Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier: rW2DntXGcPZLKRWeSe0jW7wptjmimXRuZ6CWBxLqXzo=
Subject key identifier: E5:27:DF:90:43:52:64:5B:F0:46:20:4F:9A:64:64:C7:10:44:30:EF
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 019FA899AD2868C0F0FF1A75403878A0F383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number: 1002
Signing time: Tue 28 Jul 2026 12:01:11 +0000
Manifest this update: Tue 28 Jul 2026 12:01:11 +0000
Manifest next update: Wed 29 Jul 2026 12:01:11 +0000
Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: bJZcBERbWD8cAs6v9+YoTXEIojzOixT3BL9pgKGEZcg=)
2: FvI2CfBEqCGxOU9VxVGUHdHpoa4.asa (hash: ap5sRIAkxp5GHqQokYSc9SeMBeiP5/U/kzY0Z/xAVTA=)
3: H5QErsI5RrGZOHFY6_FrSzEPwsg.roa (hash: BTdVxM8rbJfdiUp2j6fzsOE0ajTe0wntltZ6HVxnZpM=)
4: UtbWjP8TosULXxgOwSpGBsXAj1E.asa (hash: e7BKC4GZaIVKdGVBnnQIPsiQuksngCu2TeIqsWJLAi4=)
5: aAEGzSQAFN3XfOJTKzynLK0MJWQ.roa (hash: HGx+oxdetMBYVjpIjo60Q4M2urPI2bwYBUq579gQfFA=)
6: b7KDZwK5R28lE5M6tD1UYAgLTs0.roa (hash: chq9h/QyXrEES2o8hWXwMO8b44fg7JP3nOh0+1DILZ0=)
7: iTAqvs2G1UdUfx5Fmn2Z7H7-Wuo.roa (hash: L18Wb/sBRdrTPyOX3b7ZSqqO81GWE2YfQWPbOKytco8=)
8: n8wKAbeQwoniSlzobzWQkZPFQ90.roa (hash: gAASzqy3Nb3k3RF3IE7AiqoPFAF8THLrgzOMP+9Awr8=)
9: rxo-kMSJfYbIjml0McyLHchnJKw.roa (hash: 6yBdVD63LgbBLLvhVAYIbiNVvZCYYH7FdQZFXoIkCTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:ad:28:68:c0:f0:ff:1a:75:40:38:78:a0:f3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Jul 28 12:01:11 2026 GMT
Not After : Jul 29 12:01:11 2026 GMT
Subject: CN=e527df904352645bf046204f9a6464c7104430ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:01:a0:b6:40:c7:a6:4c:dc:5d:56:48:f7:
58:11:b6:89:a2:76:e6:4e:9d:e6:99:23:16:c3:dc:
26:8e:57:cc:2a:81:f4:a8:05:24:cd:43:f4:ee:5d:
0c:c3:8e:1e:13:4c:5d:2e:db:8b:a9:71:41:a0:c0:
31:d8:6a:7c:09:5d:81:19:b9:82:4d:8d:ed:8f:53:
80:18:97:97:87:06:4d:c8:2a:f8:39:49:05:87:91:
e7:e5:48:83:f3:36:22:31:18:c3:06:fe:f1:3c:f2:
a7:49:93:c7:7a:0e:30:21:01:8e:04:88:b2:69:f9:
80:44:e3:bf:1e:b3:5e:be:30:30:cc:60:54:c9:c3:
26:30:4c:ef:dd:a8:34:e6:ae:57:5e:3a:ab:95:ca:
e8:5a:1a:df:e3:bd:4a:4e:eb:c3:c7:f8:b4:83:ee:
35:2b:75:1a:44:ca:1e:99:1f:b3:40:87:7c:bc:7d:
9a:c9:b1:29:95:a4:f3:0c:f8:67:15:ad:51:6d:42:
24:3e:79:c8:03:60:16:70:f6:a6:93:aa:6e:21:41:
68:ab:ad:45:6d:9c:6c:e9:44:ad:cc:a3:60:13:b3:
d0:01:66:13:20:e6:1e:a1:0d:36:d5:e8:77:98:a0:
c2:83:21:e4:c1:93:9a:5c:b3:dc:23:e0:aa:99:76:
c1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:27:DF:90:43:52:64:5B:F0:46:20:4F:9A:64:64:C7:10:44:30:EF
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:01:66:9f:39:5c:f0:76:3f:71:ae:82:62:9a:83:06:d8:21:
6e:98:08:8e:88:4d:b8:e8:09:6a:2b:32:ed:de:ec:c8:f6:74:
b9:32:fb:a9:97:e9:ee:e6:42:75:80:73:79:06:74:27:23:82:
a7:f6:87:4f:41:fb:ea:8a:cd:02:2a:51:57:71:bc:43:d0:fa:
c0:ca:d5:f7:df:33:6d:ed:c8:c5:ac:3c:c8:cd:dd:9e:a4:8f:
2a:b2:c1:05:31:c0:28:db:3c:84:18:a1:34:46:b7:a5:61:91:
07:24:41:99:2a:59:9d:51:cb:00:32:33:c3:33:58:bb:7e:f2:
52:f1:28:c3:5c:e5:60:bc:37:73:9f:b3:6a:c8:b8:07:08:eb:
0e:a3:03:56:0a:25:7e:45:1b:4b:f7:ca:ba:92:9a:1a:be:00:
ec:b0:93:f7:0b:c6:7d:61:af:dd:0b:c7:a3:ac:c1:8f:88:34:
4f:1e:9b:fa:d3:14:43:3d:f7:0b:7d:f4:61:ce:5a:a8:2f:e0:
02:95:50:49:12:e9:9c:7c:99:69:8d:be:b4:18:33:4f:4b:af:
aa:ed:0e:34:a2:2a:79:57:84:43:45:dc:24:c5:e6:92:70:89:
18:c3:5e:5e:d4:a2:1f:8f:3e:d1:b6:b7:f5:ec:21:60:7a:05:
e6:34:ec:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oma0oaMDw/xp1QDh4oPODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGRjYjU2Zjc5ZjRhMWRlZDhkOTU0ODIzMzM5NjFkMDI2
NGZhYTUwHhcNMjYwNzI4MTIwMTExWhcNMjYwNzI5MTIwMTExWjAzMTEwLwYDVQQD
EyhlNTI3ZGY5MDQzNTI2NDViZjA0NjIwNGY5YTY0NjRjNzEwNDQzMGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6MBoLZAx6ZM3F1WSPdYEbaJonbm
Tp3mmSMWw9wmjlfMKoH0qAUkzUP07l0Mw44eE0xdLtuLqXFBoMAx2Gp8CV2BGbmC
TY3tj1OAGJeXhwZNyCr4OUkFh5Hn5UiD8zYiMRjDBv7xPPKnSZPHeg4wIQGOBIiy
afmAROO/HrNevjAwzGBUycMmMEzv3ag05q5XXjqrlcroWhrf471KTuvDx/i0g+41
K3UaRMoemR+zQId8vH2aybEplaTzDPhnFa1RbUIkPnnIA2AWcPamk6puIUFoq61F
bZxs6UStzKNgE7PQAWYTIOYeoQ021eh3mKDCgyHkwZOaXLPcI+CqmXbBnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUn35BDUmRb8EYgT5pkZMcQRDDvMB8GA1UdIwQY
MBaAFN1Ny1b3n0od7Y2VSCMzlh0CZPqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2Yt
MTc3YjViYTMyMzI3LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2YtMTc3YjViYTMyMzI3
LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAFmnzlc
8HY/ca6CYpqDBtghbpgIjohNuOgJaisy7d7syPZ0uTL7qZfp7uZCdYBzeQZ0JyOC
p/aHT0H76orNAipRV3G8Q9D6wMrV998zbe3Ixaw8yM3dnqSPKrLBBTHAKNs8hBih
NEa3pWGRByRBmSpZnVHLADIzwzNYu37yUvEow1zlYLw3c5+zasi4BwjrDqMDVgol
fkUbS/fKupKaGr4A7LCT9wvGfWGv3QvHo6zBj4g0Tx6b+tMUQz33C330Yc5aqC/g
ApVQSRLpnHyZaY2+tBgzT0uvqu0ONKIqeVeEQ0XcJMXmknCJGMNeXtSiH48+0ba3
9ewhYHoF5jTsqg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:42 2026 by rpki-client