Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
File: 3hL5ZansM-LC6HthYb7vuL4obKM.mft (raw, json)
Hash identifier: wt1q1FShRdEMS/mo927biuyDZj3oewf3yQNZItMxehs=
Subject key identifier: 69:D5:07:6B:8C:F9:B4:9E:B7:26:60:6B:23:6F:F9:66:91:C0:DA:53
Authority key identifier: DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
Certificate issuer: /CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Certificate serial: 019FA9E2A64B538DF88E2985244A32153E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
Manifest number: 17F7
Signing time: Tue 28 Jul 2026 18:00:30 +0000
Manifest this update: Tue 28 Jul 2026 18:00:30 +0000
Manifest next update: Wed 29 Jul 2026 18:00:30 +0000
Files and hashes: 1: 3hL5ZansM-LC6HthYb7vuL4obKM.crl (hash: bNVH8frYmaDyXp914hUpiif2jIZbE5/XvGOdhLOwBkA=)
2: dQKWrb4274MA9TnUoPK0iLguRN8.roa (hash: iabYGi8dw6jC4+Zg8izYgwpn552JIuXwr1GRxu62hag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:a6:4b:53:8d:f8:8e:29:85:24:4a:32:15:3e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Validity
Not Before: Jul 28 18:00:30 2026 GMT
Not After : Jul 29 18:00:30 2026 GMT
Subject: CN=69d5076b8cf9b49eb726606b236ff96691c0da53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c3:7b:05:ee:db:f1:ee:c6:30:aa:9f:74:e2:
76:68:f5:64:47:48:67:9e:84:24:21:d0:14:ba:25:
ab:1a:ba:9c:a8:cd:17:cc:73:44:0c:aa:de:ce:1a:
40:2c:10:69:34:85:3a:a0:af:3c:95:dd:8b:e9:bb:
03:73:2f:21:5d:d7:c2:71:9c:aa:fd:bd:d1:a9:cd:
63:88:6b:2a:47:fa:15:39:e7:fe:3d:4b:86:2a:d0:
63:af:ee:d9:9b:7a:95:cf:c8:8a:2e:da:e0:67:30:
1a:e1:0e:31:79:85:3d:9f:80:0e:db:d2:46:51:e2:
33:c2:af:07:08:35:ea:70:f3:7d:2d:b8:6e:80:6b:
77:24:90:7c:db:8b:ae:59:c9:12:a0:f8:2a:c0:69:
82:21:d5:29:78:77:4a:9e:a3:33:6a:20:de:c1:91:
0f:0e:07:d3:bf:98:b1:14:f4:89:ac:17:aa:88:9b:
8c:d1:06:15:f0:a2:b1:6a:1e:f2:d2:c9:8a:a3:e5:
20:92:5e:ff:d4:46:d6:a2:21:3b:23:eb:3e:85:e2:
70:a0:10:85:76:f0:71:6d:04:ca:77:5d:c1:9a:40:
52:52:9e:25:0a:a5:8d:97:cd:3c:7c:e7:dd:ae:40:
82:a7:fb:01:4e:7d:ce:ac:f9:56:f7:80:ec:4b:f8:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D5:07:6B:8C:F9:B4:9E:B7:26:60:6B:23:6F:F9:66:91:C0:DA:53
X509v3 Authority Key Identifier:
keyid:DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b1:7d:50:b6:89:e6:54:23:0d:16:c0:ab:c7:ad:f4:cc:56:
c0:20:86:bc:fd:82:26:46:29:f9:75:1e:aa:6d:7f:fa:28:40:
e5:10:9d:3c:80:a5:a3:e8:44:db:73:ec:f9:97:85:63:b5:c9:
5e:e2:e8:87:bb:70:69:d3:aa:6f:af:da:2f:4c:2b:73:ff:4f:
1a:7f:da:22:e3:03:19:3c:7f:c1:ca:e5:18:e3:0f:25:49:1a:
ee:34:b5:ac:09:19:92:ad:98:d5:b5:be:c5:81:a9:a3:a0:cb:
de:b0:f1:f5:af:93:4f:a1:9f:de:5c:8a:6f:77:da:ab:d1:12:
79:33:7f:5a:8f:62:a5:1f:26:35:83:14:f6:4a:e1:8a:c7:a3:
8c:51:09:92:fc:8b:58:d4:14:b4:22:b0:0c:a0:e8:56:ab:9d:
99:3f:64:6f:6a:93:81:1b:e2:27:68:3f:0d:97:3e:8d:c8:64:
6e:f1:97:5e:75:4d:0c:03:41:08:76:6c:1b:5e:a4:d8:86:a2:
14:72:2c:ac:7a:ea:de:1e:49:35:8e:28:9a:a4:48:1c:7e:94:
e6:2d:45:ac:67:44:8b:6f:5c:20:5d:72:83:36:a0:f3:93:c3:
7a:6c:c1:29:cd:bb:e9:bd:47:24:47:c6:c5:a6:3b:13:c8:80:
11:22:fc:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4qZLU434jimFJEoyFT6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTJmOTY1YTllYzMzZTJjMmU4N2I2MTYxYmVlZmI4YmUy
ODZjYTMwHhcNMjYwNzI4MTgwMDMwWhcNMjYwNzI5MTgwMDMwWjAzMTEwLwYDVQQD
Eyg2OWQ1MDc2YjhjZjliNDllYjcyNjYwNmIyMzZmZjk2NjkxYzBkYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28N7Be7b8e7GMKqfdOJ2aPVkR0hn
noQkIdAUuiWrGrqcqM0XzHNEDKrezhpALBBpNIU6oK88ld2L6bsDcy8hXdfCcZyq
/b3Rqc1jiGsqR/oVOef+PUuGKtBjr+7Zm3qVz8iKLtrgZzAa4Q4xeYU9n4AO29JG
UeIzwq8HCDXqcPN9LbhugGt3JJB824uuWckSoPgqwGmCIdUpeHdKnqMzaiDewZEP
DgfTv5ixFPSJrBeqiJuM0QYV8KKxah7y0smKo+Ugkl7/1EbWoiE7I+s+heJwoBCF
dvBxbQTKd13BmkBSUp4lCqWNl808fOfdrkCCp/sBTn3OrPlW94DsS/g3xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnVB2uM+bSetyZgayNv+WaRwNpTMB8GA1UdIwQY
MBaAFN4S+WWp7DPiwuh7YWG+77i+KGyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hMNVphbnNNLUxDNkh0aFliN3Z1TDRvYktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wZjAzNzMtZGI2ZC00Nzk3LTgyMGQt
YjZkMTJhYzY2ODMxLzEvM2hMNVphbnNNLUxDNkh0aFliN3Z1TDRvYktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wZjAzNzMtZGI2ZC00Nzk3LTgyMGQtYjZkMTJhYzY2ODMx
LzEvM2hMNVphbnNNLUxDNkh0aFliN3Z1TDRvYktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7F9ULaJ
5lQjDRbAq8et9MxWwCCGvP2CJkYp+XUeqm1/+ihA5RCdPIClo+hE23Ps+ZeFY7XJ
XuLoh7twadOqb6/aL0wrc/9PGn/aIuMDGTx/wcrlGOMPJUka7jS1rAkZkq2Y1bW+
xYGpo6DL3rDx9a+TT6Gf3lyKb3faq9ESeTN/Wo9ipR8mNYMU9krhisejjFEJkvyL
WNQUtCKwDKDoVqudmT9kb2qTgRviJ2g/DZc+jchkbvGXXnVNDANBCHZsG16k2Iai
FHIsrHrq3h5JNY4omqRIHH6U5i1FrGdEi29cIF1ygzag85PDemzBKc276b1HJEfG
xaY7E8iAESL8Gg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:59 2026 by rpki-client