Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: Rxiq5VB2Thm+7H12nzrFUnIXOfnhKNHPFelRyy8u62I=
Subject key identifier: 3E:FE:76:C0:A8:FD:6D:74:98:90:54:A1:50:5E:39:42:CF:8B:0B:6F
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 019FA93DF75129A9C66633EAC90848B3236E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 0ACC
Signing time: Tue 28 Jul 2026 15:00:38 +0000
Manifest this update: Tue 28 Jul 2026 15:00:38 +0000
Manifest next update: Wed 29 Jul 2026 15:00:38 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: FSnzoPVW1X3uWRbErt9Kf1QQ0/1If5rrjdaQSOagIhU=)
2: d1jP90vciiSKp3aodWDKGnu38Bk.roa (hash: nxrJlRcagS8YYk40MdJDJveIMr4yj0rHLHg2nPrUsoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:f7:51:29:a9:c6:66:33:ea:c9:08:48:b3:23:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Jul 28 15:00:38 2026 GMT
Not After : Jul 29 15:00:38 2026 GMT
Subject: CN=3efe76c0a8fd6d74989054a1505e3942cf8b0b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:1e:00:24:07:ed:fc:b1:71:81:ce:67:aa:
f7:4f:11:83:f2:0c:e7:03:d4:8b:8f:20:2d:0b:35:
55:ee:24:1c:b1:fe:54:00:99:98:a7:2b:d2:a5:61:
1f:8c:8d:d6:71:42:38:62:85:e5:57:88:a3:35:0f:
86:cd:23:c5:14:0a:af:15:82:68:34:b4:d1:6d:9e:
5f:e1:a2:5b:1e:82:0d:08:b1:7f:0f:31:92:73:52:
2a:59:c7:51:cd:47:d0:85:cd:69:ac:84:f7:da:44:
df:37:c0:a8:a7:36:30:2f:85:2b:25:16:7f:ff:f9:
cc:7c:06:4b:c8:71:bd:0c:ae:40:7b:df:a2:95:08:
eb:9e:df:e3:e9:ef:51:69:97:a9:47:d1:d5:fc:c3:
b8:45:07:e5:b2:54:cb:22:2a:f6:d2:98:11:4b:d9:
b5:d2:fe:7e:bf:5c:27:fe:f2:a3:29:5f:87:80:60:
61:3d:45:e8:35:91:01:2e:00:0b:e0:4b:9e:80:dd:
e8:29:1b:49:46:e7:14:0c:e6:9d:14:50:2a:f4:5c:
04:7f:b4:92:d6:b3:6b:a5:ec:5a:c6:f6:45:32:a4:
2c:d9:bb:28:17:33:4d:73:8b:71:e2:91:68:de:cd:
b6:43:19:12:5f:db:56:8c:ce:7a:06:50:c2:17:70:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FE:76:C0:A8:FD:6D:74:98:90:54:A1:50:5E:39:42:CF:8B:0B:6F
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:87:52:99:4b:76:0c:77:0d:e0:f5:6c:07:3e:97:c9:71:06:
41:b1:2d:e2:8f:9b:00:78:40:c4:27:44:b2:0c:40:5c:f6:60:
80:73:e1:9a:13:34:5b:3c:ca:6b:36:bd:f2:ff:fd:1f:5a:3a:
53:f9:6f:9c:70:c1:da:79:cb:6b:b2:9b:ff:8b:bc:4d:4b:7b:
4c:02:39:7c:1d:15:bd:0c:f3:df:d2:66:d0:de:72:20:d9:8b:
aa:ed:64:c6:5e:e5:fe:df:96:ed:e4:83:42:0c:8c:87:e4:b2:
94:b4:ea:7d:76:04:c8:18:d8:7d:eb:2d:ae:86:7e:ee:44:1f:
e9:ff:8b:80:7e:67:3a:e0:d6:73:de:ae:c8:46:1a:c3:92:66:
6e:92:cf:b6:fa:dd:dd:96:6c:47:a4:c5:58:50:58:40:64:7a:
19:70:cf:38:1a:32:e7:0c:07:c5:cd:79:3c:11:09:37:86:40:
2d:a9:06:30:d3:9f:7d:a6:c0:8b:a8:5d:14:20:ca:dd:bf:07:
c6:1a:1e:77:f6:98:ce:8b:c5:ca:df:d1:ea:c8:35:f7:af:4b:
99:78:95:7b:93:cd:8c:7e:25:86:7a:d8:1d:85:00:88:bb:78:
ec:e8:4f:e7:75:36:2c:d2:3d:28:f7:d4:cb:c0:99:30:6c:66:
04:50:5c:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPfdRKanGZjPqyQhIsyNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOGEzYTQzMzAxY2QyYzgwNDdlYjg1NDRmODBhYjRmZmNm
ZTlhY2YwHhcNMjYwNzI4MTUwMDM4WhcNMjYwNzI5MTUwMDM4WjAzMTEwLwYDVQQD
EygzZWZlNzZjMGE4ZmQ2ZDc0OTg5MDU0YTE1MDVlMzk0MmNmOGIwYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG8eACQH7fyxcYHOZ6r3TxGD8gzn
A9SLjyAtCzVV7iQcsf5UAJmYpyvSpWEfjI3WcUI4YoXlV4ijNQ+GzSPFFAqvFYJo
NLTRbZ5f4aJbHoINCLF/DzGSc1IqWcdRzUfQhc1prIT32kTfN8CopzYwL4UrJRZ/
//nMfAZLyHG9DK5Ae9+ilQjrnt/j6e9RaZepR9HV/MO4RQflslTLIir20pgRS9m1
0v5+v1wn/vKjKV+HgGBhPUXoNZEBLgAL4EuegN3oKRtJRucUDOadFFAq9FwEf7SS
1rNrpexaxvZFMqQs2bsoFzNNc4tx4pFo3s22QxkSX9tWjM56BlDCF3AksQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7+dsCo/W10mJBUoVBeOULPiwtvMB8GA1UdIwQY
MBaAFNyKOkMwHNLIBH64VE+Aq0/8/prPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kZjBmZjMtNTYxZS00Zjc3LWE3ZGQt
ZmU4NDQwNjBhNDZkLzEvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kZjBmZjMtNTYxZS00Zjc3LWE3ZGQtZmU4NDQwNjBhNDZk
LzEvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYdSmUt2
DHcN4PVsBz6XyXEGQbEt4o+bAHhAxCdEsgxAXPZggHPhmhM0WzzKaza98v/9H1o6
U/lvnHDB2nnLa7Kb/4u8TUt7TAI5fB0VvQzz39Jm0N5yINmLqu1kxl7l/t+W7eSD
QgyMh+SylLTqfXYEyBjYfestroZ+7kQf6f+LgH5nOuDWc96uyEYaw5JmbpLPtvrd
3ZZsR6TFWFBYQGR6GXDPOBoy5wwHxc15PBEJN4ZALakGMNOffabAi6hdFCDK3b8H
xhoed/aYzovFyt/R6sg1969LmXiVe5PNjH4lhnrYHYUAiLt47OhP53U2LNI9KPfU
y8CZMGxmBFBcXw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:50 2026 by rpki-client