Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
File: 3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft (raw, json)
Hash identifier: B1G+deip+0mR+vFB60P7ryj2AgDdqnh6iZdBoJetTWg=
Subject key identifier: B7:3B:49:CC:E2:DC:27:AD:DC:D7:0E:E1:A0:24:73:C8:21:09:9D:EE
Authority key identifier: DC:98:98:EC:BA:C7:DD:B3:9B:20:EA:99:B0:38:D2:6C:46:A8:24:D4
Certificate issuer: /CN=dc9898ecbac7ddb39b20ea99b038d26c46a824d4
Certificate serial: 019FA89912347AEFE744406398F3CBF36B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:31 +0000
Manifest this update: Tue 28 Jul 2026 12:00:31 +0000
Manifest next update: Wed 29 Jul 2026 12:00:31 +0000
Files and hashes: 1: 3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl (hash: 8Wvi/6Yu9jVGDrVxhFd+GgKTrFA1NqdxVXZfFfXNDKE=)
2: lGfDr1-zqft5sxdN3ZBuxYLpJQ8.roa (hash: HUobi3hV3dki/qkxRm+DIA0moIcySUJXJvx1G//m6cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:12:34:7a:ef:e7:44:40:63:98:f3:cb:f3:6b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc9898ecbac7ddb39b20ea99b038d26c46a824d4
Validity
Not Before: Jul 28 12:00:31 2026 GMT
Not After : Jul 29 12:00:31 2026 GMT
Subject: CN=b73b49cce2dc27addcd70ee1a02473c821099dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:38:87:67:da:28:03:e8:2b:c3:bc:60:d9:
b9:b3:62:43:8a:19:d9:d8:18:2b:18:e4:96:b9:14:
97:9d:c1:2a:dc:6b:d7:29:f8:68:96:cc:51:9f:8e:
b3:2c:ee:8a:f4:31:9c:4b:36:b4:38:96:19:0e:8a:
29:7d:2b:38:29:a1:93:81:cd:3c:bf:44:69:2d:a3:
e2:cc:5c:3e:5e:29:25:c4:4b:18:63:cb:12:bf:cb:
fd:f8:3b:aa:c4:4c:1e:46:db:74:19:64:7d:17:b3:
23:78:8f:09:51:67:9b:e9:1d:cd:a0:0c:66:0a:fc:
5b:21:7b:c9:2d:72:a2:33:db:da:9a:fa:b6:ec:56:
06:e6:70:da:ad:ca:33:e5:db:07:89:88:12:37:45:
4e:79:06:30:14:ab:46:e8:dc:fb:0b:80:f1:4f:36:
50:4f:b1:84:a9:ee:8a:71:cd:42:64:73:d9:4d:13:
12:80:8f:36:05:af:68:bb:f0:63:1a:e1:d5:e0:03:
ce:04:25:16:14:36:09:00:40:2d:7a:4e:a3:1b:d2:
2d:4f:7a:d1:9d:7f:6b:61:f0:44:d5:81:68:d1:80:
c2:39:2f:2f:4d:69:dd:02:8b:84:15:0c:bc:36:49:
1f:b7:69:80:93:47:25:07:cb:e3:cc:8f:6d:ca:ae:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3B:49:CC:E2:DC:27:AD:DC:D7:0E:E1:A0:24:73:C8:21:09:9D:EE
X509v3 Authority Key Identifier:
keyid:DC:98:98:EC:BA:C7:DD:B3:9B:20:EA:99:B0:38:D2:6C:46:A8:24:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:89:f2:28:cf:d2:14:df:0b:80:3e:93:bc:f8:6c:91:07:61:
75:88:38:bd:99:ad:1c:ac:bb:c3:d9:05:4d:a0:a2:a6:a1:ed:
2f:3c:45:4f:71:a6:d6:a4:0f:a9:eb:0c:3b:e6:cc:ac:03:83:
51:22:bc:e7:ee:39:eb:6a:0b:23:96:2d:f3:54:bb:3d:31:17:
7a:38:d4:a1:b9:a0:6e:5f:46:50:f4:aa:bf:09:a3:96:82:5f:
68:d6:98:ab:2b:46:d8:e1:5f:56:e7:f0:65:eb:fc:af:fd:90:
f7:c8:5e:55:00:4b:33:fc:57:d8:79:e8:4e:78:0e:11:74:59:
91:b5:ac:f1:4a:d2:de:8a:c9:a7:bf:e7:0f:e0:38:84:e7:a2:
42:d7:c1:ca:a7:8e:9b:b0:08:8d:27:4b:80:cf:39:98:8e:4d:
59:f9:fd:34:d1:94:34:4c:a4:39:46:a7:7c:3a:b5:cd:d6:6c:
2b:77:7b:3b:33:ee:31:4a:23:e0:fe:cd:27:f6:4c:de:c4:e1:
5d:87:a1:a3:44:74:4e:20:22:60:1f:60:d9:4f:3a:66:fb:36:
44:2d:c5:43:29:fc:39:aa:89:83:63:65:c2:a3:c1:9e:0d:0e:
5c:dc:8a:42:a6:b9:ce:4a:81:54:43:9b:9e:9f:29:67:c7:a5:
95:fe:89:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:28 2026 by rpki-client