Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File: 3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier: lN2A2f3W9yw70dV+n01pBmQwwsOMoLoWnSwxd+my/YA=
Subject key identifier: DF:4F:D2:EA:67:EF:19:CC:DD:FA:59:53:6D:79:B2:DC:58:B1:E1:0D
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial: 019FA9E31ABA42CFF5D31E2B294328543786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number: 102E
Signing time: Tue 28 Jul 2026 18:01:00 +0000
Manifest this update: Tue 28 Jul 2026 18:01:00 +0000
Manifest next update: Wed 29 Jul 2026 18:01:00 +0000
Files and hashes: 1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: Fn8aVm2YWX8fmBhjonEdlzGNl2FN3yQEh5z48sTTVMo=)
2: 6oH-q1WmgKlbF7oPFf0VCjT4cP4.roa (hash: 8fxRfcDqePTH9D6GcvyAsB8XOQ2tsAsMINyYJwfwjDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:1a:ba:42:cf:f5:d3:1e:2b:29:43:28:54:37:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Validity
Not Before: Jul 28 18:01:00 2026 GMT
Not After : Jul 29 18:01:00 2026 GMT
Subject: CN=df4fd2ea67ef19ccddfa59536d79b2dc58b1e10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ad:9d:aa:b3:6b:d6:bb:23:f8:ac:fa:bf:62:
a0:71:81:6c:e5:a2:91:c7:22:08:21:92:79:6d:02:
4b:d1:d3:f7:c8:6d:45:ea:ab:1f:7d:44:ae:10:cd:
19:80:17:e8:bd:d0:93:55:28:70:84:2a:45:44:9d:
a0:1c:86:0f:80:69:2f:93:43:98:e2:ec:43:99:35:
34:58:8b:0a:91:d1:fa:4e:c2:d5:2a:e2:13:0e:61:
36:95:76:cf:68:d4:a8:77:d9:e0:7d:55:d3:df:4e:
dd:81:a6:95:3c:f0:1d:3e:8c:5d:77:1a:eb:3a:de:
1b:d2:6f:3e:8a:d4:5e:68:f9:9a:36:e5:92:83:4e:
1c:56:06:64:32:dd:98:fa:b8:34:47:7b:77:bd:1c:
1a:cf:98:9f:4c:9a:ae:ef:df:fb:94:a8:91:d4:70:
36:26:91:ca:86:0a:87:14:22:1c:05:b0:72:6f:aa:
33:a8:a2:70:c4:4c:92:6e:31:82:fd:82:23:93:3d:
c1:6e:fb:69:03:7d:1a:01:be:84:83:73:c6:40:65:
9b:4f:e5:82:2d:38:60:50:48:11:76:44:4e:62:1c:
34:0d:ae:df:08:b7:8c:0e:5b:54:bb:22:ee:65:87:
f0:57:07:c5:42:c9:74:38:21:5f:40:4b:98:d1:c3:
07:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4F:D2:EA:67:EF:19:CC:DD:FA:59:53:6D:79:B2:DC:58:B1:E1:0D
X509v3 Authority Key Identifier:
keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:46:91:b3:f6:e9:c8:e0:90:2c:e5:54:e2:13:22:7f:14:68:
37:c1:cf:51:51:21:70:13:78:13:ab:21:28:e6:7a:94:28:fa:
c9:26:1e:45:15:44:54:b3:e9:c7:54:d5:cd:9b:4d:94:15:38:
ec:e0:1e:33:f4:c4:67:f2:04:12:9b:bd:b2:1f:ba:b6:40:06:
c1:02:ce:a9:22:40:3e:3b:dd:25:63:87:3c:b6:d6:9c:ea:73:
20:b4:68:16:af:e0:25:bd:c9:7b:66:94:42:67:9a:b7:24:54:
bd:df:fb:16:9a:8b:5e:d3:80:f2:63:81:c9:ea:81:6f:7e:4b:
bd:1f:5e:2b:20:15:5b:28:79:ac:bf:81:74:f7:05:8f:7f:69:
e9:28:60:c1:15:34:96:be:75:fe:77:e3:3e:1f:57:6b:ea:f1:
e7:0a:72:0c:c4:a8:4e:15:f0:73:06:7b:80:84:31:73:ac:95:
65:86:a4:aa:23:c5:49:52:b6:b3:d7:83:ac:57:75:00:2d:37:
8a:41:51:72:07:81:ae:b6:60:8a:ec:f1:dd:df:30:ab:a2:3c:
9b:d9:3a:6f:26:c9:6e:5e:28:11:9a:ce:b7:d3:b1:33:e8:59:
f1:71:7d:79:d5:e4:92:fd:98:ce:3a:6c:68:6e:eb:e2:4e:31:
3b:d3:fa:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4xq6Qs/10x4rKUMoVDeGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNWVlNjViYTM2OGFkNzRkOWEwM2ZmMjgyNDQwYzg1Nzdh
MjE1OTYwHhcNMjYwNzI4MTgwMTAwWhcNMjYwNzI5MTgwMTAwWjAzMTEwLwYDVQQD
EyhkZjRmZDJlYTY3ZWYxOWNjZGRmYTU5NTM2ZDc5YjJkYzU4YjFlMTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK2dqrNr1rsj+Kz6v2KgcYFs5aKR
xyIIIZJ5bQJL0dP3yG1F6qsffUSuEM0ZgBfovdCTVShwhCpFRJ2gHIYPgGkvk0OY
4uxDmTU0WIsKkdH6TsLVKuITDmE2lXbPaNSod9ngfVXT307dgaaVPPAdPoxddxrr
Ot4b0m8+itReaPmaNuWSg04cVgZkMt2Y+rg0R3t3vRwaz5ifTJqu79/7lKiR1HA2
JpHKhgqHFCIcBbByb6ozqKJwxEySbjGC/YIjkz3BbvtpA30aAb6Eg3PGQGWbT+WC
LThgUEgRdkROYhw0Da7fCLeMDltUuyLuZYfwVwfFQsl0OCFfQEuY0cMH8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9P0upn7xnM3fpZU215stxYseENMB8GA1UdIwQY
MBaAFN1e5lujaK102aA/8oJEDIV3ohWWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Y3bVc2Tm9yWFRab0RfeWdrUU1oWGVpRlpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kYzY4ZGQtMWRjOC00ODg4LWEzZWQt
ZWJkNzNiMTllYWU0LzEvM1Y3bVc2Tm9yWFRab0RfeWdrUU1oWGVpRlpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kYzY4ZGQtMWRjOC00ODg4LWEzZWQtZWJkNzNiMTllYWU0
LzEvM1Y3bVc2Tm9yWFRab0RfeWdrUU1oWGVpRlpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEaRs/bp
yOCQLOVU4hMifxRoN8HPUVEhcBN4E6shKOZ6lCj6ySYeRRVEVLPpx1TVzZtNlBU4
7OAeM/TEZ/IEEpu9sh+6tkAGwQLOqSJAPjvdJWOHPLbWnOpzILRoFq/gJb3Je2aU
QmeatyRUvd/7FpqLXtOA8mOByeqBb35LvR9eKyAVWyh5rL+BdPcFj39p6ShgwRU0
lr51/nfjPh9Xa+rx5wpyDMSoThXwcwZ7gIQxc6yVZYakqiPFSVK2s9eDrFd1AC03
ikFRcgeBrrZgiuzx3d8wq6I8m9k6bybJbl4oEZrOt9OxM+hZ8XF9edXkkv2Yzjps
aG7r4k4xO9P6sQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:32 2026 by rpki-client