Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: cGTWCS/unCgG9k/JWVYaDgjk4/zR6kqRzxfZ9HlyIks=
Subject key identifier: E6:75:7D:E3:64:98:5E:06:2E:3D:0D:BB:7F:4A:8B:41:36:62:8F:12
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 019FAB2C7CE2A0126515937488EEE62F361B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 00:00:47 +0000
Manifest this update: Wed 29 Jul 2026 00:00:47 +0000
Manifest next update: Thu 30 Jul 2026 00:00:47 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: zOEkHip3eqG8koqFx8zW4K+LaXtiO31uGZboVhUVflg=)
2: fONXP_fP-K2CxXzPBDLR6f-PrkU.roa (hash: iTe+/A+Cer5fpJpPxyAsGGZIQSIg8X5o4zlL2Zh7qbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:7c:e2:a0:12:65:15:93:74:88:ee:e6:2f:36:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Jul 29 00:00:47 2026 GMT
Not After : Jul 30 00:00:47 2026 GMT
Subject: CN=e6757de364985e062e3d0dbb7f4a8b4136628f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:0d:f9:d7:a5:bd:cd:c1:1f:42:49:f9:f4:
f3:ca:95:11:52:1a:c0:6b:4a:28:1b:25:c9:be:e1:
18:d6:24:4a:e8:bc:c7:e5:de:af:88:9f:6b:f3:d4:
06:ec:5f:13:6a:32:96:e8:90:83:88:b1:e3:e8:9e:
f3:64:b9:90:8b:15:92:55:fe:55:a3:5a:96:ca:30:
f8:fc:52:86:29:6d:16:1b:60:c2:f0:81:8f:ab:75:
17:9a:a8:c4:cc:0e:52:24:f1:53:b3:7d:af:ef:02:
dc:a5:55:56:ae:fb:1b:64:9b:79:10:d2:7c:e2:eb:
9d:cd:a5:8d:f5:d3:66:c9:66:a3:88:09:a1:dc:e2:
4b:8d:ec:0d:f0:cd:6d:6c:ec:fc:3f:d5:89:28:2e:
b1:d6:0c:e9:54:36:7a:ff:b8:4b:8a:de:3b:07:e9:
e2:97:7a:bd:56:7d:c8:cf:d9:3c:10:61:88:65:39:
c9:77:53:10:9a:08:2b:cf:c7:01:92:09:b5:c1:45:
c5:57:b5:b9:3c:cf:53:22:81:4d:08:59:77:b9:5a:
2e:f5:3f:13:d7:72:81:fb:ed:de:72:73:18:39:90:
39:fc:71:4e:42:97:c0:eb:da:24:79:d1:15:2e:f9:
ea:41:f7:da:9c:2f:95:2a:24:48:e2:49:d4:48:3a:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:75:7D:E3:64:98:5E:06:2E:3D:0D:BB:7F:4A:8B:41:36:62:8F:12
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:df:e8:20:0b:8f:c6:c5:1f:0d:df:5e:16:4d:1a:44:bd:42:
b8:4e:2f:8f:a2:9b:b7:30:55:48:0e:c2:55:e3:13:0f:59:e7:
b5:f8:5c:a4:8e:2d:4c:b0:0b:ae:56:17:ff:ed:ae:01:2b:a2:
23:86:10:af:cb:db:c2:93:e5:9a:51:c9:01:b1:f6:c8:21:16:
30:76:44:c4:9a:10:0c:1c:06:fb:cb:e3:96:13:9a:90:c2:3e:
91:0c:d0:3f:2b:a8:d6:d6:f4:26:03:7c:e3:c8:b1:bb:b2:38:
85:bf:36:3f:bf:19:99:23:b9:56:34:e2:f8:24:89:02:16:1c:
65:f6:8e:4f:c2:18:f7:8c:a3:aa:d5:a2:55:09:ea:64:c3:8c:
cb:c5:fa:e0:8a:96:6c:60:33:20:5d:ef:15:dd:e3:3f:df:eb:
1b:68:e7:fc:19:dc:08:ea:ae:e4:0e:2e:b8:42:e0:7d:d9:46:
fd:10:a5:74:10:57:b0:0b:40:c9:06:d9:de:4c:71:69:db:dc:
c5:6d:fa:8c:aa:9e:dd:d5:f0:ed:d7:d9:53:4f:4d:e6:a6:97:
cb:30:97:dd:2c:de:e8:31:61:d6:85:f9:9c:c6:04:2f:0d:6c:
33:bd:4a:ae:a9:73:da:16:68:cb:96:e6:6b:d2:26:9a:66:5e:
b6:30:e6:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLHzioBJlFZN0iO7mLzYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMDg1YjBkMWJiZjllNzgxYjE1NGIwNmY3YjkxNDExMjlk
Yjc3NWYwHhcNMjYwNzI5MDAwMDQ3WhcNMjYwNzMwMDAwMDQ3WjAzMTEwLwYDVQQD
EyhlNjc1N2RlMzY0OTg1ZTA2MmUzZDBkYmI3ZjRhOGI0MTM2NjI4ZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15gN+delvc3BH0JJ+fTzypURUhrA
a0ooGyXJvuEY1iRK6LzH5d6viJ9r89QG7F8TajKW6JCDiLHj6J7zZLmQixWSVf5V
o1qWyjD4/FKGKW0WG2DC8IGPq3UXmqjEzA5SJPFTs32v7wLcpVVWrvsbZJt5ENJ8
4uudzaWN9dNmyWajiAmh3OJLjewN8M1tbOz8P9WJKC6x1gzpVDZ6/7hLit47B+ni
l3q9Vn3Iz9k8EGGIZTnJd1MQmggrz8cBkgm1wUXFV7W5PM9TIoFNCFl3uVou9T8T
13KB++3ecnMYOZA5/HFOQpfA69okedEVLvnqQffanC+VKiRI4knUSDqXnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZ1feNkmF4GLj0Nu39Ki0E2Yo8SMB8GA1UdIwQY
MBaAFN4IWw0bv554GxVLBve5FBEp23dfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZjAzYTMtMzFhMS00ZGExLWI4ZTkt
N2EwYjNkNWQ5MTU2LzEvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mZjAzYTMtMzFhMS00ZGExLWI4ZTktN2EwYjNkNWQ5MTU2
LzEvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASd/oIAuP
xsUfDd9eFk0aRL1CuE4vj6KbtzBVSA7CVeMTD1nntfhcpI4tTLALrlYX/+2uASui
I4YQr8vbwpPlmlHJAbH2yCEWMHZExJoQDBwG+8vjlhOakMI+kQzQPyuo1tb0JgN8
48ixu7I4hb82P78ZmSO5VjTi+CSJAhYcZfaOT8IY94yjqtWiVQnqZMOMy8X64IqW
bGAzIF3vFd3jP9/rG2jn/BncCOqu5A4uuELgfdlG/RCldBBXsAtAyQbZ3kxxadvc
xW36jKqe3dXw7dfZU09N5qaXyzCX3Sze6DFh1oX5nMYELw1sM71Krqlz2hZoy5bm
a9ImmmZetjDmZQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:44:18 2026 by rpki-client