Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: v9MZ1r/637f/LC/rT81LvLzjjY+uha3iX56tvoLck2A=
Subject key identifier: 69:DF:21:F8:35:7E:5A:07:A0:32:DA:76:80:BF:D4:68:AC:F7:21:9A
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 019EBF5A4A434C86BAB674997AA3AC77050B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 0949
Signing time: Sat 13 Jun 2026 05:00:25 +0000
Manifest this update: Sat 13 Jun 2026 05:00:25 +0000
Manifest next update: Sun 14 Jun 2026 05:00:25 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: aBJMb4dHDDNP+j4IExo5J1t8+Cc4Jo0pw88U+ix7YDY=)
2: szG4-iX-wy9Ea4Hl_ZxkAAsV2VI.roa (hash: KBtNUYEno10Fs+9SpyYwnipEOPhepmYstt4xaQRcuLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:4a:43:4c:86:ba:b6:74:99:7a:a3:ac:77:05:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Jun 13 05:00:25 2026 GMT
Not After : Jun 14 05:00:25 2026 GMT
Subject: CN=69df21f8357e5a07a032da7680bfd468acf7219a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:bc:30:88:cc:0a:36:29:3d:01:79:7f:78:
d0:11:31:95:ac:c4:d2:40:e3:47:da:c1:08:f9:be:
a9:c2:c8:49:c1:dc:65:fe:d6:3f:34:65:80:ae:f1:
cd:5a:14:83:d5:6b:02:2e:53:02:39:23:6b:3d:fe:
b3:6b:b8:96:42:11:a6:3c:90:11:ce:eb:7d:7a:41:
49:d5:42:7b:6c:88:eb:6a:ab:4b:3a:71:29:dd:d8:
5f:f4:12:80:7b:b7:10:22:2a:6e:eb:d0:34:05:75:
32:08:03:b4:87:eb:98:b5:00:72:e3:ba:4f:dd:cd:
e4:ba:38:68:9e:b0:22:cd:09:62:cb:d0:9e:f6:d6:
5d:46:c0:26:ba:e0:c3:5a:e6:3f:34:e0:2d:5a:4b:
3f:b5:0e:44:97:5e:ea:7d:d2:9d:ca:ae:6b:dc:26:
85:90:d6:ea:13:a5:e5:cd:e2:78:c3:ca:a0:53:e2:
8c:60:7b:8c:12:06:d2:e9:00:76:f2:e8:33:06:fd:
42:25:1e:3a:ad:f0:aa:74:a0:48:5a:f9:a5:0a:57:
01:12:d0:76:62:3e:de:9b:04:29:ee:a7:e6:2d:d6:
87:b2:6b:70:9d:30:1f:3b:1c:5c:df:66:52:a1:d0:
d6:23:af:ff:e3:2a:60:c2:20:4b:03:a7:17:34:cc:
ac:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DF:21:F8:35:7E:5A:07:A0:32:DA:76:80:BF:D4:68:AC:F7:21:9A
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:78:2e:12:a0:2a:07:dd:43:de:f5:3c:18:88:6b:2b:3f:0e:
a5:e4:64:b3:c8:67:4c:68:4d:a2:e7:a9:72:bf:66:be:ec:78:
11:b8:8f:fd:92:2f:cb:54:31:42:6d:a6:05:1f:2c:e0:28:2f:
f5:d7:b8:ea:d2:66:e0:fd:41:bc:6d:2c:2c:8c:75:31:cd:71:
dd:6f:1d:25:35:a9:86:d5:ca:79:f6:da:67:4d:7a:69:54:f1:
b8:97:56:21:64:ab:62:bc:88:32:fb:00:d9:cf:01:4f:83:12:
94:94:a6:c7:3c:44:1a:70:5a:d6:fc:59:d3:1f:75:a4:96:20:
33:60:43:e1:3d:74:1e:11:48:e0:1b:59:c9:3a:f3:d3:07:da:
6b:60:c9:75:1d:fa:97:40:0e:07:ad:f0:08:ec:00:df:10:fe:
f2:98:36:33:b5:c7:cd:67:b1:36:df:47:f2:48:ab:81:20:8a:
06:3e:62:ad:bf:ea:37:17:30:70:5e:2e:1c:89:9b:34:70:0d:
4b:ee:8b:98:23:99:3f:9b:b4:06:18:76:42:63:3e:d7:dc:b1:
59:a4:0b:36:e0:2c:55:85:ab:e0:58:0f:df:3a:dc:9b:ca:c0:
fa:07:6b:34:4d:a6:87:75:1b:f7:51:15:80:91:7e:67:91:29:
df:df:45:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:08:21 2026 by rpki-client