Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: SFS7KChfjbvVjTe4ucjyDFkL6O14NiNPkz789m+c7Y0=
Subject key identifier: B6:8A:16:99:5E:31:CE:AD:B1:C7:EB:12:EF:0A:5E:25:95:27:87:50
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 019FA9AC5D9FB209DBF505CF2881CC3B35D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 104B
Signing time: Tue 28 Jul 2026 17:01:13 +0000
Manifest this update: Tue 28 Jul 2026 17:01:13 +0000
Manifest next update: Wed 29 Jul 2026 17:01:13 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: CQ/y0eNWkQR9hbBkYf4ISRv4mxZh4Z0DBcyqOdK5UVw=)
2: IFcPSJLrXOIb360qpvfjslM8AeU.asa (hash: Uoj3vnQ4WI4zOKZ/VBdpJT4g8J+jbJ0SehrMNsQWEOg=)
3: mN6LPum92-oppYTfVnse9pFdGGY.roa (hash: Az1RSnzhomoH0PRWVFUSJEmI0WtwP1548LAxILCV7N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:5d:9f:b2:09:db:f5:05:cf:28:81:cc:3b:35:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Jul 28 17:01:13 2026 GMT
Not After : Jul 29 17:01:13 2026 GMT
Subject: CN=b68a16995e31ceadb1c7eb12ef0a5e2595278750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:33:8c:f6:f5:19:8a:6c:d9:aa:13:1c:d4:ac:
bf:a6:a0:07:8c:8e:b5:82:fc:44:88:be:bb:bf:c7:
fd:70:a4:2a:53:e3:3f:8d:77:60:9c:2a:76:22:7b:
ee:2b:4d:fe:0d:18:91:71:af:46:3a:40:c0:51:49:
0b:a7:2d:74:1c:a2:96:f9:1f:e5:1d:4f:cd:54:01:
a2:a5:d7:8e:34:86:35:c6:a6:25:bf:4b:58:29:77:
b8:4f:64:b7:ce:67:ba:b5:9c:41:24:2e:39:e1:40:
ff:0c:fe:3e:c7:01:7e:f4:a7:a6:64:97:85:3c:03:
fb:52:68:c2:dc:10:13:17:b5:8f:4d:92:45:44:8c:
c2:59:d9:2a:f2:f8:52:d9:f4:48:95:3a:45:fc:13:
35:9e:68:2a:83:d7:5d:3c:36:f4:68:b3:e1:18:a9:
8d:c4:9e:3c:e6:d3:00:b7:b1:1c:4a:90:92:21:53:
7a:09:43:d4:ba:9f:1f:5e:eb:41:ce:db:b2:11:c3:
24:36:d8:f6:2e:1a:2f:23:8e:83:ba:42:6c:b2:68:
e8:81:32:0e:10:32:0e:6e:2f:35:d0:73:16:ca:42:
41:b8:ea:fe:e0:2e:e9:92:41:dc:82:8c:30:45:fe:
39:74:db:ad:36:d2:5a:66:a8:0e:98:80:ac:63:ee:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8A:16:99:5E:31:CE:AD:B1:C7:EB:12:EF:0A:5E:25:95:27:87:50
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:8d:40:41:44:14:0c:86:e4:0b:41:7f:68:bb:7b:f6:d1:9c:
26:0d:f3:f8:02:02:e9:5c:68:63:5d:85:9e:ba:4f:b6:b3:fe:
86:a7:b5:4d:bb:92:2a:e4:30:a7:80:28:d3:61:35:b2:68:f6:
04:1e:f9:aa:8a:51:eb:37:28:43:8a:32:b7:29:08:c9:a7:c4:
e3:b6:19:b4:32:d2:2b:9a:94:3b:6a:ee:ba:be:90:3c:f1:e1:
d2:d3:7a:18:67:fb:da:36:cd:11:c7:69:fd:05:6c:ed:8f:c4:
92:62:9a:31:44:f1:c5:b8:b0:46:dd:fb:21:e2:51:f2:13:4c:
f6:59:da:19:db:36:a9:de:35:15:4c:cf:51:64:db:46:e4:c3:
3e:45:84:8d:b5:fa:94:95:22:0f:9d:b3:c3:9a:08:5a:d8:6e:
1d:79:1d:28:8b:dd:42:cd:cf:62:4a:91:9d:c3:ec:51:04:ec:
69:ec:43:32:d1:b1:12:ed:7a:01:5a:65:da:21:db:02:cf:bb:
d4:1d:90:a7:a8:95:be:ae:6c:e0:4f:bf:e8:02:57:7a:04:88:
5c:31:dd:25:78:22:14:ee:42:a3:41:bd:c5:9d:67:a5:85:c2:
ab:92:ab:98:38:f6:33:66:af:e0:97:67:97:08:ea:13:7b:ca:
cd:fa:fd:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prF2fsgnb9QXPKIHMOzXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTQ0Y2U4ZThlNDQxNWU1Yzg2YTBiMjgwNDk5YTM4NWMx
NGVmZjIwHhcNMjYwNzI4MTcwMTEzWhcNMjYwNzI5MTcwMTEzWjAzMTEwLwYDVQQD
EyhiNjhhMTY5OTVlMzFjZWFkYjFjN2ViMTJlZjBhNWUyNTk1Mjc4NzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zOM9vUZimzZqhMc1Ky/pqAHjI61
gvxEiL67v8f9cKQqU+M/jXdgnCp2InvuK03+DRiRca9GOkDAUUkLpy10HKKW+R/l
HU/NVAGipdeONIY1xqYlv0tYKXe4T2S3zme6tZxBJC454UD/DP4+xwF+9KemZJeF
PAP7UmjC3BATF7WPTZJFRIzCWdkq8vhS2fRIlTpF/BM1nmgqg9ddPDb0aLPhGKmN
xJ485tMAt7EcSpCSIVN6CUPUup8fXutBztuyEcMkNtj2LhovI46DukJssmjogTIO
EDIObi810HMWykJBuOr+4C7pkkHcgowwRf45dNutNtJaZqgOmICsY+6VMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaKFpleMc6tscfrEu8KXiWVJ4dQMB8GA1UdIwQY
MBaAFN8UTOjo5EFeXIagsoBJmjhcFO/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wZjQzMDItNDFhMi00ZGE0LTg3OGUt
NTg2N2JlNzAzNmIzLzEvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wZjQzMDItNDFhMi00ZGE0LTg3OGUtNTg2N2JlNzAzNmIz
LzEvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy41AQUQU
DIbkC0F/aLt79tGcJg3z+AIC6VxoY12FnrpPtrP+hqe1TbuSKuQwp4Ao02E1smj2
BB75qopR6zcoQ4oytykIyafE47YZtDLSK5qUO2ruur6QPPHh0tN6GGf72jbNEcdp
/QVs7Y/EkmKaMUTxxbiwRt37IeJR8hNM9lnaGds2qd41FUzPUWTbRuTDPkWEjbX6
lJUiD52zw5oIWthuHXkdKIvdQs3PYkqRncPsUQTsaexDMtGxEu16AVpl2iHbAs+7
1B2Qp6iVvq5s4E+/6AJXegSIXDHdJXgiFO5Co0G9xZ1npYXCq5KrmDj2M2av4Jdn
lwjqE3vKzfr9GA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:37:06 2026 by rpki-client