Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
File: 3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json)
Hash identifier: a3sVJc/emnVCl+pSvm91W/dEia44cdqiap+pNBNFRGw=
Subject key identifier: EA:AC:27:4E:1B:8B:F1:99:DB:6C:CD:02:97:7D:60:23:A4:E6:2C:B7
Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Certificate issuer: /CN=def838503cfbc05283fdeadd4644a47bfd783fce
Certificate serial: 019FA975BA1B6A2A32BBF4EA6C333695F17C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
Manifest number: 0BFC
Signing time: Tue 28 Jul 2026 16:01:32 +0000
Manifest this update: Tue 28 Jul 2026 16:01:32 +0000
Manifest next update: Wed 29 Jul 2026 16:01:32 +0000
Files and hashes: 1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: RGEKe4ejQI2MuOGYA1YxxyM7nGi5RwZgxosp6E5Tl6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:ba:1b:6a:2a:32:bb:f4:ea:6c:33:36:95:f1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce
Validity
Not Before: Jul 28 16:01:32 2026 GMT
Not After : Jul 29 16:01:32 2026 GMT
Subject: CN=eaac274e1b8bf199db6ccd02977d6023a4e62cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:47:f0:24:c8:86:4f:59:a3:a7:15:44:08:
30:fa:1f:0a:0c:1c:07:a8:67:9f:f6:91:89:39:3b:
2d:cd:b7:03:f8:48:1d:4f:38:6d:ce:55:85:ec:a8:
b5:df:d4:9d:ec:03:43:36:ca:ea:77:b6:b9:00:f5:
2a:4c:0a:ea:96:98:69:a2:d3:9c:2b:0c:66:62:78:
a1:04:d7:a0:83:d7:41:06:5f:25:5f:5b:3e:cd:ce:
a8:78:9e:f1:be:1c:94:41:80:25:ce:8b:45:52:a4:
1e:f7:c2:68:7c:57:ac:08:90:11:05:d1:e5:d0:c2:
33:7e:fa:87:d0:85:26:98:ef:64:94:74:6c:41:c9:
04:16:f8:69:c0:f6:0a:c4:95:db:99:1e:ed:74:92:
eb:b8:38:ce:fd:d3:bc:bb:6b:c9:4d:0d:49:63:0e:
d8:44:30:0b:bf:0d:0b:33:5a:54:90:01:91:1d:a4:
1c:68:5c:9b:2d:89:b1:ad:9d:b8:f4:d2:08:60:77:
6d:a0:49:b9:19:86:59:69:d4:84:bf:92:75:33:97:
3f:ec:98:ae:6a:3c:8b:47:90:70:11:a5:ad:27:c2:
2e:bc:ee:60:a7:77:1d:a3:be:35:92:3a:12:c5:93:
a8:50:95:4f:1a:b4:af:e0:e8:e0:44:30:0f:72:1f:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AC:27:4E:1B:8B:F1:99:DB:6C:CD:02:97:7D:60:23:A4:E6:2C:B7
X509v3 Authority Key Identifier:
keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a3:c3:89:f7:f3:38:d3:88:df:70:77:1f:4e:0f:84:8e:77:
43:3a:01:38:06:9c:52:eb:df:bd:10:d8:99:38:28:d3:49:98:
57:aa:5e:36:44:0a:48:7c:e7:45:75:0f:df:ed:f3:ee:c5:ee:
e5:1e:4d:79:4b:dd:86:b3:66:26:e8:26:e2:d7:89:7f:0c:48:
c5:b1:81:79:22:5d:c3:73:94:19:70:5e:a2:d6:30:6c:af:7f:
91:e2:f1:de:9f:fc:63:5c:0e:fc:c0:8e:a2:f5:42:08:63:1a:
41:77:86:d3:03:69:da:5e:37:aa:92:97:42:cc:fd:af:db:77:
65:89:29:2f:64:ee:c0:3d:83:f9:48:da:52:86:6f:fa:e8:b1:
e2:48:44:43:ba:8c:2d:88:22:a2:eb:80:ca:fb:81:86:7e:8e:
06:21:c7:06:35:73:80:9a:73:9f:37:50:57:f6:70:49:d8:b7:
4d:a4:8e:3a:c4:12:7b:c6:f5:db:eb:95:c0:78:ac:76:43:c5:
98:43:eb:32:1e:aa:bb:d6:92:b4:1e:c0:66:48:4e:d7:87:8e:
8b:5e:2c:24:e7:10:ed:4d:04:bb:99:68:62:e5:df:31:8b:c3:
b8:02:06:35:98:c6:e6:f9:1d:90:0c:61:aa:33:52:8b:be:bd:
0d:1b:72:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdbobaioyu/TqbDM2lfF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZjgzODUwM2NmYmMwNTI4M2ZkZWFkZDQ2NDRhNDdiZmQ3
ODNmY2UwHhcNMjYwNzI4MTYwMTMyWhcNMjYwNzI5MTYwMTMyWjAzMTEwLwYDVQQD
EyhlYWFjMjc0ZTFiOGJmMTk5ZGI2Y2NkMDI5NzdkNjAyM2E0ZTYyY2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPFH8CTIhk9Zo6cVRAgw+h8KDBwH
qGef9pGJOTstzbcD+EgdTzhtzlWF7Ki139Sd7ANDNsrqd7a5APUqTArqlphpotOc
KwxmYnihBNegg9dBBl8lX1s+zc6oeJ7xvhyUQYAlzotFUqQe98JofFesCJARBdHl
0MIzfvqH0IUmmO9klHRsQckEFvhpwPYKxJXbmR7tdJLruDjO/dO8u2vJTQ1JYw7Y
RDALvw0LM1pUkAGRHaQcaFybLYmxrZ249NIIYHdtoEm5GYZZadSEv5J1M5c/7Jiu
ajyLR5BwEaWtJ8IuvO5gp3cdo741kjoSxZOoUJVPGrSv4OjgRDAPch+y0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqsJ04bi/GZ22zNApd9YCOk5iy3MB8GA1UdIwQY
MBaAFN74OFA8+8BSg/3q3UZEpHv9eD/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3ZnNFVEejd3RktEX2VyZFJrU2tlXzE0UDg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNzg1NTEtMDBlNS00NzdjLWI3MTIt
OTcxYmI0YTUyYjNmLzEvM3ZnNFVEejd3RktEX2VyZFJrU2tlXzE0UDg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hNzg1NTEtMDBlNS00NzdjLWI3MTItOTcxYmI0YTUyYjNm
LzEvM3ZnNFVEejd3RktEX2VyZFJrU2tlXzE0UDg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqPDiffz
ONOI33B3H04PhI53QzoBOAacUuvfvRDYmTgo00mYV6peNkQKSHznRXUP3+3z7sXu
5R5NeUvdhrNmJugm4teJfwxIxbGBeSJdw3OUGXBeotYwbK9/keLx3p/8Y1wO/MCO
ovVCCGMaQXeG0wNp2l43qpKXQsz9r9t3ZYkpL2TuwD2D+UjaUoZv+uix4khEQ7qM
LYgiouuAyvuBhn6OBiHHBjVzgJpznzdQV/ZwSdi3TaSOOsQSe8b12+uVwHisdkPF
mEPrMh6qu9aStB7AZkhO14eOi14sJOcQ7U0Eu5loYuXfMYvDuAIGNZjG5vkdkAxh
qjNSi769DRtykg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:02:15 2026 by rpki-client