Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: VPMDOz38DSZSmB1Sc8fXkRsqZpMCdzY3tmzZjfLuYGc=
Subject key identifier: D4:79:CC:76:EE:2D:A7:F9:68:30:50:ED:FF:AE:0F:11:22:2E:E7:FF
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 019FA93DEC68DC34ABA52292F0510132CD32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 19E2
Signing time: Tue 28 Jul 2026 15:00:35 +0000
Manifest this update: Tue 28 Jul 2026 15:00:35 +0000
Manifest next update: Wed 29 Jul 2026 15:00:35 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: ED4KTrrvC4trEyUVzU8SgSI4vtxcCEV6awzGTtUcmSQ=)
2: 9zaCEl1SgGOc-A7zIR9SmhOUbCA.roa (hash: eFtzjl4+/9tlA7bC6sKrJsHMLsAxLeLlfmditC5aZTs=)
3: _QaXkGOzguH_3SYFNe1d3y7B2Tw.roa (hash: KztSdz5ODte8K6guWxzrXZlYDG1F2rVO/Vqml3J+Q0o=)
4: fsnKswSMyeM4OK2o8J_ZzwwYiiI.roa (hash: tWk+nFmUcDykdNhoUyVPw1UFkRx/3AJQMBQrLxH1g5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:ec:68:dc:34:ab:a5:22:92:f0:51:01:32:cd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Jul 28 15:00:35 2026 GMT
Not After : Jul 29 15:00:35 2026 GMT
Subject: CN=d479cc76ee2da7f9683050edffae0f11222ee7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:22:87:9b:4f:b0:e9:78:ea:06:92:f3:b1:b7:
94:76:e8:14:39:6a:54:f5:01:07:2f:f0:23:c2:36:
b3:5e:d5:20:54:ec:5d:c7:2e:a6:c6:5e:c9:54:a4:
a8:80:e2:44:c9:e4:41:d7:2b:a4:6c:62:13:42:59:
2c:9b:f3:65:da:b2:c2:c4:83:5a:ab:ee:83:1f:d0:
ec:e5:c9:f0:4f:47:a5:a3:19:25:b4:d7:9d:8c:ee:
79:5a:19:12:e6:e2:4a:74:f8:0e:d9:85:fd:98:04:
9f:35:42:25:6e:8b:18:73:26:34:27:6e:09:4c:9a:
47:ae:7a:34:36:6e:ad:23:a6:31:3a:7a:b8:31:3b:
af:21:59:a2:88:03:cd:7c:75:ec:3b:e9:09:35:60:
45:71:78:a4:55:18:27:a4:85:8d:2b:b6:b9:8b:d3:
ee:cd:a9:48:fa:53:e5:d5:9a:0e:78:d3:f9:34:e3:
12:41:e7:e7:2d:03:5e:ac:d3:43:e4:3d:0e:a5:48:
98:94:6b:ea:c8:5e:a5:64:f7:06:f1:bd:69:21:db:
c8:12:6b:4c:cd:9b:fa:e9:99:0a:a7:c4:c7:d5:f1:
3c:fb:4a:fa:02:55:67:3a:a0:54:b5:11:10:d2:9e:
16:dc:5b:fa:3b:82:7e:3c:3a:b1:fc:68:ab:76:7c:
72:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:79:CC:76:EE:2D:A7:F9:68:30:50:ED:FF:AE:0F:11:22:2E:E7:FF
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:58:4a:58:f7:75:6b:e5:fc:ef:42:02:4d:55:69:6d:e6:8d:
41:f5:85:b0:6e:cf:0e:67:90:19:87:a6:58:b4:ef:d6:0c:1f:
64:a3:35:ec:2d:e5:bf:49:84:cc:b4:01:0f:29:6c:1c:dd:a5:
05:3b:65:b9:65:20:15:f3:04:96:60:34:c1:df:5a:23:40:0c:
44:4c:ae:ad:e8:38:11:8d:e4:df:c6:16:81:f4:72:11:18:2c:
de:0a:d4:4d:5a:c2:10:68:51:f4:4a:80:2b:52:e2:fc:0a:e9:
88:72:bb:4a:b6:25:b2:75:4b:65:07:19:2e:6a:6c:6b:76:92:
96:84:6d:75:1e:10:fe:4e:1a:8d:01:29:fc:56:50:f9:e5:4a:
c9:7d:54:b8:dc:ed:40:21:af:b2:08:d6:a2:5a:4e:f9:ba:4e:
2b:94:6f:39:89:e2:1d:91:76:45:06:67:e1:88:ed:d5:18:a0:
91:91:00:0b:6a:cb:50:ff:5c:c4:e5:4f:c2:3d:fb:49:d2:84:
b6:91:93:19:07:15:ef:e5:ff:18:6e:78:74:bf:1d:9d:62:f4:
22:bf:f5:c2:1c:b6:25:d0:2b:96:ce:c8:d5:e7:d7:25:a7:80:
41:e9:91:55:88:69:a6:03:db:93:1d:d5:e1:ed:5d:9a:2d:f5:
73:be:cb:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPexo3DSrpSKS8FEBMs0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjY2IyZDVmYjI1Mzg1MmYxODIzYzY1NDM0ZThmMjc2ZDA0
ZTRlMGMwHhcNMjYwNzI4MTUwMDM1WhcNMjYwNzI5MTUwMDM1WjAzMTEwLwYDVQQD
EyhkNDc5Y2M3NmVlMmRhN2Y5NjgzMDUwZWRmZmFlMGYxMTIyMmVlN2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yKHm0+w6XjqBpLzsbeUdugUOWpU
9QEHL/AjwjazXtUgVOxdxy6mxl7JVKSogOJEyeRB1yukbGITQlksm/Nl2rLCxINa
q+6DH9Ds5cnwT0eloxkltNedjO55WhkS5uJKdPgO2YX9mASfNUIlbosYcyY0J24J
TJpHrno0Nm6tI6YxOnq4MTuvIVmiiAPNfHXsO+kJNWBFcXikVRgnpIWNK7a5i9Pu
zalI+lPl1ZoOeNP5NOMSQefnLQNerNND5D0OpUiYlGvqyF6lZPcG8b1pIdvIEmtM
zZv66ZkKp8TH1fE8+0r6AlVnOqBUtREQ0p4W3Fv6O4J+PDqx/GirdnxyRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNR5zHbuLaf5aDBQ7f+uDxEiLuf/MB8GA1UdIwQY
MBaAFNzLLV+yU4UvGCPGVDTo8nbQTk4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83YzFjMjktY2EwMi00OTBiLWFhODQt
ZTFhOGE2ZjFkNTlhLzEvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83YzFjMjktY2EwMi00OTBiLWFhODQtZTFhOGE2ZjFkNTlh
LzEvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFhKWPd1
a+X870ICTVVpbeaNQfWFsG7PDmeQGYemWLTv1gwfZKM17C3lv0mEzLQBDylsHN2l
BTtluWUgFfMElmA0wd9aI0AMREyureg4EY3k38YWgfRyERgs3grUTVrCEGhR9EqA
K1Li/ArpiHK7SrYlsnVLZQcZLmpsa3aSloRtdR4Q/k4ajQEp/FZQ+eVKyX1UuNzt
QCGvsgjWolpO+bpOK5RvOYniHZF2RQZn4Yjt1RigkZEAC2rLUP9cxOVPwj37SdKE
tpGTGQcV7+X/GG54dL8dnWL0Ir/1why2JdArls7I1efXJaeAQemRVYhppgPbkx3V
4e1dmi31c77L5Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:09 2026 by rpki-client