Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
File: 3VP2PxOgyVKgefRXihDtv246pYs.mft (raw, json)
Hash identifier: 4rsTY6VV4f5NajaX+lCBxugovMkTwitDBlhVQZDkGRw=
Subject key identifier: 7A:8D:CD:73:C4:32:5E:B5:28:B0:57:23:C0:28:37:23:60:0D:F3:CA
Authority key identifier: DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B
Certificate issuer: /CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b
Certificate serial: 019FAABE43CD03C1645CB1806835995B1B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
Manifest number: 1943
Signing time: Tue 28 Jul 2026 22:00:23 +0000
Manifest this update: Tue 28 Jul 2026 22:00:23 +0000
Manifest next update: Wed 29 Jul 2026 22:00:23 +0000
Files and hashes: 1: 3VP2PxOgyVKgefRXihDtv246pYs.crl (hash: rkC+taRytKl4b4cDREn7/7QdQ1D45IyEB84HLBAeVL8=)
2: TWjQ2gsQUU9MXDJP00l8lOI_i8I.roa (hash: PtqnNrTefbS8Cw3BlkL6LKO9S8DUkKbOBZ0zbUviWfs=)
3: WoaNei28YSaPDdcENSu3LjSXLKg.roa (hash: YXB0+7Vswy/qgNB0Agbnb+glIUAaceZRMWc/efKKqKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:43:cd:03:c1:64:5c:b1:80:68:35:99:5b:1b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd53f63f13a0c952a079f4578a10edbf6e3aa58b
Validity
Not Before: Jul 28 22:00:23 2026 GMT
Not After : Jul 29 22:00:23 2026 GMT
Subject: CN=7a8dcd73c4325eb528b05723c0283723600df3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:15:e5:b3:d2:1f:2d:8c:be:ba:86:4a:4f:
e1:83:1d:b0:bb:e9:fc:e6:45:6c:25:df:84:97:51:
a8:d2:e4:1b:82:2d:10:fc:af:90:0b:10:98:4c:cc:
56:89:aa:a2:65:c0:24:04:9c:94:90:7f:51:58:9e:
52:e7:59:f9:52:55:20:56:29:6a:c3:c3:50:7a:62:
f7:10:d4:21:ed:1b:6e:5a:bb:5a:e6:0c:2b:57:7c:
36:db:18:9d:00:b7:20:95:82:2b:31:00:90:20:fd:
3f:31:9e:8b:9b:bb:4b:da:1c:e4:2a:13:07:d3:5e:
bd:09:11:a1:78:15:4a:7a:02:20:3a:c0:74:49:cf:
c1:f0:96:14:a6:68:c8:b8:b5:00:02:98:64:59:3a:
97:7e:d6:28:d1:9b:42:0d:5c:be:ed:3c:12:05:2e:
e8:d3:0a:a7:b1:a6:ea:03:5b:24:d4:43:76:fa:0e:
93:d3:fb:8e:8c:40:da:bb:5f:76:1b:36:2e:b2:e3:
de:34:c8:48:11:e1:99:76:e7:91:a5:f6:97:7b:ec:
08:af:da:1f:d9:18:dc:96:1d:1b:9c:e9:00:a3:8b:
bc:a7:46:1d:3d:d2:e9:08:e4:15:0b:3b:04:08:11:
a5:06:80:50:24:24:ba:f8:72:cc:29:74:ba:1a:6b:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8D:CD:73:C4:32:5E:B5:28:B0:57:23:C0:28:37:23:60:0D:F3:CA
X509v3 Authority Key Identifier:
keyid:DD:53:F6:3F:13:A0:C9:52:A0:79:F4:57:8A:10:ED:BF:6E:3A:A5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VP2PxOgyVKgefRXihDtv246pYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1c444d-058d-475c-abff-5cdfa117aec6/1/3VP2PxOgyVKgefRXihDtv246pYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ce:64:a0:80:37:77:45:1a:07:1c:dc:51:83:be:6a:23:ac:
19:c8:60:e8:55:38:49:4d:62:fc:ae:1d:22:ce:3e:0f:2a:aa:
43:4d:b2:10:2b:bf:f5:62:72:f7:a9:51:42:9f:0d:3b:88:2f:
28:6c:e6:32:70:18:b7:c8:38:21:80:4b:b8:5b:1a:2c:b0:e6:
9d:d5:a7:dd:3f:0f:1b:07:83:02:db:0f:f7:bd:3b:92:a3:47:
3e:50:f1:f0:bf:e4:93:60:39:67:f3:d2:d4:b4:6d:ad:8f:c5:
b3:cd:26:84:da:1f:77:2a:2c:6d:2a:08:0a:a8:9c:f6:3f:2c:
7d:f1:1b:ac:71:2e:38:83:e6:4d:72:06:ae:31:59:0a:e4:1b:
5c:b1:9e:b4:2c:c5:03:49:2d:b4:8b:05:15:a8:21:9b:06:13:
0d:24:47:c9:5b:08:63:dc:ac:5d:76:ee:b0:f7:b7:19:fd:31:
ed:28:ff:b8:bc:b1:13:57:54:56:09:fb:7e:fe:c0:46:2c:76:
32:14:26:65:d5:fb:d2:83:71:e0:28:fc:8f:9f:91:3b:8f:bd:
92:9e:06:3d:32:05:0c:ef:fd:31:ac:11:77:cb:26:26:52:53:
da:f0:aa:1c:84:24:7a:46:c5:ae:ad:1c:04:61:06:20:cd:f4:
dc:a1:e4:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvkPNA8FkXLGAaDWZWxshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTNmNjNmMTNhMGM5NTJhMDc5ZjQ1NzhhMTBlZGJmNmUz
YWE1OGIwHhcNMjYwNzI4MjIwMDIzWhcNMjYwNzI5MjIwMDIzWjAzMTEwLwYDVQQD
Eyg3YThkY2Q3M2M0MzI1ZWI1MjhiMDU3MjNjMDI4MzcyMzYwMGRmM2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDkV5bPSHy2MvrqGSk/hgx2wu+n8
5kVsJd+El1Go0uQbgi0Q/K+QCxCYTMxWiaqiZcAkBJyUkH9RWJ5S51n5UlUgVilq
w8NQemL3ENQh7RtuWrta5gwrV3w22xidALcglYIrMQCQIP0/MZ6Lm7tL2hzkKhMH
0169CRGheBVKegIgOsB0Sc/B8JYUpmjIuLUAAphkWTqXftYo0ZtCDVy+7TwSBS7o
0wqnsabqA1sk1EN2+g6T0/uOjEDau192GzYusuPeNMhIEeGZdueRpfaXe+wIr9of
2Rjclh0bnOkAo4u8p0YdPdLpCOQVCzsECBGlBoBQJCS6+HLMKXS6GmsAywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqNzXPEMl61KLBXI8AoNyNgDfPKMB8GA1UdIwQY
MBaAFN1T9j8ToMlSoHn0V4oQ7b9uOqWLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZQMlB4T2d5VktnZWZSWGloRHR2MjQ2cFlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xYzQ0NGQtMDU4ZC00NzVjLWFiZmYt
NWNkZmExMTdhZWM2LzEvM1ZQMlB4T2d5VktnZWZSWGloRHR2MjQ2cFlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xYzQ0NGQtMDU4ZC00NzVjLWFiZmYtNWNkZmExMTdhZWM2
LzEvM1ZQMlB4T2d5VktnZWZSWGloRHR2MjQ2cFlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAc5koIA3
d0UaBxzcUYO+aiOsGchg6FU4SU1i/K4dIs4+DyqqQ02yECu/9WJy96lRQp8NO4gv
KGzmMnAYt8g4IYBLuFsaLLDmndWn3T8PGweDAtsP9707kqNHPlDx8L/kk2A5Z/PS
1LRtrY/Fs80mhNofdyosbSoICqic9j8sffEbrHEuOIPmTXIGrjFZCuQbXLGetCzF
A0kttIsFFaghmwYTDSRHyVsIY9ysXXbusPe3Gf0x7Sj/uLyxE1dUVgn7fv7ARix2
MhQmZdX70oNx4Cj8j5+RO4+9kp4GPTIFDO/9MawRd8smJlJT2vCqHIQkekbFrq0c
BGEGIM303KHkAw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:45:53 2026 by rpki-client