Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: jKKg17qhVcgGAKBIlf0/SaxeMpNBoTM62lBSJ40YV4I=
Subject key identifier: 8F:A8:70:49:FD:ED:6D:38:92:7D:7E:01:58:2F:2E:48:32:02:3B:5D
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 01A0C2FB44F2B1236BC9AA16B89E45F0B945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 0A54
Signing time: Mon 21 Sep 2026 08:00:42 +0000
Manifest this update: Mon 21 Sep 2026 08:00:42 +0000
Manifest next update: Tue 22 Sep 2026 08:00:42 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: FXf8oeEt6JvsgnHdeFgarRU+dkXXkRQOJMsmRWSEe98=)
2: szG4-iX-wy9Ea4Hl_ZxkAAsV2VI.roa (hash: KBtNUYEno10Fs+9SpyYwnipEOPhepmYstt4xaQRcuLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:44:f2:b1:23:6b:c9:aa:16:b8:9e:45:f0:b9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Sep 21 08:00:42 2026 GMT
Not After : Sep 22 08:00:42 2026 GMT
Subject: CN=8fa87049fded6d38927d7e01582f2e4832023b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:24:2c:bb:81:c4:01:75:c4:8f:fa:cf:82:
2d:eb:99:06:26:e9:de:81:fe:f2:21:43:b8:bf:db:
90:1d:bd:77:ff:03:67:9d:90:4c:29:e8:80:ee:36:
0f:9b:2a:8f:24:dc:56:a4:4e:17:ce:5a:63:fc:e1:
c5:2a:c9:56:b2:27:e7:d6:3b:ca:c6:02:d9:0c:43:
48:c7:d5:db:8e:c5:1a:61:42:aa:c1:c1:3e:5b:4f:
b1:40:0f:d3:bd:d1:65:11:13:68:6c:b0:49:6d:0d:
59:cc:f6:a0:43:bf:90:ab:c7:95:85:a2:43:38:1f:
ca:a4:be:fe:34:cf:75:33:69:7b:ab:c3:9b:fc:92:
b7:1b:f9:64:d3:18:c9:ce:ec:5f:3e:ec:d1:3e:08:
28:2d:62:1b:de:64:5b:96:30:b8:cd:b8:ec:c6:d7:
01:8e:51:2f:21:90:58:37:1c:8a:e7:43:b3:14:9b:
8e:2a:3b:d5:c0:af:e2:03:e0:7a:fc:7f:a0:ae:c0:
c6:f7:28:37:b4:be:4e:f9:af:17:c9:ef:8a:fa:cb:
ac:8d:65:64:4f:2f:ca:67:0c:32:56:fd:03:8f:a2:
0f:66:a1:b6:bf:b6:e1:50:ff:9a:00:c1:40:79:18:
79:94:23:78:21:14:bb:48:1a:5f:a1:c5:de:ef:e7:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A8:70:49:FD:ED:6D:38:92:7D:7E:01:58:2F:2E:48:32:02:3B:5D
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2b:5c:df:2f:36:8f:f7:9d:07:29:a5:da:46:86:b1:ea:31:
63:d8:fa:40:2b:c8:99:ac:8c:70:36:b9:33:bb:ce:45:a0:a2:
5b:ec:a9:d3:8d:19:8b:cb:e3:8e:f0:4e:5a:f3:da:82:72:38:
bb:7d:65:95:11:70:b8:34:c9:bd:a0:78:af:d7:48:3c:d1:5c:
e2:b7:20:c9:5f:34:13:75:b4:0b:95:64:73:fd:14:5b:0c:20:
70:2c:e8:18:a0:d6:c4:da:47:af:7d:17:82:d6:cc:d6:0e:13:
9c:f2:3c:75:67:7c:e1:71:c2:ea:d7:eb:8e:7f:64:ac:6b:0d:
30:2c:50:62:0d:5b:6c:bb:b7:a1:c7:18:16:e0:0d:da:06:e7:
43:27:00:77:26:71:0a:1e:71:a5:3f:e8:8a:2e:aa:35:e2:9c:
71:67:9b:28:76:2b:bc:e1:1d:78:41:73:5a:01:d8:53:a3:9d:
07:55:52:7f:58:77:d2:bc:00:1e:bd:15:ad:17:98:8f:0b:56:
3d:f2:7a:11:0b:c7:4a:f2:f5:54:3f:80:3e:51:19:da:64:00:
6f:c3:77:12:c3:30:33:44:d8:ff:1d:21:b5:b6:0e:ec:4e:04:
9a:76:8d:3f:d6:61:60:4c:c5:40:ad:08:70:77:1b:95:17:3a:
a0:3b:de:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:39:57 2026 by rpki-client