Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: ZlXiXtbv2I0dY/bF3qZaw01M44p9oS3lJidBcxkKn7Y=
Subject key identifier: 7E:A9:25:C7:1D:3E:8B:DF:79:5C:47:88:70:37:78:3E:2C:02:5C:07
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 019FA90700538887916CFCAC0E22C329D629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 1965
Signing time: Tue 28 Jul 2026 14:00:35 +0000
Manifest this update: Tue 28 Jul 2026 14:00:35 +0000
Manifest next update: Wed 29 Jul 2026 14:00:35 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: 77sVc3HS0T66G5I6zzdsGlDNVyc22D9da5VY3XS+LVo=)
2: w3_eDrVHUYCcKtbza7c41NLDYIM.roa (hash: IPJ09SAjboh4Vep0OkCZipCIUFqGArpEx9t2oIDtFc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:00:53:88:87:91:6c:fc:ac:0e:22:c3:29:d6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Jul 28 14:00:35 2026 GMT
Not After : Jul 29 14:00:35 2026 GMT
Subject: CN=7ea925c71d3e8bdf795c47887037783e2c025c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:c4:5a:23:88:c3:7a:74:07:ad:f4:ce:b0:
8f:e3:e8:66:72:fa:e2:ab:08:7f:37:63:bb:ec:49:
b6:48:f7:b0:73:c0:0b:d1:be:6c:29:5e:70:2f:66:
c8:34:2f:ab:d3:ee:53:53:b1:97:04:6a:3f:39:a1:
3b:e4:97:74:46:ed:7d:04:36:27:e0:1e:e5:00:74:
9e:88:3f:53:90:a4:3f:54:6e:22:c7:f0:72:5d:d9:
ab:ae:3e:a2:8c:e1:ab:35:4b:8d:b1:d6:cd:09:e5:
f4:af:2f:ea:d4:6f:3d:e1:27:1c:b2:a5:fd:95:46:
b7:3e:e2:1f:33:2c:f9:0a:ed:b9:fd:a9:b0:54:c6:
fc:fb:27:4c:d1:d8:1f:35:63:11:1f:31:0f:98:65:
90:06:3b:8d:5a:61:aa:88:63:1d:1b:84:46:03:b5:
e1:3c:43:f2:80:ea:0d:66:83:0d:7d:68:30:d9:64:
cb:b5:d1:46:19:56:32:75:04:36:f7:df:f1:ce:77:
c5:45:76:9c:58:f2:6e:ec:e5:b0:78:3f:fc:1d:b4:
4d:12:23:6b:17:5c:85:83:8f:c4:c6:06:42:45:80:
c7:31:82:1e:7d:3e:3b:82:be:b4:cd:44:55:9f:af:
e6:55:a5:c9:ee:b6:82:c7:53:db:f5:a9:2a:e0:ab:
73:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A9:25:C7:1D:3E:8B:DF:79:5C:47:88:70:37:78:3E:2C:02:5C:07
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:42:97:89:98:54:b0:9e:3d:d0:4a:b6:b2:aa:13:eb:e1:b5:
f0:b1:0e:87:64:d4:47:46:1e:62:a1:68:63:eb:4f:6d:b2:cd:
80:c0:97:f6:68:7e:df:f2:1e:f9:60:3f:e9:80:32:ee:24:f2:
20:db:ae:67:96:93:e6:ad:3f:29:5c:32:93:8f:da:3c:55:36:
80:fe:1c:71:3f:5b:9c:69:74:35:28:cc:49:c6:47:a8:40:1c:
1e:b0:01:24:cc:30:4a:8a:f8:90:34:b0:ae:87:63:38:3c:45:
4e:da:62:46:11:24:f9:0c:bf:f1:5f:a2:08:68:66:16:b6:37:
10:07:70:b0:fa:dc:53:4d:eb:5e:bc:eb:6a:32:31:e1:c1:fc:
f3:4d:1a:28:08:75:72:02:f9:70:dd:17:24:a5:66:d1:f6:ac:
a4:8b:04:29:6a:00:4e:82:bc:7e:20:a0:29:5d:0d:40:31:32:
bd:5e:8b:cf:6f:f7:3e:fb:a4:e4:e0:e8:cd:a0:22:02:87:a8:
c8:9b:2e:57:3f:dd:ab:d0:b6:1a:79:ec:80:8e:e8:1d:39:3d:
b6:71:4e:22:e4:5e:da:92:d2:fe:42:df:3a:49:d4:9f:31:78:
00:2a:47:09:e5:8d:32:39:fc:56:e4:9e:fd:1f:28:e4:67:0d:
87:1d:91:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBwBTiIeRbPysDiLDKdYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTVlYzE3NWY2ZWU3YTFmYzFmODlhZGY3NTRiYjJhMDg2
MjU3OGEwHhcNMjYwNzI4MTQwMDM1WhcNMjYwNzI5MTQwMDM1WjAzMTEwLwYDVQQD
Eyg3ZWE5MjVjNzFkM2U4YmRmNzk1YzQ3ODg3MDM3NzgzZTJjMDI1YzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKDEWiOIw3p0B630zrCP4+hmcvri
qwh/N2O77Em2SPewc8AL0b5sKV5wL2bINC+r0+5TU7GXBGo/OaE75Jd0Ru19BDYn
4B7lAHSeiD9TkKQ/VG4ix/ByXdmrrj6ijOGrNUuNsdbNCeX0ry/q1G894SccsqX9
lUa3PuIfMyz5Cu25/amwVMb8+ydM0dgfNWMRHzEPmGWQBjuNWmGqiGMdG4RGA7Xh
PEPygOoNZoMNfWgw2WTLtdFGGVYydQQ299/xznfFRXacWPJu7OWweD/8HbRNEiNr
F1yFg4/ExgZCRYDHMYIefT47gr60zURVn6/mVaXJ7raCx1Pb9akq4KtzmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6pJccdPovfeVxHiHA3eD4sAlwHMB8GA1UdIwQY
MBaAFN1V7Bdfbueh/B+JrfdUuyoIYleKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80MGQ0MDctMWVhYy00MzgxLThmYTYt
NDZjMmNjMjgwMmYxLzEvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80MGQ0MDctMWVhYy00MzgxLThmYTYtNDZjMmNjMjgwMmYx
LzEvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApkKXiZhU
sJ490Eq2sqoT6+G18LEOh2TUR0YeYqFoY+tPbbLNgMCX9mh+3/Ie+WA/6YAy7iTy
INuuZ5aT5q0/KVwyk4/aPFU2gP4ccT9bnGl0NSjMScZHqEAcHrABJMwwSor4kDSw
rodjODxFTtpiRhEk+Qy/8V+iCGhmFrY3EAdwsPrcU03rXrzrajIx4cH8800aKAh1
cgL5cN0XJKVm0faspIsEKWoAToK8fiCgKV0NQDEyvV6Lz2/3Pvuk5ODozaAiAoeo
yJsuVz/dq9C2GnnsgI7oHTk9tnFOIuRe2pLS/kLfOknUnzF4ACpHCeWNMjn8VuSe
/R8o5GcNhx2RcQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:14 2026 by rpki-client