPzhXHt5k5owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaNzRApbA4YWpWnw3O0un2+JhQ3MB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfi1qXlkY
VSGfd/uZ8/4KojNGMNuo/TC6jcHDTINVdzh5diRIEJBFT9t3MJW+ryLPWSZOF4CX
V9KWCnjgT4fUisxiJrRYSzqPqvIx1ErPx/7+hAwWgpfqsEv/0rVPZPGY6q0ccZNT
nn+oj2sXYEV82iDTcbIXGGIjuQgyXNH7IMyLc390zWHB3gqa74Lt/GdyHvXVf/7G
/EysEdWA8IGHV9wtuuW3LpZmLD+uAEso9YGIAbaGc1HHs2O+Hc2QyVshZ2DwdoZV
N4zIDYYw4sdqWIc5NH49pnI0Kz6OPAWP4HQlPsQnibGedefsYVzVJXVbzwi7QNc9
F1kjA0JMTx/isg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:41 2026 by rpki-client