Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
File: 3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json)
Hash identifier: JPNHFxGk2cy8W7R506gYisgbuCriwIgGAy1D2Lyi7gk=
Subject key identifier: 8A:57:96:46:36:43:C7:DA:8C:D2:75:C0:90:D6:D1:72:66:15:85:66
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 01A0C557A5614C1675D54896E506B87D6755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
Manifest number: 19D5
Signing time: Mon 21 Sep 2026 19:00:50 +0000
Manifest this update: Mon 21 Sep 2026 19:00:50 +0000
Manifest next update: Tue 22 Sep 2026 19:00:50 +0000
Files and hashes: 1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: K6AWgDu9YWRM0UHohBhgSVe0g9CBsdEeMxUi3YT61rg=)
2: 7UD9mSTFV8lFN4ROehlHuZ5VKzk.roa (hash: 7/SDaPbxGJSgvje7ZyVfzpaTxUzpeca2cxXLtLcUMNc=)
3: 7a7gQ0jMpW-HO4za2DSP0ZKISJE.roa (hash: McFAl/WKQX0xi1vS74G9WytOjkgqYbIf6IQeiu/SBtE=)
4: WNlY6EleMRRBrp6sZUEH7DxvZlc.roa (hash: dLCuSMcuIVzwoKSwK9PkR1g78fv8OGI64PcrszyfgyA=)
5: ekV3uRphNew5aOcMQo-s8iHH-AY.roa (hash: FE+IQctGJcO3sSaP7HNmckkGvxU4kU9yBANBqpeU4lI=)
6: f4_ZJ0TCTzsSkqudnJSIXp4bLQ0.roa (hash: W6ac4Me1PrNz+AfdrWTNIVyjCCLobhnKb0ISiPAW2p8=)
7: nWay-kjM-uXQonlEIzksgPJ2hIY.roa (hash: QNv+cuZE5AYtfPUCgiQFK8fsilnJCXuMMkCSBo7INTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:a5:61:4c:16:75:d5:48:96:e5:06:b8:7d:67:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Sep 21 19:00:50 2026 GMT
Not After : Sep 22 19:00:50 2026 GMT
Subject: CN=8a5796463643c7da8cd275c090d6d17266158566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:62:c9:bb:d6:07:83:3d:b8:46:79:6b:f2:ee:
1f:17:0c:bb:04:14:6d:07:00:20:6e:7f:4b:ea:6c:
fd:b6:dd:a6:00:70:0c:36:55:c9:bb:6d:2b:e2:c2:
2d:a0:08:c7:28:7f:7d:6e:72:2e:23:f7:e7:7f:93:
d9:d0:b8:6b:81:14:15:82:78:45:1e:ff:7c:d4:79:
27:06:6d:93:2d:6f:e2:21:4e:5c:e7:ed:aa:34:fb:
02:29:d4:5c:ae:56:0f:44:c6:57:4f:29:85:d1:90:
c5:7f:b5:fe:03:51:eb:a7:61:1b:c6:26:17:69:d8:
2e:58:53:84:9b:6b:0d:2a:bf:58:4d:c3:2e:25:47:
9a:62:9e:8f:cf:39:57:fc:2c:92:7a:06:17:18:ce:
93:9e:90:60:f0:8b:87:72:c4:19:6d:29:0a:ef:0d:
97:bf:6f:a1:4e:da:e8:ab:68:79:0e:93:18:06:74:
a1:de:6f:3f:16:13:13:96:c5:4d:72:41:5f:2f:86:
e5:2a:34:0c:d0:3e:26:a4:ad:16:dc:63:b6:bb:58:
a9:30:a9:4a:a8:92:86:5e:4b:3f:a6:c3:1c:4b:63:
a3:d3:16:ad:d1:4b:ed:de:76:92:df:bf:33:37:dd:
2f:23:91:69:bb:f9:c6:49:4f:23:23:94:15:13:05:
c6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:57:96:46:36:43:C7:DA:8C:D2:75:C0:90:D6:D1:72:66:15:85:66
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f6:66:41:df:4b:de:cd:fc:96:17:3c:84:ac:18:0c:f0:f2:
f6:8c:d0:ee:70:6f:7e:1d:f1:ab:98:db:2f:cb:60:69:2c:c3:
33:56:9b:7b:fc:b0:6d:8b:aa:2e:19:1a:7b:e4:2e:dc:8a:d4:
01:eb:32:70:19:90:15:1d:8a:7c:40:36:9c:c3:49:f6:4f:29:
96:d7:78:4d:27:0a:f1:4a:a5:d4:94:f4:92:e8:29:86:53:e4:
01:7f:e0:71:7c:a6:e1:25:15:8f:4f:6e:25:c7:f4:66:62:79:
77:d2:08:ae:f4:fb:b0:aa:f2:35:ee:cc:46:25:da:06:1d:98:
45:eb:5e:91:cb:77:5c:e6:b0:71:d4:6e:5e:31:11:db:80:d6:
87:5e:22:e0:c3:9a:10:87:98:22:47:02:62:74:03:1a:c3:1e:
c0:19:f3:b9:f6:61:54:08:56:35:4a:c2:ae:83:4c:d7:38:3f:
95:fe:99:1b:e9:d7:cc:73:5d:20:7a:84:99:74:5f:20:75:a5:
65:b2:30:d0:cb:8b:55:3a:35:37:42:14:db:2d:55:30:1a:b8:
20:11:d6:03:f9:ca:2c:2a:f1:8b:3b:4f:4b:ef:3c:25:5a:c2:
f2:ad:b7:da:b4:7a:7e:4f:19:14:aa:26:e3:29:80:30:ca:09:
79:a5:2d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:48:12 2026 by rpki-client