
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier: bqUuX7m6usiKvmPziieFGfZYgDiGdl7+YTprP+9+ZH0=
Subject key identifier: 01:74:07:DF:21:BD:C7:3D:BC:73:23:CD:64:76:93:02:49:93:B1:99
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 019FA9AC2304C93FA1FDF51DECB06AD51FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number: 0A4B
Signing time: Tue 28 Jul 2026 17:00:58 +0000
Manifest this update: Tue 28 Jul 2026 17:00:58 +0000
Manifest next update: Wed 29 Jul 2026 17:00:58 +0000
Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: dm9IlxJEdBrZpX/Dbwz2rrVn/JtxPzZQpeQu5k70wvg=)
2: fI5jVmmy88-mIgPso0R_tYbnmK8.roa (hash: DZgFgnCe+GlazLWeguoKXJElQSdORsAcJbygFhHnVCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:23:04:c9:3f:a1:fd:f5:1d:ec:b0:6a:d5:1f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: Jul 28 17:00:58 2026 GMT
Not After : Jul 29 17:00:58 2026 GMT
Subject: CN=017407df21bdc73dbc7323cd647693024993b199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:f3:ec:62:79:76:4c:b8:56:d3:cf:29:7a:
51:8d:d4:1b:e5:22:18:7b:88:1c:96:98:d4:b3:7a:
09:38:01:80:7c:86:1c:49:2b:26:8e:cf:96:64:41:
b8:2d:64:e0:37:29:eb:f2:d7:8c:33:b4:83:a7:07:
32:c9:38:fc:de:57:66:24:91:14:4f:1e:7a:6e:9d:
8d:95:b8:da:62:eb:bb:7c:1e:01:d2:69:32:22:f5:
b0:e8:71:3f:ea:98:dd:c0:79:57:06:a0:cc:a1:54:
bc:d9:38:ea:96:c9:8c:66:fa:5a:fa:6a:ba:2c:d4:
4c:4c:30:30:b2:7b:75:43:df:fb:32:f3:1e:94:24:
f7:5c:6e:d3:05:dc:43:36:46:6b:bc:ca:19:88:91:
80:46:a3:00:2e:87:2c:be:f1:7e:23:cc:97:d0:36:
b2:47:50:5a:46:2a:26:b9:0a:a1:ce:7c:43:87:9d:
bb:e5:9c:75:88:df:83:f8:b1:16:ab:38:4e:db:ef:
e0:88:60:37:f2:25:e4:12:94:c3:45:bf:ee:9d:0e:
bb:ff:e1:7f:3b:d8:c1:60:25:8e:22:7c:ed:22:ee:
3b:3d:7b:09:19:36:c5:ae:c7:a3:00:b9:33:d6:62:
3c:2d:da:a4:ae:5e:11:90:03:82:5f:bf:d4:8d:cc:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:74:07:DF:21:BD:C7:3D:BC:73:23:CD:64:76:93:02:49:93:B1:99
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c1:80:35:72:e0:45:bb:5e:ae:e6:3e:51:06:c8:50:27:6c:
26:09:71:39:41:bc:33:40:e5:2a:93:bf:07:02:37:3e:50:5a:
01:43:22:b2:83:83:ec:51:b0:e8:a1:09:1a:71:3a:8c:06:6e:
71:7a:76:16:bb:c3:ab:54:7a:ae:2e:8e:e0:e3:c0:3e:24:d6:
f8:be:89:8e:75:63:ed:07:8d:6d:2f:fd:ee:90:79:b1:57:f4:
d9:54:55:14:68:3f:87:cd:3b:a1:37:84:f2:23:e8:af:13:49:
bb:d2:85:7e:a5:43:91:43:47:52:09:ad:54:db:6f:45:6b:ca:
31:62:75:cd:41:ec:06:cd:33:c8:b4:c1:06:d5:b9:32:7f:96:
ed:6b:ab:e5:91:71:96:09:69:08:0d:44:b3:43:8f:c1:63:ba:
8f:6b:9b:5d:f0:71:a4:92:96:40:f6:cf:a0:f9:d6:8b:ed:64:
05:6c:4e:5d:b2:20:c7:7e:8e:84:b5:33:5c:33:a9:a1:71:89:
84:5f:94:93:9b:09:8b:24:8c:90:0f:8c:5e:ee:01:5c:a2:b5:
eb:52:f6:0f:55:43:24:26:14:a4:a9:f4:a6:27:d1:1c:20:fd:
07:fa:55:4d:9b:a2:23:bc:69:8c:ef:52:92:2d:0f:5b:63:4a:
35:5a:19:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prCMEyT+h/fUd7LBq1R//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDNlYTJjZDA3OTk3ZWNkZmUxNzE4ODg3MjcwODY1MmUx
NzJkZjIwHhcNMjYwNzI4MTcwMDU4WhcNMjYwNzI5MTcwMDU4WjAzMTEwLwYDVQQD
EygwMTc0MDdkZjIxYmRjNzNkYmM3MzIzY2Q2NDc2OTMwMjQ5OTNiMTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq3z7GJ5dky4VtPPKXpRjdQb5SIY
e4gclpjUs3oJOAGAfIYcSSsmjs+WZEG4LWTgNynr8teMM7SDpwcyyTj83ldmJJEU
Tx56bp2NlbjaYuu7fB4B0mkyIvWw6HE/6pjdwHlXBqDMoVS82TjqlsmMZvpa+mq6
LNRMTDAwsnt1Q9/7MvMelCT3XG7TBdxDNkZrvMoZiJGARqMALocsvvF+I8yX0Day
R1BaRiomuQqhznxDh5275Zx1iN+D+LEWqzhO2+/giGA38iXkEpTDRb/unQ67/+F/
O9jBYCWOInztIu47PXsJGTbFrsejALkz1mI8Ldqkrl4RkAOCX7/UjczEgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAF0B98hvcc9vHMjzWR2kwJJk7GZMB8GA1UdIwQY
MBaAFNxD6izQeZfs3+FxiIcnCGUuFy3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZmU3NmEtYWI4MS00MmE0LWFlY2Yt
NDQ2NDRkZDVlZDQ0LzEvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80ZmU3NmEtYWI4MS00MmE0LWFlY2YtNDQ2NDRkZDVlZDQ0
LzEvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcGANXLg
RbteruY+UQbIUCdsJglxOUG8M0DlKpO/BwI3PlBaAUMisoOD7FGw6KEJGnE6jAZu
cXp2FrvDq1R6ri6O4OPAPiTW+L6JjnVj7QeNbS/97pB5sVf02VRVFGg/h807oTeE
8iPorxNJu9KFfqVDkUNHUgmtVNtvRWvKMWJ1zUHsBs0zyLTBBtW5Mn+W7Wur5ZFx
lglpCA1Es0OPwWO6j2ubXfBxpJKWQPbPoPnWi+1kBWxOXbIgx36OhLUzXDOpoXGJ
hF+Uk5sJiySMkA+MXu4BXKK161L2D1VDJCYUpKn0pifRHCD9B/pVTZuiI7xpjO9S
ki0PW2NKNVoZjw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:19 2026 by rpki-client