Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: tEvDekYshPObXcTVf3/Nsp0+JdewMlTXjv4xHIGnWbg=
Subject key identifier: 48:9A:A6:92:E6:20:F8:90:2D:EE:77:2D:A6:10:E9:9E:ED:A7:F3:28
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 019FA975966440519EBF7B364BE6FD69B56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 0808
Signing time: Tue 28 Jul 2026 16:01:23 +0000
Manifest this update: Tue 28 Jul 2026 16:01:23 +0000
Manifest next update: Wed 29 Jul 2026 16:01:23 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: rMFHoLIReA5O53PysNOOlQmj1YSeRzp3TXEg/Q6N24o=)
2: HrUPMg6A27LayY1nzJVXakWil-8.roa (hash: 6oiaD9+R084Ie04PfQ9j94YYcX9VFnuvxlsXJPk70DA=)
3: LsW7E92fgqyb4h0SFoyQ1iS_A-A.roa (hash: lZdLHI5/Pom2chJvXWn7/eiTGrnfbJ5HoDaiu046MUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:96:64:40:51:9e:bf:7b:36:4b:e6:fd:69:b5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Jul 28 16:01:23 2026 GMT
Not After : Jul 29 16:01:23 2026 GMT
Subject: CN=489aa692e620f8902dee772da610e99eeda7f328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:3f:45:a0:ac:fb:57:d6:8c:82:b8:7f:5d:
fd:7e:2c:b9:a2:46:d3:09:98:1e:85:61:f6:e9:52:
73:38:7c:32:c6:e3:62:f7:04:a1:df:93:f3:89:cb:
b7:1b:fd:be:13:f9:b1:36:72:0d:68:1e:0a:75:cb:
82:a9:02:38:ea:94:df:f5:84:d2:1f:5b:a2:67:cf:
d2:42:ec:81:20:ca:21:2c:40:f1:ac:94:a1:ae:c6:
45:46:61:fa:cc:74:cc:4b:96:cb:bf:b5:24:e2:45:
73:f3:5c:fb:42:e7:12:23:6b:d7:f4:d6:af:e2:aa:
c3:8e:66:1a:4e:80:a6:a5:59:6d:3b:65:5b:61:a5:
4b:dc:64:40:24:b8:f7:42:d0:54:47:08:d6:6c:41:
e9:5c:cb:22:91:05:71:dc:8c:04:19:33:0d:db:e2:
50:01:97:ae:60:3e:ab:3d:a8:2f:8e:dd:6a:a2:4a:
f1:5d:76:09:0d:4d:27:d3:7f:91:a1:4d:2c:06:b6:
e5:d9:eb:c3:77:6c:9f:5d:6a:a5:86:23:c7:da:70:
14:87:cb:d6:65:0a:03:d2:73:93:e4:1b:a0:c4:47:
1f:d2:59:74:29:dc:68:4c:09:23:89:2d:0d:9e:b8:
e2:19:e7:d6:a0:90:a6:fb:c9:c5:dc:b5:12:6b:97:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9A:A6:92:E6:20:F8:90:2D:EE:77:2D:A6:10:E9:9E:ED:A7:F3:28
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:74:1d:5a:15:a4:c3:ef:6d:21:c2:12:29:df:31:c3:c9:40:
4c:e3:2a:d9:cd:ff:64:d9:87:7b:fa:6d:80:16:a9:f1:5b:e4:
1d:11:03:3d:bc:2b:53:79:a2:88:e3:c1:f1:60:04:91:32:57:
1f:e3:61:20:fb:14:4e:ab:0c:e9:8c:38:73:12:69:f9:1d:f6:
b7:3e:d7:8c:61:b0:3c:d1:e3:e0:96:c1:34:35:5d:15:e0:10:
1b:25:26:c9:5c:3e:59:39:c5:fd:3b:ce:65:34:73:a6:a1:8f:
e0:65:50:7c:63:55:23:d2:d1:54:0c:0e:48:2f:80:c1:c1:5b:
bd:52:80:0e:7d:a0:38:56:b5:ec:36:ed:5d:77:09:b2:2d:f3:
36:0d:e0:cf:79:2d:86:7c:5f:dc:86:15:f8:74:fd:41:c7:51:
9e:cb:2d:4e:26:80:04:92:e5:e0:59:16:b4:67:21:a1:c7:f8:
21:d2:f6:8d:54:04:44:a7:38:99:6e:b5:af:cf:11:91:da:4d:
3a:bb:2c:ab:0a:29:73:94:d5:9d:3e:54:21:ea:07:3b:ff:ad:
52:cc:84:ad:b6:32:2b:f5:26:7a:87:5d:2d:76:f6:af:d7:23:
ba:8a:5c:d0:2e:c6:6a:13:b3:f8:db:33:02:c4:0e:60:d7:c0:
e3:46:0f:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdZZkQFGev3s2S+b9abVuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZDk3NzBjMzA3ZWEzOTYwYzhkYTI2OGE4ODY1YTRhOWZh
NjM0YzkwHhcNMjYwNzI4MTYwMTIzWhcNMjYwNzI5MTYwMTIzWjAzMTEwLwYDVQQD
Eyg0ODlhYTY5MmU2MjBmODkwMmRlZTc3MmRhNjEwZTk5ZWVkYTdmMzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2Q/RaCs+1fWjIK4f139fiy5okbT
CZgehWH26VJzOHwyxuNi9wSh35Pzicu3G/2+E/mxNnINaB4KdcuCqQI46pTf9YTS
H1uiZ8/SQuyBIMohLEDxrJShrsZFRmH6zHTMS5bLv7Uk4kVz81z7QucSI2vX9Nav
4qrDjmYaToCmpVltO2VbYaVL3GRAJLj3QtBURwjWbEHpXMsikQVx3IwEGTMN2+JQ
AZeuYD6rPagvjt1qokrxXXYJDU0n03+RoU0sBrbl2evDd2yfXWqlhiPH2nAUh8vW
ZQoD0nOT5BugxEcf0ll0KdxoTAkjiS0NnrjiGefWoJCm+8nF3LUSa5fESwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiappLmIPiQLe53LaYQ6Z7tp/MoMB8GA1UdIwQY
MBaAFN3ZdwwwfqOWDI2iaKiGWkqfpjTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUt
ZjJmZTBkMDRiZmJmLzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUtZjJmZTBkMDRiZmJm
LzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7HQdWhWk
w+9tIcISKd8xw8lATOMq2c3/ZNmHe/ptgBap8VvkHREDPbwrU3miiOPB8WAEkTJX
H+NhIPsUTqsM6Yw4cxJp+R32tz7XjGGwPNHj4JbBNDVdFeAQGyUmyVw+WTnF/TvO
ZTRzpqGP4GVQfGNVI9LRVAwOSC+AwcFbvVKADn2gOFa17DbtXXcJsi3zNg3gz3kt
hnxf3IYV+HT9QcdRnsstTiaABJLl4FkWtGchocf4IdL2jVQERKc4mW61r88RkdpN
Orssqwopc5TVnT5UIeoHO/+tUsyErbYyK/UmeoddLXb2r9cjuopc0C7GahOz+Nsz
AsQOYNfA40YPiA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:13:43 2026 by rpki-client