Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier: LKXJ0c3iGBCNlo0LCfR4rCQPPsUeRonBKsbEwdYu4LM=
Subject key identifier: 86:44:23:D8:F2:B4:26:9D:09:03:BB:7B:60:9B:3B:53:FD:B8:05:D9
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 019FAA87AF3E0EC73C56728DFE3B2D2B982B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number: 1003
Signing time: Tue 28 Jul 2026 21:00:46 +0000
Manifest this update: Tue 28 Jul 2026 21:00:46 +0000
Manifest next update: Wed 29 Jul 2026 21:00:46 +0000
Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: On7pdl6HB38KkeUTNKIPP3WwZYPbKN4zVgpuqwxgUI8=)
2: FvI2CfBEqCGxOU9VxVGUHdHpoa4.asa (hash: ap5sRIAkxp5GHqQokYSc9SeMBeiP5/U/kzY0Z/xAVTA=)
3: H5QErsI5RrGZOHFY6_FrSzEPwsg.roa (hash: BTdVxM8rbJfdiUp2j6fzsOE0ajTe0wntltZ6HVxnZpM=)
4: UtbWjP8TosULXxgOwSpGBsXAj1E.asa (hash: e7BKC4GZaIVKdGVBnnQIPsiQuksngCu2TeIqsWJLAi4=)
5: aAEGzSQAFN3XfOJTKzynLK0MJWQ.roa (hash: HGx+oxdetMBYVjpIjo60Q4M2urPI2bwYBUq579gQfFA=)
6: b7KDZwK5R28lE5M6tD1UYAgLTs0.roa (hash: chq9h/QyXrEES2o8hWXwMO8b44fg7JP3nOh0+1DILZ0=)
7: iTAqvs2G1UdUfx5Fmn2Z7H7-Wuo.roa (hash: L18Wb/sBRdrTPyOX3b7ZSqqO81GWE2YfQWPbOKytco8=)
8: n8wKAbeQwoniSlzobzWQkZPFQ90.roa (hash: gAASzqy3Nb3k3RF3IE7AiqoPFAF8THLrgzOMP+9Awr8=)
9: rxo-kMSJfYbIjml0McyLHchnJKw.roa (hash: 6yBdVD63LgbBLLvhVAYIbiNVvZCYYH7FdQZFXoIkCTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:af:3e:0e:c7:3c:56:72:8d:fe:3b:2d:2b:98:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Jul 28 21:00:46 2026 GMT
Not After : Jul 29 21:00:46 2026 GMT
Subject: CN=864423d8f2b4269d0903bb7b609b3b53fdb805d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:22:89:28:6d:43:63:59:de:42:5c:ee:37:
a5:b4:05:0a:49:38:34:86:30:94:14:0a:dc:10:f1:
35:45:58:ed:80:05:03:d9:1f:e6:f4:e7:c4:49:32:
84:11:ea:86:58:02:4e:c7:08:53:f4:b6:df:11:72:
06:9d:97:e9:85:cc:b2:3e:3d:90:02:e3:4a:4b:43:
44:79:09:ec:4a:bb:c8:4e:7d:bd:f7:72:d2:06:b4:
f4:be:c7:98:1b:16:57:45:d9:6b:3a:f4:a1:95:af:
50:9d:4e:84:a4:94:35:68:a8:69:0c:8c:09:ec:04:
37:3d:f0:fe:09:62:4c:40:c8:19:e7:ad:cf:35:a8:
40:85:70:4d:1c:ad:c0:13:35:62:64:53:23:a8:6e:
10:b2:c7:00:94:b4:34:05:e5:54:b1:c4:1e:78:9a:
1f:48:14:40:ab:62:b5:3f:ec:ab:e0:02:6c:32:6c:
19:51:02:b1:c9:c8:71:55:12:4a:44:11:2d:b6:5b:
50:fe:0c:b7:75:63:16:c0:28:20:08:08:70:1b:d6:
98:9b:29:50:79:97:d1:89:50:0f:2c:2c:c9:d4:b4:
dd:fb:42:d3:9d:4d:c3:61:1d:42:a4:37:82:59:17:
12:dc:da:8e:76:12:05:3d:33:75:91:5b:9e:48:6a:
09:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:44:23:D8:F2:B4:26:9D:09:03:BB:7B:60:9B:3B:53:FD:B8:05:D9
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:77:84:99:68:82:27:15:8f:c5:09:1c:d9:a4:d9:67:0b:45:
2d:86:29:40:f7:2a:4f:58:3d:c5:32:01:a0:d9:25:c7:e4:a9:
4c:d4:0e:48:c6:c3:b6:42:5c:33:06:42:be:aa:89:20:d2:1a:
ed:ab:0a:ab:08:b9:c5:d0:20:6e:77:1b:1c:87:32:cb:58:52:
46:af:1a:f1:fb:a3:c5:a3:5b:f6:b4:fb:65:7b:26:08:04:d6:
ae:2e:ee:13:26:e5:83:5c:a2:6d:79:de:16:39:e7:db:45:22:
4c:a4:8c:0b:bf:77:9f:67:39:2d:e4:bf:b4:9e:1d:97:c7:f8:
06:04:f0:b4:84:c1:b9:95:a1:f0:f4:9d:83:23:04:a8:fd:16:
2f:0f:be:58:32:ce:ef:d9:ba:29:82:35:44:03:19:5e:58:ed:
cd:50:59:de:58:30:a9:8a:40:04:90:fe:cb:f6:7d:96:4d:f4:
a4:0a:88:b1:cf:9e:c8:8d:b2:47:67:1d:b2:9a:73:36:87:2a:
5a:cb:f6:74:61:40:a0:ec:e0:d2:78:10:9f:86:9e:dc:1a:7d:
88:a5:64:4d:09:cb:32:71:13:05:40:7d:1e:dd:cb:a5:c1:2a:
78:37:27:25:9f:e1:b9:00:13:ab:ff:ce:3a:7d:32:d8:e1:51:
a3:66:68:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh68+Dsc8VnKN/jstK5grMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGRjYjU2Zjc5ZjRhMWRlZDhkOTU0ODIzMzM5NjFkMDI2
NGZhYTUwHhcNMjYwNzI4MjEwMDQ2WhcNMjYwNzI5MjEwMDQ2WjAzMTEwLwYDVQQD
Eyg4NjQ0MjNkOGYyYjQyNjlkMDkwM2JiN2I2MDliM2I1M2ZkYjgwNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA8iiShtQ2NZ3kJc7jeltAUKSTg0
hjCUFArcEPE1RVjtgAUD2R/m9OfESTKEEeqGWAJOxwhT9LbfEXIGnZfphcyyPj2Q
AuNKS0NEeQnsSrvITn2993LSBrT0vseYGxZXRdlrOvShla9QnU6EpJQ1aKhpDIwJ
7AQ3PfD+CWJMQMgZ563PNahAhXBNHK3AEzViZFMjqG4QsscAlLQ0BeVUscQeeJof
SBRAq2K1P+yr4AJsMmwZUQKxychxVRJKRBEttltQ/gy3dWMWwCggCAhwG9aYmylQ
eZfRiVAPLCzJ1LTd+0LTnU3DYR1CpDeCWRcS3NqOdhIFPTN1kVueSGoJDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZEI9jytCadCQO7e2CbO1P9uAXZMB8GA1UdIwQY
MBaAFN1Ny1b3n0od7Y2VSCMzlh0CZPqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2Yt
MTc3YjViYTMyMzI3LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2YtMTc3YjViYTMyMzI3
LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxneEmWiC
JxWPxQkc2aTZZwtFLYYpQPcqT1g9xTIBoNklx+SpTNQOSMbDtkJcMwZCvqqJINIa
7asKqwi5xdAgbncbHIcyy1hSRq8a8fujxaNb9rT7ZXsmCATWri7uEyblg1yibXne
Fjnn20UiTKSMC793n2c5LeS/tJ4dl8f4BgTwtITBuZWh8PSdgyMEqP0WLw++WDLO
79m6KYI1RAMZXljtzVBZ3lgwqYpABJD+y/Z9lk30pAqIsc+eyI2yR2cdsppzNocq
Wsv2dGFAoOzg0ngQn4ae3Bp9iKVkTQnLMnETBUB9Ht3LpcEqeDcnJZ/huQATq//O
On0y2OFRo2Zolw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:22:54 2026 by rpki-client