Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
File: 3SoSF2c-sRypijUTlSBAfJdo38M.mft (raw, json)
Hash identifier: ZlbGYHY1PsqqAX5fRIQToUvshQQC57/PwinJAS2DYSY=
Subject key identifier: CE:E3:F1:15:3E:B3:0F:3D:BA:75:BE:EE:80:C5:BA:23:5C:A3:21:F7
Authority key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
Certificate issuer: /CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Certificate serial: 019FAAF5205A3B6901D5CDF4088291631C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
Manifest number: 02D7
Signing time: Tue 28 Jul 2026 23:00:19 +0000
Manifest this update: Tue 28 Jul 2026 23:00:19 +0000
Manifest next update: Wed 29 Jul 2026 23:00:19 +0000
Files and hashes: 1: 3SoSF2c-sRypijUTlSBAfJdo38M.crl (hash: Pi+cm9d6pvh8qyiBoVBzYVDrepfPSgI5OvdyF54txJI=)
2: WQR-Dyl5ml38JzgsrWjiLr-jTjE.roa (hash: 8pC1xGdRfwbbzKrCgP0LBKBZ1huDVz6z9MO3fLjaue8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:20:5a:3b:69:01:d5:cd:f4:08:82:91:63:1c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Validity
Not Before: Jul 28 23:00:19 2026 GMT
Not After : Jul 29 23:00:19 2026 GMT
Subject: CN=cee3f1153eb30f3dba75beee80c5ba235ca321f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:4e:10:d9:ed:2e:0b:58:ed:91:6f:5a:fd:
ed:3c:a7:c7:e5:41:ca:3b:88:09:95:f8:98:64:4d:
05:9c:f9:3e:a0:20:6e:91:9c:c0:99:7d:75:0f:dc:
30:b4:81:c6:f1:4d:53:87:90:a5:ee:92:76:f5:a4:
63:49:b4:f9:52:2b:f1:c8:af:a0:7c:09:4a:34:7a:
ac:3a:f6:b9:92:0c:d0:92:8f:0f:cb:a1:9d:ae:36:
bd:5c:81:35:8e:a6:d3:d6:79:2c:55:05:20:ad:a8:
ef:a7:19:f9:a3:62:20:7b:a1:34:4f:15:f9:d7:c8:
1c:2d:d3:7a:63:79:f2:55:f5:ad:3d:bf:f7:26:8c:
a5:a7:58:5d:c0:ce:a5:a6:7f:0e:67:4f:10:e8:5c:
7b:ac:67:57:8b:ec:fb:cc:aa:81:f7:a4:52:97:f1:
a3:b6:e7:79:8d:f9:d4:8b:ad:ba:ae:3b:90:12:3b:
f0:91:56:a8:35:32:34:d2:49:6e:c9:60:6c:fe:0d:
60:5d:4b:76:dd:1d:5c:92:6b:1a:97:fc:b3:87:30:
a2:c2:02:5c:0d:af:b0:d0:c3:59:a5:89:dd:45:45:
c8:2c:a4:aa:14:8f:75:e2:af:da:ce:f9:92:f8:41:
7c:23:de:a5:89:4d:41:bd:84:ee:72:1a:f4:5e:6a:
cb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E3:F1:15:3E:B3:0F:3D:BA:75:BE:EE:80:C5:BA:23:5C:A3:21:F7
X509v3 Authority Key Identifier:
keyid:DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a6:a4:0e:21:ff:c2:7c:2d:6f:83:a8:b7:aa:5e:09:e0:c1:
80:f1:a2:d4:57:44:ae:1e:b7:cb:27:42:5c:63:af:45:ad:8a:
e4:f6:a0:5b:83:05:1f:da:34:71:88:d8:d8:fc:0e:02:f7:b3:
65:4c:a0:3f:5e:b7:22:47:d7:97:11:a8:6b:1f:f7:18:fc:eb:
20:cc:c1:93:44:54:66:7e:ca:70:ad:bb:fe:03:c8:08:ef:e7:
63:b4:19:7f:bf:b0:11:20:f3:ea:a3:80:26:44:0f:53:d8:a1:
93:85:da:5e:c8:52:69:00:a5:06:8d:8d:1f:99:90:3b:2b:05:
43:23:96:b8:95:0b:53:d1:56:20:8b:ba:e3:53:d9:82:7b:df:
75:b9:64:4c:d7:42:2b:04:79:53:b9:62:02:3d:96:24:c4:32:
64:c0:61:ce:f6:b0:67:48:89:bb:53:9a:60:bb:77:08:3e:fb:
6e:e3:a0:9a:21:2d:75:6c:09:26:46:aa:dc:bb:42:3b:66:1c:
56:36:84:99:cf:9c:86:6b:db:27:65:49:c7:0e:5a:f3:39:17:
ab:83:06:56:7c:53:d2:e5:e4:da:9a:1c:29:7f:61:25:45:9b:
66:da:19:21:08:5c:70:a4:64:4c:97:a6:2f:38:9d:54:e4:45:
33:d5:8f:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9SBaO2kB1c30CIKRYxwQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMmExMjE3NjczZWIxMWNhOThhMzUxMzk1MjA0MDdjOTc2
OGRmYzMwHhcNMjYwNzI4MjMwMDE5WhcNMjYwNzI5MjMwMDE5WjAzMTEwLwYDVQQD
EyhjZWUzZjExNTNlYjMwZjNkYmE3NWJlZWU4MGM1YmEyMzVjYTMyMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUVOENntLgtY7ZFvWv3tPKfH5UHK
O4gJlfiYZE0FnPk+oCBukZzAmX11D9wwtIHG8U1Th5Cl7pJ29aRjSbT5UivxyK+g
fAlKNHqsOva5kgzQko8Py6Gdrja9XIE1jqbT1nksVQUgrajvpxn5o2Ige6E0TxX5
18gcLdN6Y3nyVfWtPb/3Joylp1hdwM6lpn8OZ08Q6Fx7rGdXi+z7zKqB96RSl/Gj
tud5jfnUi626rjuQEjvwkVaoNTI00kluyWBs/g1gXUt23R1ckmsal/yzhzCiwgJc
Da+w0MNZpYndRUXILKSqFI914q/azvmS+EF8I96liU1BvYTuchr0XmrL5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7j8RU+sw89unW+7oDFuiNcoyH3MB8GA1UdIwQY
MBaAFN0qEhdnPrEcqYo1E5UgQHyXaN/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1NvU0YyYy1zUnlwaWpVVGxTQkFmSmRvMzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80YTkzYzYtMTcwYS00YWEyLThkZmMt
NmI5NjQxODIzY2E0LzEvM1NvU0YyYy1zUnlwaWpVVGxTQkFmSmRvMzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS80YTkzYzYtMTcwYS00YWEyLThkZmMtNmI5NjQxODIzY2E0
LzEvM1NvU0YyYy1zUnlwaWpVVGxTQkFmSmRvMzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaakDiH/
wnwtb4Oot6peCeDBgPGi1FdErh63yydCXGOvRa2K5PagW4MFH9o0cYjY2PwOAvez
ZUygP163IkfXlxGoax/3GPzrIMzBk0RUZn7KcK27/gPICO/nY7QZf7+wESDz6qOA
JkQPU9ihk4XaXshSaQClBo2NH5mQOysFQyOWuJULU9FWIIu641PZgnvfdblkTNdC
KwR5U7liAj2WJMQyZMBhzvawZ0iJu1OaYLt3CD77buOgmiEtdWwJJkaq3LtCO2Yc
VjaEmc+chmvbJ2VJxw5a8zkXq4MGVnxT0uXk2pocKX9hJUWbZtoZIQhccKRkTJem
LzidVORFM9WPYw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:08:22 2026 by rpki-client