Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: IVlkIGjZ6F3XSketNbK3BK1HzgosN+L8qIMb845/TYg=
Subject key identifier: 08:24:AB:82:82:93:33:41:FA:5C:F6:66:F0:B1:3D:66:BB:EA:FB:F2
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 019FA93E68C7B704A0368FEBFE1F3D586B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: 03CC
Signing time: Tue 28 Jul 2026 15:01:07 +0000
Manifest this update: Tue 28 Jul 2026 15:01:07 +0000
Manifest next update: Wed 29 Jul 2026 15:01:07 +0000
Files and hashes: 1: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: TRwcyY1lSOda6id7PBjFNdd/tXUI4dXCAcAt2jyKN9E=)
2: k9k26h_wk2KwXBbexASmBckIdio.roa (hash: IkgLudWAy48LS7n3a0wG6CHVGFDidThlfHrJKCCT1wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:68:c7:b7:04:a0:36:8f:eb:fe:1f:3d:58:6b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Jul 28 15:01:07 2026 GMT
Not After : Jul 29 15:01:07 2026 GMT
Subject: CN=0824ab8282933341fa5cf666f0b13d66bbeafbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:0d:73:07:a4:ec:16:e7:ea:53:d2:90:6f:
d9:05:00:b0:e6:5e:f3:52:59:39:df:c1:50:71:ad:
1a:a0:e6:6d:86:6b:c7:7a:46:41:45:d2:82:0b:07:
0c:ba:20:40:31:58:a2:f6:33:2c:89:f6:ff:2a:1f:
6f:bb:e3:2f:51:45:c9:9c:62:0d:e6:83:b7:39:d3:
55:91:63:1d:c4:94:1c:5e:73:ba:eb:cf:9f:7f:3e:
c6:6d:d6:8b:4d:3c:e7:10:ef:db:af:e8:d4:ed:3d:
1d:10:34:a4:60:5a:25:b4:74:77:a1:67:c7:fe:6f:
a6:59:57:6f:42:ac:04:da:3f:ba:e6:e2:dd:c6:2a:
45:c4:b0:9a:71:52:96:02:28:a9:69:2b:8f:8c:98:
7a:53:b7:30:1f:e1:d0:7c:43:89:d8:52:1c:5e:b8:
9b:4c:39:37:17:7e:f4:d1:89:81:35:9e:f1:c2:62:
73:dc:ab:fa:d2:66:b1:8e:ef:fa:25:91:0d:2c:15:
52:9a:ad:1d:28:c3:4a:54:7a:9e:70:87:79:55:38:
16:f7:62:86:38:54:a4:25:eb:7a:11:b3:5c:c4:78:
46:01:b5:19:ce:21:5b:43:ae:5f:4b:76:10:91:11:
f0:39:7d:59:f2:28:fd:ce:fa:4e:08:2e:18:85:fc:
4e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:24:AB:82:82:93:33:41:FA:5C:F6:66:F0:B1:3D:66:BB:EA:FB:F2
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:68:cb:d1:c8:41:1f:c8:75:df:d7:d1:60:a3:7c:9e:35:65:
40:cf:4c:ac:66:1c:49:52:32:66:e9:dd:dc:23:93:4a:8c:49:
13:21:31:e7:e3:58:6c:d1:4f:3b:ea:b4:1f:66:5e:a5:9e:64:
8e:11:af:15:17:23:f9:11:52:1b:e0:93:92:40:31:73:e6:46:
e8:7d:49:9f:18:4a:55:ff:22:bd:46:80:a0:30:6f:01:f1:38:
9d:23:c5:4d:9b:b4:9e:09:7c:53:c3:06:5b:50:63:3e:b4:95:
b6:19:4b:de:b8:a9:a9:4f:13:34:22:75:e8:bd:bd:9f:62:ac:
ac:3b:4d:8c:ce:41:42:8c:05:5a:75:02:7a:69:72:46:c1:e9:
29:db:82:23:ea:e0:a3:46:df:76:b0:25:1e:af:db:0a:07:c6:
a2:22:be:7d:a5:85:71:f9:94:f5:3e:fc:7f:b3:e8:38:a4:c6:
e9:5f:3e:a4:99:77:28:df:93:8d:cd:a0:8d:6d:91:33:93:30:
ed:99:65:8f:51:89:72:4b:d2:85:48:77:c6:07:91:c5:66:1c:
84:6a:12:2b:27:01:b4:e4:4c:92:89:59:07:84:40:ec:20:fc:
57:fe:da:ec:66:66:5d:bc:05:52:bd:28:98:89:89:56:03:fa:
40:5b:fb:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPmjHtwSgNo/r/h89WGueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTQzN2JjYWQ5YmFjZmEzYjc2YjdkZDA0NTQxMzNmYjRk
OGNiM2UwHhcNMjYwNzI4MTUwMTA3WhcNMjYwNzI5MTUwMTA3WjAzMTEwLwYDVQQD
EygwODI0YWI4MjgyOTMzMzQxZmE1Y2Y2NjZmMGIxM2Q2NmJiZWFmYmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8sNcwek7Bbn6lPSkG/ZBQCw5l7z
Ulk538FQca0aoOZthmvHekZBRdKCCwcMuiBAMVii9jMsifb/Kh9vu+MvUUXJnGIN
5oO3OdNVkWMdxJQcXnO668+ffz7GbdaLTTznEO/br+jU7T0dEDSkYFoltHR3oWfH
/m+mWVdvQqwE2j+65uLdxipFxLCacVKWAiipaSuPjJh6U7cwH+HQfEOJ2FIcXrib
TDk3F3700YmBNZ7xwmJz3Kv60maxju/6JZENLBVSmq0dKMNKVHqecId5VTgW92KG
OFSkJet6EbNcxHhGAbUZziFbQ65fS3YQkRHwOX1Z8ij9zvpOCC4YhfxOgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgkq4KCkzNB+lz2ZvCxPWa76vvyMB8GA1UdIwQY
MBaAFP/kN7ytm6z6O3a33QRUEz+02Ms+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zZDQ4MjctM2YxNC00MzBlLTljZWUt
ZDEyMWM1YTc1ZDk4LzEvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8zZDQ4MjctM2YxNC00MzBlLTljZWUtZDEyMWM1YTc1ZDk4
LzEvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGjL0chB
H8h139fRYKN8njVlQM9MrGYcSVIyZund3COTSoxJEyEx5+NYbNFPO+q0H2ZepZ5k
jhGvFRcj+RFSG+CTkkAxc+ZG6H1JnxhKVf8ivUaAoDBvAfE4nSPFTZu0ngl8U8MG
W1BjPrSVthlL3ripqU8TNCJ16L29n2KsrDtNjM5BQowFWnUCemlyRsHpKduCI+rg
o0bfdrAlHq/bCgfGoiK+faWFcfmU9T78f7PoOKTG6V8+pJl3KN+Tjc2gjW2RM5Mw
7Zllj1GJckvShUh3xgeRxWYchGoSKycBtORMkolZB4RA7CD8V/7a7GZmXbwFUr0o
mImJVgP6QFv7qw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:24 2026 by rpki-client