Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: zNOdqmrnO8XeCNP48Sermrf8QlG0739zJ+t746oY9L8=
Subject key identifier: 92:04:09:52:A5:15:1C:16:E9:78:E0:A5:76:81:AE:D3:41:17:81:CE
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 019FAABE6885888C3F2397C1531771063A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 22:00:32 +0000
Manifest this update: Tue 28 Jul 2026 22:00:32 +0000
Manifest next update: Wed 29 Jul 2026 22:00:32 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: rADmmR3bXmxGt4ZOUeeMrGh7/NGMkF6P3tRdbkp/3J8=)
2: 4nH4XfhimtA2VpYePD6iIqgS8jg.roa (hash: WzWjp5sYk3618sDtkEiRYCtG2GQQ5fgZA4Df9TxbCmE=)
3: Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa (hash: t8YcGZN/KfNS1zoLXEsPr4LvXKVj1kisjNpdPg7jWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:68:85:88:8c:3f:23:97:c1:53:17:71:06:3a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Jul 28 22:00:32 2026 GMT
Not After : Jul 29 22:00:32 2026 GMT
Subject: CN=92040952a5151c16e978e0a57681aed3411781ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:fb:72:42:d2:73:97:84:d0:55:e8:97:4d:
9c:01:86:f1:3b:a4:eb:30:92:21:3f:a7:5b:24:92:
82:63:db:30:dc:d3:65:2d:cf:20:a6:d7:b8:73:33:
f7:06:ad:13:5d:0a:87:42:00:7f:e9:bc:2e:27:e3:
56:5d:85:3d:42:e7:f8:04:1d:72:3d:45:57:df:b9:
1d:11:e4:24:f8:cf:90:eb:30:4c:69:2f:33:30:97:
25:cc:f9:0a:b1:bb:f4:c1:1f:7d:e9:29:09:7f:4d:
dd:ba:c7:3a:a0:79:0a:55:cc:70:2b:0c:be:f1:0a:
1d:90:49:6b:79:25:e4:e6:85:34:f6:10:c2:77:19:
60:42:d0:25:26:5f:3d:c1:c9:8d:a4:f7:c1:8c:54:
06:4f:70:80:ee:f6:81:d0:2f:70:32:3b:31:95:b7:
77:31:a5:fc:bd:b4:9e:d3:f2:1b:b2:3a:10:dc:7f:
af:d1:86:a5:81:54:86:8f:8d:12:c1:88:8d:81:b4:
46:22:c5:73:38:80:15:c7:a1:8d:79:1e:27:61:e4:
8c:b9:23:cb:7c:91:af:26:8d:79:0b:1e:67:04:9b:
b1:ed:2d:9f:31:1a:f7:07:8e:00:20:cb:18:19:3d:
c1:4d:3f:5c:67:4a:78:83:a1:e3:50:51:de:2a:85:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:04:09:52:A5:15:1C:16:E9:78:E0:A5:76:81:AE:D3:41:17:81:CE
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b3:8f:3d:3d:9d:be:96:94:99:51:5e:fe:e9:74:ae:8d:2f:
1c:16:95:09:24:d4:bc:97:51:0b:17:3b:a8:b4:9a:d1:cf:c4:
f3:2f:7d:88:c3:28:65:7d:09:04:86:a1:96:c6:10:5f:f9:31:
bc:19:e3:9b:53:cd:3a:21:27:60:61:ba:6f:a3:9d:a9:53:14:
1c:e4:ce:e7:a8:3f:df:d2:b5:9a:06:20:f2:f8:26:aa:c3:bf:
a8:a0:79:88:6b:70:e1:50:17:c4:22:49:99:6c:72:40:e9:b1:
1e:f5:ee:c1:b5:1f:de:f7:da:4c:f6:d5:a1:6c:fc:fd:fd:49:
d7:d5:bc:f7:8c:09:47:4c:4f:ec:0a:83:e2:00:bd:16:82:7d:
e8:08:de:99:90:35:b1:fd:ac:ea:02:e7:d1:ab:ba:30:fb:79:
ec:14:86:8b:e9:c3:cf:0f:c2:4a:10:86:a3:79:24:34:9f:14:
6f:cc:0e:c5:1e:09:c1:7d:19:2a:b6:27:88:22:71:4d:67:c3:
c9:f9:c1:eb:01:96:68:dd:42:92:05:be:be:2b:df:57:46:29:
d5:10:a8:3b:04:22:55:85:71:9e:13:37:65:3e:f9:b3:e7:6c:
aa:e4:4f:c1:c6:be:61:7f:72:60:9f:32:c8:54:d0:01:0d:73:
ce:cb:98:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvmiFiIw/I5fBUxdxBjo0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYTQ2ZWFhZTdhZWYyZjQ0ZmU2NjAxNjJiYjlkYzcwZDY1
MjVhZjEwHhcNMjYwNzI4MjIwMDMyWhcNMjYwNzI5MjIwMDMyWjAzMTEwLwYDVQQD
Eyg5MjA0MDk1MmE1MTUxYzE2ZTk3OGUwYTU3NjgxYWVkMzQxMTc4MWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz337ckLSc5eE0FXol02cAYbxO6Tr
MJIhP6dbJJKCY9sw3NNlLc8gpte4czP3Bq0TXQqHQgB/6bwuJ+NWXYU9Quf4BB1y
PUVX37kdEeQk+M+Q6zBMaS8zMJclzPkKsbv0wR996SkJf03dusc6oHkKVcxwKwy+
8QodkElreSXk5oU09hDCdxlgQtAlJl89wcmNpPfBjFQGT3CA7vaB0C9wMjsxlbd3
MaX8vbSe0/IbsjoQ3H+v0YalgVSGj40SwYiNgbRGIsVzOIAVx6GNeR4nYeSMuSPL
fJGvJo15Cx5nBJux7S2fMRr3B44AIMsYGT3BTT9cZ0p4g6HjUFHeKoV6TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIECVKlFRwW6XjgpXaBrtNBF4HOMB8GA1UdIwQY
MBaAFN6kbqrnrvL0T+ZgFiu53HDWUlrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEt
MWZhOWFjNTgwYjhlLzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEtMWZhOWFjNTgwYjhl
LzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprOPPT2d
vpaUmVFe/ul0ro0vHBaVCSTUvJdRCxc7qLSa0c/E8y99iMMoZX0JBIahlsYQX/kx
vBnjm1PNOiEnYGG6b6OdqVMUHOTO56g/39K1mgYg8vgmqsO/qKB5iGtw4VAXxCJJ
mWxyQOmxHvXuwbUf3vfaTPbVoWz8/f1J19W894wJR0xP7AqD4gC9FoJ96AjemZA1
sf2s6gLn0au6MPt57BSGi+nDzw/CShCGo3kkNJ8Ub8wOxR4JwX0ZKrYniCJxTWfD
yfnB6wGWaN1CkgW+vivfV0Yp1RCoOwQiVYVxnhM3ZT75s+dsquRPwca+YX9yYJ8y
yFTQAQ1zzsuYNA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:07:50 2026 by rpki-client