Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
File: 3Hgh4by_bgdOpIFKqlxj47qBPF8.mft (raw, json)
Hash identifier: s/xJ6QdY1MvGmGgA1Ho8UTDBUZuueAlQkvIA9hrW9WQ=
Subject key identifier: 7E:47:F8:98:4A:8D:D4:87:4D:51:FC:42:10:D6:85:4F:42:EB:C5:69
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 01A0BF557B76DC5F472D40FF28B131F70B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
Manifest number: 1A86
Signing time: Sun 20 Sep 2026 15:00:45 +0000
Manifest this update: Sun 20 Sep 2026 15:00:45 +0000
Manifest next update: Mon 21 Sep 2026 15:00:45 +0000
Files and hashes: 1: 32lYY6uEr5NQiZ36Yw1PDpEB0LE.roa (hash: nbIrlyDfM/OsIW8q6DxR5+MKnNJS4Cwv/h7ugS3W6kw=)
2: 3Hgh4by_bgdOpIFKqlxj47qBPF8.crl (hash: 8dTd5X6X6EvRCIL/hcgvafz9m8YxQVwVhhCSdj0axpY=)
3: 4brBRSXd-3J0XI6W1cQMml969rM.roa (hash: HAAIbdurASwhGqOl0EqIaoNlObK5qBtHlNL6sAbPYAw=)
4: CV0Da0hDhTImPAfNEKg1Zmq-t4Y.roa (hash: gRQv5O+XgMBfojo8WrrSJ295oJBia/Hac6oJn0s/JA4=)
5: NS8B9quAxg9DaONCvo-F09E4aHg.roa (hash: 611N6cJ08ljysAfZN/DDvW2PaFTUCRX+l4eXQLoeFWE=)
6: YorSmVSKuGvPWA7DA6m1cRcL1FY.roa (hash: qU63ylCGxnEyiZbz76RKuCXngXRAm2RLSoEhfEzs9Wk=)
7: ZkI0BKv7hf_ucyX53-0WeS2FZU0.roa (hash: /W5mPhl5tNlOLzwA/Si8gsOL5g4fr6fls1AqWYZxDGY=)
8: hsVsux8sHzZqQOz9MIXAz_SM6VI.roa (hash: 3Hc4odb8fRJz6qv0eC3Z9gpTtQGDv+DPG+2jWtEDSs8=)
9: vulmYW4p9PU9wnTvn-jVp44qOCM.roa (hash: MXgO5bfy+NsKZlh8zhQJtMRiH5fhuEIemBIGiWuNsdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:7b:76:dc:5f:47:2d:40:ff:28:b1:31:f7:0b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Sep 20 15:00:45 2026 GMT
Not After : Sep 21 15:00:45 2026 GMT
Subject: CN=7e47f8984a8dd4874d51fc4210d6854f42ebc569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:69:af:cc:8a:9c:97:cf:e2:60:b5:91:80:
bf:36:78:c3:38:ed:85:3c:c7:93:9a:74:b4:fe:2e:
4b:68:e9:ea:c2:d5:56:19:8e:3f:be:15:b6:d5:b1:
83:56:1b:d7:a0:a4:6d:e8:b2:b8:b6:f1:73:64:5e:
0d:3e:db:7a:c0:e0:a5:bf:39:fe:6b:54:8c:cd:b7:
12:e2:66:f8:70:69:e7:9d:f6:04:b0:aa:bb:aa:fc:
cc:95:53:d9:02:ee:8e:87:55:8b:f0:16:f5:ad:d4:
4b:1d:0c:b3:33:0e:03:f4:dd:2b:3b:33:75:f7:b2:
b9:38:b6:7b:8d:c8:d7:ac:4e:c4:e3:f5:b6:0d:5f:
64:b2:94:8c:07:ba:8f:d5:43:18:ca:c8:f5:49:26:
4a:f7:5e:91:aa:9f:22:57:03:af:8e:0f:eb:aa:8a:
88:8b:97:0a:07:52:72:6b:8a:6b:d8:cd:99:7b:4b:
75:f5:96:b9:10:ce:ff:fb:dc:71:2b:ed:1c:cc:29:
cf:d1:0c:1b:fb:cc:d2:1b:13:df:5c:63:ab:29:b7:
5c:29:e5:92:e9:0b:d0:ed:68:dd:f2:2a:dd:0e:80:
3e:3d:46:ef:4f:23:3f:ee:06:41:5e:b0:4a:0e:a2:
a8:79:ad:68:35:ba:66:c3:93:97:0a:f2:8b:24:cd:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:47:F8:98:4A:8D:D4:87:4D:51:FC:42:10:D6:85:4F:42:EB:C5:69
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:46:86:27:5b:68:19:f5:ff:79:74:24:99:1a:02:30:e2:06:
a0:2e:12:b7:0b:91:d9:79:39:7d:6b:d6:d2:c2:0a:9c:1b:19:
64:c6:b6:8f:b6:a3:5c:7e:f2:b9:06:4a:07:c7:38:dd:31:2c:
32:08:45:05:69:8c:4e:78:9b:51:fa:5c:a0:5c:fa:db:5c:00:
cb:31:3f:7e:cb:3d:fd:e7:f1:37:37:b6:fe:34:f1:25:22:63:
3e:5e:89:66:5b:96:eb:79:65:9f:60:68:e2:3e:b8:a8:8d:61:
7e:73:50:b1:8f:e7:8e:77:35:fd:81:f1:35:83:84:fe:a3:f3:
2e:b5:0e:1b:03:0a:e4:75:70:e5:d6:7c:89:2d:ae:59:8c:87:
a0:59:84:8a:9d:1c:26:98:0f:dd:ee:db:88:d3:59:8c:87:75:
08:08:0e:9e:13:da:b1:34:04:21:87:7a:2d:c5:7e:43:57:92:
01:47:74:3b:09:f1:51:e3:b9:a7:4e:9f:1d:a3:ff:50:e8:8e:
f6:cb:13:e4:23:8c:80:01:b8:46:12:89:05:5f:3a:fc:24:25:
98:f7:61:a6:3c:1a:98:d5:f2:87:11:94:7c:8d:85:57:47:5e:
8e:47:38:94:d2:27:d7:4c:0b:b1:25:1f:05:8f:b9:53:90:c6:
b1:00:53:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:16:13 2026 by rpki-client