Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: fxIbO9F9DZefyaivIIr77UE8W/VP+H/3ads3I0L4Gas=
Subject key identifier: 28:79:3C:96:23:11:BA:75:5E:4A:9E:32:B4:12:8B:03:0C:BF:D3:5F
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 019D99D0E05F9E9E6B3B8B9678AEC47902B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 08B1
Signing time: Fri 17 Apr 2026 05:01:36 +0000
Manifest this update: Fri 17 Apr 2026 05:01:36 +0000
Manifest next update: Sat 18 Apr 2026 05:01:36 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: T/99niw0DSGyXQ3P/zCBO5jh/wrEBs5hN6mBkcL75o4=)
2: szG4-iX-wy9Ea4Hl_ZxkAAsV2VI.roa (hash: KBtNUYEno10Fs+9SpyYwnipEOPhepmYstt4xaQRcuLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e0:5f:9e:9e:6b:3b:8b:96:78:ae:c4:79:02:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Apr 17 05:01:36 2026 GMT
Not After : Apr 18 05:01:36 2026 GMT
Subject: CN=28793c962311ba755e4a9e32b4128b030cbfd35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:ff:40:5c:67:79:29:90:2c:a9:7f:2d:87:
0b:33:e9:04:de:c7:7a:07:0e:38:91:e5:0b:82:af:
a5:fa:5c:f0:fe:91:df:84:68:be:4e:0f:e6:f9:a7:
c3:89:90:74:3f:ee:2a:9d:e6:ad:21:c3:d9:2a:b0:
e0:c9:88:fb:f0:5b:d8:bf:88:a7:43:39:f9:52:20:
e4:ee:3c:7c:22:4d:c4:fe:d2:b7:8e:16:34:bc:c1:
b5:a4:f7:e5:fe:d0:52:71:92:5b:1a:8b:93:01:8a:
aa:5b:ba:9c:05:1a:3b:9e:0a:0d:5d:75:fd:73:48:
a2:7a:a3:c7:0e:db:f6:f3:ee:35:2b:f6:3d:52:59:
c6:6a:25:e9:6e:c6:32:a7:ae:a9:1d:46:f1:2f:df:
15:99:22:b8:76:f9:f6:e8:74:01:64:59:22:41:bd:
60:87:da:c5:47:7d:44:65:f8:ee:f9:44:ed:7c:8e:
f4:d0:30:25:b2:e4:bb:10:3e:51:11:d1:e9:ee:2d:
b7:2f:25:99:32:6f:79:a8:b9:04:fd:b3:42:55:98:
75:09:f7:2e:ce:21:0c:fe:a4:f0:03:d1:80:1e:0e:
dd:e4:b6:89:c2:bf:ff:c0:d7:4a:b2:b1:f4:03:b6:
87:8c:1f:b4:33:d6:e2:86:8e:2a:14:8d:58:53:c4:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:79:3C:96:23:11:BA:75:5E:4A:9E:32:B4:12:8B:03:0C:BF:D3:5F
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d0:55:16:1d:5d:d2:24:0f:dc:32:b5:34:26:7b:d0:1b:38:
c6:90:4e:f4:1b:f6:1c:96:71:b7:cc:b1:c7:b3:ff:d5:c9:ce:
6b:07:67:20:ad:04:79:f6:c4:a9:c8:75:9c:be:6b:a7:dc:d1:
a3:db:79:cb:d2:86:37:5b:26:74:11:f7:94:cd:34:20:ac:c6:
52:98:5b:0e:84:c5:15:b4:73:f8:74:5a:ca:50:cf:a2:92:22:
81:33:a1:85:53:e1:04:11:ba:eb:22:36:a1:be:5d:cc:59:7b:
c1:07:46:4d:43:9a:ac:0c:10:f3:7a:77:33:ac:c6:42:b9:80:
da:6e:e8:d6:64:5e:0f:a5:76:5b:d3:39:ff:c2:78:dd:69:b8:
d9:de:5b:63:c2:c6:da:1c:d0:62:d4:28:49:25:a3:2f:6a:90:
db:f9:a6:64:95:93:76:f9:f4:e2:1b:3e:51:07:19:ee:b5:b9:
01:c1:33:cf:5c:a6:28:c6:3f:97:53:5a:ae:07:83:26:66:61:
fd:29:43:70:d7:88:e1:ac:24:03:f7:76:87:a1:1a:52:eb:2b:
f6:80:d0:c0:2b:29:da:63:5f:2f:06:16:8c:9d:65:66:65:5b:
cc:9e:37:bf:48:1b:5e:e6:aa:4f:0a:87:43:5f:78:3e:52:6c:
e4:ed:b9:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0OBfnp5rO4uWeK7EeQK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjN2ZiZDY3NzQ0MWNiYjVjMGJkNDdiY2QyZjM4YmExOTJh
MzM2YTYwHhcNMjYwNDE3MDUwMTM2WhcNMjYwNDE4MDUwMTM2WjAzMTEwLwYDVQQD
EygyODc5M2M5NjIzMTFiYTc1NWU0YTllMzJiNDEyOGIwMzBjYmZkMzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3n/QFxneSmQLKl/LYcLM+kE3sd6
Bw44keULgq+l+lzw/pHfhGi+Tg/m+afDiZB0P+4qneatIcPZKrDgyYj78FvYv4in
Qzn5UiDk7jx8Ik3E/tK3jhY0vMG1pPfl/tBScZJbGouTAYqqW7qcBRo7ngoNXXX9
c0iieqPHDtv28+41K/Y9UlnGaiXpbsYyp66pHUbxL98VmSK4dvn26HQBZFkiQb1g
h9rFR31EZfju+UTtfI700DAlsuS7ED5REdHp7i23LyWZMm95qLkE/bNCVZh1Cfcu
ziEM/qTwA9GAHg7d5LaJwr//wNdKsrH0A7aHjB+0M9biho4qFI1YU8RNNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCh5PJYjEbp1XkqeMrQSiwMMv9NfMB8GA1UdIwQY
MBaAFNx/vWd0Qcu1wL1HvNLzi6GSozamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMt
NzZkM2Q0ODBmYTY4LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMtNzZkM2Q0ODBmYTY4
LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdBVFh1d
0iQP3DK1NCZ70Bs4xpBO9Bv2HJZxt8yxx7P/1cnOawdnIK0EefbEqch1nL5rp9zR
o9t5y9KGN1smdBH3lM00IKzGUphbDoTFFbRz+HRaylDPopIigTOhhVPhBBG66yI2
ob5dzFl7wQdGTUOarAwQ83p3M6zGQrmA2m7o1mReD6V2W9M5/8J43Wm42d5bY8LG
2hzQYtQoSSWjL2qQ2/mmZJWTdvn04hs+UQcZ7rW5AcEzz1ymKMY/l1NargeDJmZh
/SlDcNeI4awkA/d2h6EaUusr9oDQwCsp2mNfLwYWjJ1lZmVbzJ43v0gbXuaqTwqH
Q194PlJs5O25yA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:20 2026 by rpki-client