Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: xmJ1Ectv81TPpMTdE6qgdyqQSx16q0dOrDcN13A0QTk=
Subject key identifier: D2:AE:4A:34:61:FA:C5:D8:D9:B1:E6:8B:10:52:96:B9:1D:54:8E:40
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 019FA93E682E40B75541D01B6C5D78F3AF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 1317
Signing time: Tue 28 Jul 2026 15:01:07 +0000
Manifest this update: Tue 28 Jul 2026 15:01:07 +0000
Manifest next update: Wed 29 Jul 2026 15:01:07 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: 6pGjj89Cp4c75KHNZx+jA1QxoUlMmiKDiI1tKD+KFaY=)
2: XOAJzQ9VwXh6TB5qa8PPijbh2aU.roa (hash: M8IPys/5UHBrIndSXlL2fp5Vz45fcZszjNzRdsRKs8k=)
3: wGffXotQutM5YPxgbpljeS3a9Gg.roa (hash: mICd/WsUOrkWcP68fCHD3+9zyqzcoi13I1Pp/yVs0e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:68:2e:40:b7:55:41:d0:1b:6c:5d:78:f3:af:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Jul 28 15:01:07 2026 GMT
Not After : Jul 29 15:01:07 2026 GMT
Subject: CN=d2ae4a3461fac5d8d9b1e68b105296b91d548e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:b4:02:da:f8:62:1a:1b:38:c9:bf:8d:e1:
d1:42:ca:62:e5:81:5f:20:75:c9:e2:31:f0:40:91:
f9:06:33:c2:16:50:5f:63:75:ac:f5:e8:2d:77:56:
75:4d:57:7f:32:66:74:ba:01:6f:10:54:80:d7:16:
7a:b2:51:01:97:5f:c4:8d:75:e1:0a:1a:9b:e2:24:
d9:28:b0:c4:e8:39:27:c8:9a:75:fe:58:d5:25:43:
8e:ba:4a:43:60:46:9f:42:e7:aa:2b:60:ca:f5:d7:
d2:e2:b5:1a:2d:b4:c9:09:6b:be:bc:ef:a8:24:59:
f4:28:4d:11:50:5c:c8:85:ed:c0:e3:fd:ce:20:d2:
28:44:6d:c0:0d:b4:26:2d:d6:3d:8c:75:3d:4a:9d:
cb:cd:f7:20:7b:b8:92:e0:19:4b:73:6e:6c:6b:77:
62:43:d6:27:89:3a:2a:67:62:f6:41:d9:f9:af:7e:
01:97:02:88:ec:d0:97:4f:a2:cd:db:74:a0:d6:2c:
9e:f4:56:ab:e5:4a:21:55:f5:c6:03:4b:4d:c3:a8:
cc:2a:e8:db:52:79:33:18:2e:b6:7c:84:d1:ac:a2:
4d:25:87:fd:f3:9c:71:e2:65:66:33:2d:50:18:d0:
f0:1e:ac:38:0c:f2:f8:f4:70:ab:f6:bc:0a:12:e5:
05:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AE:4A:34:61:FA:C5:D8:D9:B1:E6:8B:10:52:96:B9:1D:54:8E:40
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:40:5c:ee:b9:aa:c1:af:cc:92:4b:ff:7d:0d:d3:66:fe:7f:
94:15:b8:5e:b4:58:02:c9:55:2f:bb:f1:bd:83:8b:50:9d:8c:
5c:e7:3b:1d:05:9d:73:31:1e:d0:1c:5a:f1:ff:ac:21:43:ba:
90:3d:47:1e:21:7d:6f:95:fc:51:b4:eb:5e:1a:b0:ec:c2:b1:
84:83:2b:3c:8f:c3:57:36:8c:97:d2:23:4c:83:fd:4d:b5:32:
e7:d1:ed:03:26:e6:9f:21:fd:9d:fb:82:1e:b4:12:2f:4b:3e:
fe:d4:7b:ae:a5:ae:f9:d2:75:66:ff:02:b3:41:16:b0:9e:14:
b1:fa:bd:84:7f:f8:61:f1:04:5f:ae:5e:c0:e8:dc:fc:73:8e:
ff:98:59:4a:48:8d:eb:00:f0:d6:05:b9:08:44:4d:07:b0:1b:
20:44:8d:ea:e9:5b:77:fb:20:39:9b:d5:59:f4:10:ee:55:57:
83:9b:fe:2b:aa:8a:3a:8f:26:76:68:fe:ae:c9:59:5d:24:a2:
6a:a6:86:46:d2:e1:23:db:1e:ae:8a:0c:4e:6f:7a:f3:8e:c8:
20:46:7c:66:8a:43:2c:1e:07:3d:24:78:43:2b:ea:1b:b6:7b:
e6:51:14:93:0b:c6:a4:20:b2:81:5f:c9:4a:21:bc:68:a8:f5:
50:ff:ee:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPmguQLdVQdAbbF14869OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZTM2ZTk4MDIxMjY0ZjVhODA3MDEwNjc4MGJlMjlkNDhh
MTZjNjcwHhcNMjYwNzI4MTUwMTA3WhcNMjYwNzI5MTUwMTA3WjAzMTEwLwYDVQQD
EyhkMmFlNGEzNDYxZmFjNWQ4ZDliMWU2OGIxMDUyOTZiOTFkNTQ4ZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJO0Atr4YhobOMm/jeHRQspi5YFf
IHXJ4jHwQJH5BjPCFlBfY3Ws9egtd1Z1TVd/MmZ0ugFvEFSA1xZ6slEBl1/EjXXh
Chqb4iTZKLDE6DknyJp1/ljVJUOOukpDYEafQueqK2DK9dfS4rUaLbTJCWu+vO+o
JFn0KE0RUFzIhe3A4/3OINIoRG3ADbQmLdY9jHU9Sp3Lzfcge7iS4BlLc25sa3di
Q9YniToqZ2L2Qdn5r34BlwKI7NCXT6LN23Sg1iye9Far5UohVfXGA0tNw6jMKujb
UnkzGC62fITRrKJNJYf985xx4mVmMy1QGNDwHqw4DPL49HCr9rwKEuUF2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKuSjRh+sXY2bHmixBSlrkdVI5AMB8GA1UdIwQY
MBaAFN3jbpgCEmT1qAcBBngL4p1IoWxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2VOdW1BSVNaUFdvQndFR2VBdmluVWloYkdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NmFlZTEtZTIyMC00ZTIyLTljYjUt
OGZlM2EwZjYxNDM3LzEvM2VOdW1BSVNaUFdvQndFR2VBdmluVWloYkdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83NmFlZTEtZTIyMC00ZTIyLTljYjUtOGZlM2EwZjYxNDM3
LzEvM2VOdW1BSVNaUFdvQndFR2VBdmluVWloYkdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUBc7rmq
wa/Mkkv/fQ3TZv5/lBW4XrRYAslVL7vxvYOLUJ2MXOc7HQWdczEe0Bxa8f+sIUO6
kD1HHiF9b5X8UbTrXhqw7MKxhIMrPI/DVzaMl9IjTIP9TbUy59HtAybmnyH9nfuC
HrQSL0s+/tR7rqWu+dJ1Zv8Cs0EWsJ4Usfq9hH/4YfEEX65ewOjc/HOO/5hZSkiN
6wDw1gW5CERNB7AbIESN6ulbd/sgOZvVWfQQ7lVXg5v+K6qKOo8mdmj+rslZXSSi
aqaGRtLhI9serooMTm96847IIEZ8ZopDLB4HPSR4QyvqG7Z75lEUkwvGpCCygV/J
SiG8aKj1UP/u1Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:11:50 2026 by rpki-client