Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
File: 3Hgh4by_bgdOpIFKqlxj47qBPF8.mft (raw, json)
Hash identifier: ph+f3c2YDNJxOdog0gAqdfFEYNC6UvW840b1HjnqRLg=
Subject key identifier: AE:E8:71:4A:54:E1:DB:8C:04:F4:5B:E1:0E:CF:95:97:22:9C:99:EF
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 019EBF5A63CEE780C353A99EC42EFACE7885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
Manifest number: 196C
Signing time: Sat 13 Jun 2026 05:00:32 +0000
Manifest this update: Sat 13 Jun 2026 05:00:32 +0000
Manifest next update: Sun 14 Jun 2026 05:00:32 +0000
Files and hashes: 1: 32lYY6uEr5NQiZ36Yw1PDpEB0LE.roa (hash: nbIrlyDfM/OsIW8q6DxR5+MKnNJS4Cwv/h7ugS3W6kw=)
2: 3Hgh4by_bgdOpIFKqlxj47qBPF8.crl (hash: 0bosX6DRhJwi9GKrbXit5cGAeVJuhj+X+44B+FnQxWU=)
3: 4brBRSXd-3J0XI6W1cQMml969rM.roa (hash: HAAIbdurASwhGqOl0EqIaoNlObK5qBtHlNL6sAbPYAw=)
4: CV0Da0hDhTImPAfNEKg1Zmq-t4Y.roa (hash: gRQv5O+XgMBfojo8WrrSJ295oJBia/Hac6oJn0s/JA4=)
5: CcbOPSFowzuVmbQQQVUT4gQZao4.roa (hash: QoVwdK39dtT9IvoLSexiLLdImyTyxwcjHq7QNn6fGOA=)
6: Nmra5MQ90P6ykkpupDiPaVY1kco.roa (hash: iXU9Ga0vhV6ku1r3OaZ+HmJepE5UeaNFpriSH+GfUVo=)
7: YorSmVSKuGvPWA7DA6m1cRcL1FY.roa (hash: qU63ylCGxnEyiZbz76RKuCXngXRAm2RLSoEhfEzs9Wk=)
8: hsVsux8sHzZqQOz9MIXAz_SM6VI.roa (hash: 3Hc4odb8fRJz6qv0eC3Z9gpTtQGDv+DPG+2jWtEDSs8=)
9: vulmYW4p9PU9wnTvn-jVp44qOCM.roa (hash: MXgO5bfy+NsKZlh8zhQJtMRiH5fhuEIemBIGiWuNsdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:63:ce:e7:80:c3:53:a9:9e:c4:2e:fa:ce:78:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Jun 13 05:00:32 2026 GMT
Not After : Jun 14 05:00:32 2026 GMT
Subject: CN=aee8714a54e1db8c04f45be10ecf9597229c99ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:93:29:3d:1c:7a:1a:e8:04:15:c9:bb:13:
67:18:a3:98:57:70:04:ec:65:76:46:f2:6b:94:0e:
de:6d:a1:3c:4a:c5:d7:e3:58:8f:b1:9b:d4:9a:aa:
43:8c:ea:84:28:9a:f8:35:9a:44:9d:ee:21:14:5e:
e6:87:c0:da:22:c0:a4:d0:0e:d3:9f:1b:b3:d9:d6:
95:ad:91:03:64:75:9c:fc:fe:cc:e2:12:0b:8d:db:
ff:88:4f:cb:6d:28:47:e6:e8:17:a4:6d:5a:49:22:
3e:83:d9:b7:d3:10:ec:e8:a3:95:5e:bc:b3:e6:07:
6b:8a:33:3a:03:1e:67:a4:0c:7a:99:ae:bf:56:97:
92:3d:0c:a4:b6:52:3d:9f:d3:5a:f3:79:42:90:5d:
c3:9f:9a:a0:56:c9:1f:e7:c4:1c:1c:8d:ec:14:61:
fb:03:a0:fd:15:ff:a2:78:9c:19:fc:75:c1:5d:41:
d0:4e:3f:c2:a9:2d:0a:b5:73:3f:01:7a:13:d2:83:
b7:0b:1e:4a:68:62:09:69:b8:80:56:fc:3c:61:93:
e8:ad:88:ec:e0:9c:e6:f7:e4:e0:cb:f9:7b:5c:73:
1d:94:e4:3d:97:3e:3e:4a:a8:d8:ef:4a:9f:14:22:
48:6e:ed:ef:78:91:4a:1a:be:60:95:1a:c3:c4:d0:
05:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E8:71:4A:54:E1:DB:8C:04:F4:5B:E1:0E:CF:95:97:22:9C:99:EF
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:38:3c:fd:14:3f:6f:7e:06:02:d8:40:1c:f0:ae:50:be:31:
aa:1f:da:db:ea:26:d1:62:5b:dc:0f:3c:c9:99:1d:70:e3:a5:
f8:38:91:fb:a0:a9:ce:59:ad:65:07:91:fd:02:04:f6:ff:bb:
c8:ef:82:df:c8:a8:3f:6b:9a:1a:b4:d2:cb:40:0d:5f:0e:f2:
b2:59:ab:29:1d:a0:e4:39:71:59:da:26:b6:b1:15:7e:6f:5f:
a6:6f:dc:56:90:71:b0:5b:cd:4c:88:e5:92:ab:b3:d7:c2:3c:
4c:56:23:40:5a:74:3d:9d:39:2b:10:a5:a8:9f:7b:9b:46:ba:
32:12:82:1e:3b:57:16:e9:4b:7a:78:cc:8f:be:c0:bd:26:90:
29:b3:a3:4a:2b:29:0d:23:41:b5:ca:18:26:12:ea:7e:e2:6d:
1b:62:1f:67:e7:40:be:46:40:64:cc:ce:c8:68:f9:4a:77:0e:
be:da:b8:67:e8:d3:31:1d:12:e4:43:c8:c4:36:95:67:4f:61:
f2:64:98:f5:e5:d9:2f:5d:67:77:e2:25:71:43:79:af:91:4c:
12:df:02:d1:ae:05:d5:d0:e2:d0:c4:b7:5f:ef:25:ac:27:36:
01:61:d2:89:80:27:92:67:f5:e5:ee:81:41:62:bf:73:06:30:
5d:a1:65:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:57:42 2026 by rpki-client