Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
File: 3ohLjkYvPsE6QCTWaamdlK8FzbI.mft (raw, json)
Hash identifier: VKSMYdFtGwH7S15w+0DFnpDb2fROBWkCAt5FWhtSP3Q=
Subject key identifier: B6:57:B9:CA:6A:38:F5:F4:EB:03:67:24:29:1C:9A:E5:E3:77:CA:B5
Authority key identifier: DE:88:4B:8E:46:2F:3E:C1:3A:40:24:D6:69:A9:9D:94:AF:05:CD:B2
Certificate issuer: /CN=de884b8e462f3ec13a4024d669a99d94af05cdb2
Certificate serial: 019FA8CFE6D6394B942B4D96363E76C13D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
Manifest number: 0A82
Signing time: Tue 28 Jul 2026 13:00:24 +0000
Manifest this update: Tue 28 Jul 2026 13:00:24 +0000
Manifest next update: Wed 29 Jul 2026 13:00:24 +0000
Files and hashes: 1: 3ohLjkYvPsE6QCTWaamdlK8FzbI.crl (hash: xqdqSIGzuruO/WB7tFexJxM4Ak0G3dapzcAQjSE+gEM=)
2: KyIGNZFDdjiF9uvViG3nRW9Bmw8.roa (hash: DzYiLKcYFU2Q0VtZNwQkwth/5N+BuGWGx0hMS551gkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:e6:d6:39:4b:94:2b:4d:96:36:3e:76:c1:3d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de884b8e462f3ec13a4024d669a99d94af05cdb2
Validity
Not Before: Jul 28 13:00:24 2026 GMT
Not After : Jul 29 13:00:24 2026 GMT
Subject: CN=b657b9ca6a38f5f4eb036724291c9ae5e377cab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:44:3d:e0:e9:60:a4:f1:ad:e2:cb:40:c3:
4b:28:d2:28:e7:55:df:d4:00:b7:03:08:e7:a3:56:
52:ae:a9:0a:f3:ff:a7:72:88:72:12:06:11:99:9b:
af:fc:78:e0:23:37:f8:1f:63:73:a5:76:d6:a8:a6:
be:94:6c:99:7b:ce:9f:a9:a8:87:be:47:0a:db:12:
59:a4:77:25:3e:4c:e2:b7:a7:62:7b:3a:31:8f:d6:
5b:bc:cc:c1:2a:21:4c:9c:93:58:fb:ac:45:24:5b:
b7:71:d9:be:10:21:f8:f6:82:79:a5:00:17:5e:7d:
92:05:5c:55:b7:d1:80:03:11:7a:49:21:f5:04:d6:
b8:56:45:b2:a1:1f:b0:7b:d9:86:65:7f:32:98:7d:
2c:11:7a:24:11:8f:98:77:05:c8:10:93:35:6e:dc:
e7:f8:b7:95:53:80:0b:c8:9f:9d:cf:c5:9f:c8:91:
52:b7:f3:de:c5:d6:78:7f:c8:26:49:d0:b8:42:46:
b0:31:74:54:05:92:eb:8d:76:09:b4:d0:1a:6a:63:
46:e1:6c:23:7f:c6:74:20:e7:dd:f8:bd:89:86:24:
05:13:7f:66:ca:06:f5:d2:08:24:31:55:2d:b9:21:
a4:cb:1e:79:80:45:3f:8f:dd:5e:5e:f8:f1:93:3c:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:57:B9:CA:6A:38:F5:F4:EB:03:67:24:29:1C:9A:E5:E3:77:CA:B5
X509v3 Authority Key Identifier:
keyid:DE:88:4B:8E:46:2F:3E:C1:3A:40:24:D6:69:A9:9D:94:AF:05:CD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fa:4c:0d:17:28:11:2f:28:5b:29:29:27:d0:e9:3e:2a:4e:
35:ec:dc:87:95:d3:9f:e6:c9:7c:5c:43:0c:af:00:ae:f1:e9:
77:84:22:e1:e8:42:de:f8:eb:62:1f:01:63:5e:39:cf:55:0f:
20:ce:d0:a6:08:9f:29:7a:3d:ac:5f:3d:52:50:04:29:2c:5c:
d0:a9:33:a0:29:c3:01:07:d7:c5:7b:4c:fa:73:0d:4e:57:89:
12:57:96:5e:39:6f:8b:8d:78:e5:0e:b3:ef:a0:3c:b9:4b:51:
6e:2c:2f:d9:a1:e5:f6:b9:c3:e4:e9:86:f7:ad:c4:9c:d2:81:
fa:0b:15:70:5a:10:f0:42:7c:5e:eb:a0:2a:58:38:3a:15:27:
c5:09:00:58:50:76:88:9d:5e:e3:4a:2b:a5:8e:10:b8:d2:ad:
a7:1d:94:7d:6a:54:8c:64:27:ef:ca:df:04:71:3e:db:3d:e6:
c4:36:90:26:72:3c:fc:f9:48:49:9c:43:dd:1b:69:bb:b0:aa:
2f:cc:10:bf:39:49:72:44:af:ef:ae:58:49:20:a2:36:e0:81:
65:8f:03:9e:6b:d7:4e:60:60:1d:f1:c7:52:98:60:1f:98:55:
73:a7:35:10:19:b3:f2:01:53:32:88:c2:c5:fc:cd:20:98:4f:
1f:6c:cd:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oz+bWOUuUK02WNj52wT1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlODg0YjhlNDYyZjNlYzEzYTQwMjRkNjY5YTk5ZDk0YWYw
NWNkYjIwHhcNMjYwNzI4MTMwMDI0WhcNMjYwNzI5MTMwMDI0WjAzMTEwLwYDVQQD
EyhiNjU3YjljYTZhMzhmNWY0ZWIwMzY3MjQyOTFjOWFlNWUzNzdjYWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WNEPeDpYKTxreLLQMNLKNIo51Xf
1AC3Awjno1ZSrqkK8/+ncohyEgYRmZuv/HjgIzf4H2NzpXbWqKa+lGyZe86fqaiH
vkcK2xJZpHclPkzit6diezoxj9ZbvMzBKiFMnJNY+6xFJFu3cdm+ECH49oJ5pQAX
Xn2SBVxVt9GAAxF6SSH1BNa4VkWyoR+we9mGZX8ymH0sEXokEY+YdwXIEJM1btzn
+LeVU4ALyJ+dz8WfyJFSt/PexdZ4f8gmSdC4QkawMXRUBZLrjXYJtNAaamNG4Wwj
f8Z0IOfd+L2JhiQFE39mygb10ggkMVUtuSGkyx55gEU/j91eXvjxkzwoDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZXucpqOPX06wNnJCkcmuXjd8q1MB8GA1UdIwQY
MBaAFN6IS45GLz7BOkAk1mmpnZSvBc2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM29oTGprWXZQc0U2UUNUV2FhbWRsSzhGemJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NWRmNTYtZGQzMi00MzNjLWI0NGUt
NGFmNzA0MDJiMjcwLzEvM29oTGprWXZQc0U2UUNUV2FhbWRsSzhGemJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80NWRmNTYtZGQzMi00MzNjLWI0NGUtNGFmNzA0MDJiMjcw
LzEvM29oTGprWXZQc0U2UUNUV2FhbWRsSzhGemJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfpMDRco
ES8oWykpJ9DpPipONezch5XTn+bJfFxDDK8ArvHpd4Qi4ehC3vjrYh8BY145z1UP
IM7QpgifKXo9rF89UlAEKSxc0KkzoCnDAQfXxXtM+nMNTleJEleWXjlvi4145Q6z
76A8uUtRbiwv2aHl9rnD5OmG963EnNKB+gsVcFoQ8EJ8XuugKlg4OhUnxQkAWFB2
iJ1e40orpY4QuNKtpx2UfWpUjGQn78rfBHE+2z3mxDaQJnI8/PlISZxD3Rtpu7Cq
L8wQvzlJckSv765YSSCiNuCBZY8DnmvXTmBgHfHHUphgH5hVc6c1EBmz8gFTMojC
xfzNIJhPH2zNng==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:54 2026 by rpki-client