Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
File: 3dStS_QUF7o4OE1lvC0HwPaFCeE.mft (raw, json)
Hash identifier: bkY1ey1XK9s9UUE+Y8bhMfxpx38k0rdDDtIQWUykFd4=
Subject key identifier: 93:DA:D7:E3:EB:30:87:EB:6F:6A:24:1D:67:0D:16:3C:2E:F2:24:5A
Authority key identifier: DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
Certificate issuer: /CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
Certificate serial: 019FA8996D227065E548CC955562438AED7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
Manifest number: 1963
Signing time: Tue 28 Jul 2026 12:00:54 +0000
Manifest this update: Tue 28 Jul 2026 12:00:54 +0000
Manifest next update: Wed 29 Jul 2026 12:00:54 +0000
Files and hashes: 1: 3dStS_QUF7o4OE1lvC0HwPaFCeE.crl (hash: eCuOrI5qw4fJ5GrrD9JNkiDRsfKffLGmW2NnZkJBqWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:6d:22:70:65:e5:48:cc:95:55:62:43:8a:ed:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
Validity
Not Before: Jul 28 12:00:54 2026 GMT
Not After : Jul 29 12:00:54 2026 GMT
Subject: CN=93dad7e3eb3087eb6f6a241d670d163c2ef2245a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:8a:4e:74:c4:16:11:92:5a:39:64:48:fd:
10:12:b5:7d:4d:7c:fe:b3:fe:d9:1e:57:bb:7d:f5:
5a:f6:ab:73:96:ac:ed:16:b8:e5:84:37:98:f1:e9:
45:42:d0:af:b5:ae:27:e5:f4:47:59:e9:44:5a:16:
0b:59:e4:26:e2:87:90:de:ab:e9:18:1b:09:f4:bb:
56:a6:f4:40:67:af:e6:2a:dc:fd:ee:9c:f2:cd:c3:
50:b7:0b:7a:ac:45:1c:53:07:fb:8d:ce:6b:7d:cd:
96:a0:58:9b:79:b1:cb:04:88:b8:b2:73:bb:de:d4:
c4:79:f1:25:81:24:e6:c0:20:09:18:23:a8:de:63:
03:32:57:e6:cf:3a:b0:cc:b4:ac:73:3d:64:9f:ad:
34:4d:23:1a:84:6f:03:5d:05:44:09:41:80:17:4e:
93:14:9f:a9:04:d4:eb:fd:e2:1e:4a:ff:26:fc:b7:
64:be:ff:94:60:39:9d:45:ca:5b:e2:11:c0:58:f6:
ea:8d:03:4b:d5:2a:1e:52:04:f9:64:06:3f:08:59:
16:3c:3c:59:2a:61:be:29:d4:2f:d3:83:7d:e7:66:
ea:ba:83:a3:03:7d:fe:c7:09:99:12:95:3a:92:58:
9e:c9:21:58:ee:eb:e4:72:fe:85:7b:8d:59:53:4f:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DA:D7:E3:EB:30:87:EB:6F:6A:24:1D:67:0D:16:3C:2E:F2:24:5A
X509v3 Authority Key Identifier:
keyid:DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:86:dd:ef:06:b7:d8:6d:fa:99:97:e0:b9:9d:ca:88:f8:47:
3a:56:05:2d:5b:18:21:c7:85:52:dd:c8:7a:6e:cc:9e:8c:c0:
72:92:d8:31:23:e6:62:e9:c6:a2:4d:b9:7f:f3:50:30:06:d6:
00:d3:f3:0e:97:05:1b:a3:c0:40:68:ab:c2:de:45:a7:47:e3:
33:96:42:f3:ea:f4:3a:3b:bd:47:60:08:65:05:df:f1:60:6e:
52:eb:67:17:2f:32:74:80:d3:3c:f0:3e:9d:8f:e1:24:7f:61:
78:81:46:6c:2c:c7:6f:7f:60:54:6c:6e:e9:89:c0:2f:a6:68:
96:e0:a4:18:4b:2d:26:0d:ed:42:b5:6b:e9:4f:84:3c:b0:92:
dd:1d:33:1f:33:7a:58:7b:36:13:94:d4:08:26:11:d2:2f:37:
7e:d3:b5:98:e8:71:5e:10:09:e8:a2:45:b6:92:7f:f0:b8:43:
b1:5c:9c:6f:b8:62:14:6d:f5:85:12:d8:11:83:f0:90:ae:c6:
05:83:ed:9f:aa:f5:6d:d3:1d:23:12:53:93:82:86:08:42:14:
d6:a7:56:25:bf:a6:8d:b0:a3:3f:b3:8d:44:c2:07:05:93:81:
88:18:6f:98:a3:bf:7d:06:24:b6:fa:08:50:49:87:cd:45:65:
d2:46:2d:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omW0icGXlSMyVVWJDiu1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZDRhZDRiZjQxNDE3YmEzODM4NGQ2NWJjMmQwN2MwZjY4
NTA5ZTEwHhcNMjYwNzI4MTIwMDU0WhcNMjYwNzI5MTIwMDU0WjAzMTEwLwYDVQQD
Eyg5M2RhZDdlM2ViMzA4N2ViNmY2YTI0MWQ2NzBkMTYzYzJlZjIyNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFqKTnTEFhGSWjlkSP0QErV9TXz+
s/7ZHle7ffVa9qtzlqztFrjlhDeY8elFQtCvta4n5fRHWelEWhYLWeQm4oeQ3qvp
GBsJ9LtWpvRAZ6/mKtz97pzyzcNQtwt6rEUcUwf7jc5rfc2WoFibebHLBIi4snO7
3tTEefElgSTmwCAJGCOo3mMDMlfmzzqwzLSscz1kn600TSMahG8DXQVECUGAF06T
FJ+pBNTr/eIeSv8m/Ldkvv+UYDmdRcpb4hHAWPbqjQNL1SoeUgT5ZAY/CFkWPDxZ
KmG+KdQv04N952bquoOjA33+xwmZEpU6klieySFY7uvkcv6Fe41ZU09sZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPa1+PrMIfrb2okHWcNFjwu8iRaMB8GA1UdIwQY
MBaAFN3UrUv0FBe6ODhNZbwtB8D2hQnhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2RTdFNfUVVGN280T0UxbHZDMEh3UGFGQ2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wOTQ5NjktMTNlZC00YzE0LTg1NzUt
N2JjOGMyMGEyMzVhLzEvM2RTdFNfUVVGN280T0UxbHZDMEh3UGFGQ2VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wOTQ5NjktMTNlZC00YzE0LTg1NzUtN2JjOGMyMGEyMzVh
LzEvM2RTdFNfUVVGN280T0UxbHZDMEh3UGFGQ2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAobd7wa3
2G36mZfguZ3KiPhHOlYFLVsYIceFUt3Iem7MnozAcpLYMSPmYunGok25f/NQMAbW
ANPzDpcFG6PAQGirwt5Fp0fjM5ZC8+r0Oju9R2AIZQXf8WBuUutnFy8ydIDTPPA+
nY/hJH9heIFGbCzHb39gVGxu6YnAL6ZoluCkGEstJg3tQrVr6U+EPLCS3R0zHzN6
WHs2E5TUCCYR0i83ftO1mOhxXhAJ6KJFtpJ/8LhDsVycb7hiFG31hRLYEYPwkK7G
BYPtn6r1bdMdIxJTk4KGCEIU1qdWJb+mjbCjP7ONRMIHBZOBiBhvmKO/fQYktvoI
UEmHzUVl0kYt1A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:37 2026 by rpki-client