
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
File: 3YpOHe5bseZXmxFhypEsqcA7Ru0.mft (raw, json)
Hash identifier: QuGny8U5FhvgN3YGu2QOOPtcmQlp3fDOO3ul7MQALoM=
Subject key identifier: 15:41:43:BF:E5:67:60:AA:D6:01:D7:4F:31:EC:61:50:06:80:B8:C4
Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
Certificate issuer: /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Certificate serial: 019FA974BEA92EA3F3EF80E914D8B369F6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
Manifest number: 1326
Signing time: Tue 28 Jul 2026 16:00:28 +0000
Manifest this update: Tue 28 Jul 2026 16:00:28 +0000
Manifest next update: Wed 29 Jul 2026 16:00:28 +0000
Files and hashes: 1: 3YpOHe5bseZXmxFhypEsqcA7Ru0.crl (hash: MKn6Ia5rvaiSfR+dKkr3p+123/6HlUzlT/mCppm8PyU=)
2: h3ZDg5youB0K7vntlWcD6_hznfg.roa (hash: 9Ot/r2EVZQa+csMn0s0+LAGhdTl5GbdXVa69dBPCmRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:be:a9:2e:a3:f3:ef:80:e9:14:d8:b3:69:f6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Validity
Not Before: Jul 28 16:00:28 2026 GMT
Not After : Jul 29 16:00:28 2026 GMT
Subject: CN=154143bfe56760aad601d74f31ec61500680b8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:10:87:ad:42:06:e4:16:49:b7:ec:66:3c:
ba:2c:be:8e:43:79:50:58:3a:bc:73:6a:04:7c:08:
53:7b:05:24:66:cb:e7:d0:1f:d0:7d:0f:2c:40:c3:
80:6b:a4:7e:c8:ee:58:89:fd:75:ed:e6:0e:82:99:
18:3b:dd:28:40:1e:d7:d9:c9:23:09:0f:81:d7:32:
3c:c1:69:50:63:01:0e:71:fc:e4:4f:5a:1a:84:96:
73:b1:10:1a:49:79:c1:ab:82:7d:7e:1c:94:1c:4c:
6c:71:c1:12:d4:f1:df:f1:a8:85:b5:6d:b2:57:37:
9e:fc:23:63:aa:12:d3:77:42:de:81:ab:00:69:43:
17:b9:e4:ae:15:60:b8:98:da:95:81:9d:35:28:fa:
17:85:7b:d5:cf:d4:dc:f3:e8:05:f4:11:7c:9d:3e:
d4:26:aa:87:b9:3b:03:70:d9:6f:bb:80:6f:98:8d:
0b:75:c2:48:05:a6:fa:df:f6:72:19:c9:92:dd:2c:
d8:39:56:6d:63:ee:b7:df:90:6c:97:d5:bd:79:18:
dd:d9:db:a4:fe:b1:ca:1f:de:e6:e2:b2:18:92:b6:
09:ad:c7:da:42:db:20:c5:1c:36:9d:74:60:ad:05:
5b:bc:a6:c6:6d:96:3e:f1:f9:66:f1:27:0d:c9:a8:
18:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:41:43:BF:E5:67:60:AA:D6:01:D7:4F:31:EC:61:50:06:80:B8:C4
X509v3 Authority Key Identifier:
keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c4:4e:38:18:9c:b0:3e:8d:c2:91:3e:67:b0:62:b7:8f:89:
17:88:8e:9b:f1:94:6c:1e:c8:42:15:d5:43:ad:00:a3:e2:a7:
eb:4d:61:9b:f4:f3:b3:78:c9:3b:58:ed:bf:07:64:05:f7:d7:
2d:9f:cf:6f:3b:f1:bd:e4:bf:9c:63:8b:65:05:90:5c:86:4b:
b2:c5:4e:9f:fe:db:d5:b3:58:ec:53:01:e9:f6:68:a9:27:54:
f2:b3:bf:7d:5a:0e:a3:60:2d:8d:64:5f:8c:26:6b:93:43:c2:
10:43:5f:50:43:e4:24:3d:92:88:d5:68:cf:13:c4:9f:0e:5e:
6a:44:9e:59:25:f4:eb:17:5a:54:17:7c:df:8d:69:11:b0:25:
6a:42:82:42:fe:70:77:12:96:50:df:f9:f2:f6:69:0f:ef:81:
70:36:af:7a:49:45:b5:87:83:f6:0e:d8:a4:ff:42:9b:4c:01:
46:53:98:b8:41:a0:39:51:1c:b5:a3:9a:e2:3f:35:58:c2:ed:
aa:fa:b8:85:64:43:6c:49:fa:60:08:f5:1a:22:c5:a1:2d:5f:
b2:dc:e8:ba:88:63:c1:c5:e5:2f:88:0c:36:98:86:b5:6c:ba:
d5:40:b4:ca:04:4b:22:40:ff:35:d8:9b:e8:3f:75:cc:bf:fa:
58:6d:fc:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdL6pLqPz74DpFNizafagMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOGE0ZTFkZWU1YmIxZTY1NzliMTE2MWNhOTEyY2E5YzAz
YjQ2ZWQwHhcNMjYwNzI4MTYwMDI4WhcNMjYwNzI5MTYwMDI4WjAzMTEwLwYDVQQD
EygxNTQxNDNiZmU1Njc2MGFhZDYwMWQ3NGYzMWVjNjE1MDA2ODBiOGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzycQh61CBuQWSbfsZjy6LL6OQ3lQ
WDq8c2oEfAhTewUkZsvn0B/QfQ8sQMOAa6R+yO5Yif117eYOgpkYO90oQB7X2ckj
CQ+B1zI8wWlQYwEOcfzkT1oahJZzsRAaSXnBq4J9fhyUHExsccES1PHf8aiFtW2y
Vzee/CNjqhLTd0LegasAaUMXueSuFWC4mNqVgZ01KPoXhXvVz9Tc8+gF9BF8nT7U
JqqHuTsDcNlvu4BvmI0LdcJIBab63/ZyGcmS3SzYOVZtY+6335Bsl9W9eRjd2duk
/rHKH97m4rIYkrYJrcfaQtsgxRw2nXRgrQVbvKbGbZY+8flm8ScNyagYpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVBQ7/lZ2Cq1gHXTzHsYVAGgLjEMB8GA1UdIwQY
MBaAFN2KTh3uW7HmV5sRYcqRLKnAO0btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1lwT0hlNWJzZVpYbXhGaHlwRXNxY0E3UnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS81ZDE5MDgtNmM0ZC00NTgxLThmMTAt
OTg1YWFjNWJlYjMwLzEvM1lwT0hlNWJzZVpYbXhGaHlwRXNxY0E3UnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS81ZDE5MDgtNmM0ZC00NTgxLThmMTAtOTg1YWFjNWJlYjMw
LzEvM1lwT0hlNWJzZVpYbXhGaHlwRXNxY0E3UnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMROOBic
sD6NwpE+Z7Bit4+JF4iOm/GUbB7IQhXVQ60Ao+Kn601hm/Tzs3jJO1jtvwdkBffX
LZ/PbzvxveS/nGOLZQWQXIZLssVOn/7b1bNY7FMB6fZoqSdU8rO/fVoOo2AtjWRf
jCZrk0PCEENfUEPkJD2SiNVozxPEnw5eakSeWSX06xdaVBd8341pEbAlakKCQv5w
dxKWUN/58vZpD++BcDaveklFtYeD9g7YpP9Cm0wBRlOYuEGgOVEctaOa4j81WMLt
qvq4hWRDbEn6YAj1GiLFoS1fstzouohjwcXlL4gMNpiGtWy61UC0ygRLIkD/Ndib
6D91zL/6WG38yw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:12 2026 by rpki-client