Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: BKxKUKYQABRL+oMoR/hVSObKtImfAcryZOnjd82T/F0=
Subject key identifier: D0:9D:D9:FC:74:AE:9E:47:41:F7:6E:FB:3A:D0:2E:48:F3:55:58:DB
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 019CA9B36219A93DD55A5DE88318E0ECC485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 0833
Signing time: Sun 01 Mar 2026 14:00:31 +0000
Manifest this update: Sun 01 Mar 2026 14:00:31 +0000
Manifest next update: Mon 02 Mar 2026 14:00:31 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: tOnKjGyg0N0wnWALQd8NII2yGrp3SLkgV9v42Wtt58Q=)
2: MX6IKcbu6nbrcpKUTFeckfpRtKY.roa (hash: Nhzod3LsBM1lbTTIfaXha3ceYkrv/UztfLRskLbxjnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:62:19:a9:3d:d5:5a:5d:e8:83:18:e0:ec:c4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Mar 1 14:00:31 2026 GMT
Not After : Mar 2 14:00:31 2026 GMT
Subject: CN=d09dd9fc74ae9e4741f76efb3ad02e48f35558db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:09:f0:f9:b3:93:cb:3d:3f:1f:b3:da:ff:57:
2f:40:03:54:f7:9c:87:e2:96:6a:36:ee:ce:d0:15:
cb:91:87:36:4a:da:44:03:9f:62:e4:72:31:97:c2:
b6:8e:b5:2a:65:a2:11:aa:d7:46:f8:b6:4f:51:a5:
cd:c2:23:69:72:3d:20:29:90:97:15:4b:8a:90:d8:
54:18:9c:91:6a:82:51:f3:0c:64:93:34:6e:54:71:
0c:4b:26:60:5a:32:37:3c:6d:6e:a0:01:52:8b:9e:
4a:66:99:ec:62:22:08:21:26:69:5b:99:00:b0:da:
48:a2:46:0d:c7:03:4c:b6:62:be:1d:ba:81:98:4b:
6a:1e:6c:c7:af:23:97:a0:66:a5:70:e0:82:d4:02:
01:e1:13:ae:a4:ec:b7:6e:5f:21:b7:b4:2c:d6:86:
02:e6:a2:d6:2e:40:f6:1c:28:9b:ea:fb:1d:1a:c6:
d9:ae:88:b8:ad:e9:e3:57:2f:4b:46:7b:80:eb:e9:
67:09:6a:c0:70:77:fa:7a:19:e4:af:fa:c2:0b:eb:
41:00:0c:cf:9b:ea:01:db:5a:38:58:85:80:b7:72:
04:b2:1e:7d:0a:e9:26:c2:3b:f5:51:06:f8:0a:13:
db:bc:eb:41:c3:ee:ee:82:6a:fa:ed:15:1b:df:e1:
df:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9D:D9:FC:74:AE:9E:47:41:F7:6E:FB:3A:D0:2E:48:F3:55:58:DB
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:10:08:e8:56:76:b5:c7:8c:58:f8:f5:8b:d2:7a:85:4c:4a:
6f:dd:c3:d8:9e:f5:68:4d:e6:df:82:e9:b9:33:24:e8:99:4f:
d8:62:03:2d:d8:c0:b0:86:ff:7c:e1:ba:46:54:52:16:9c:05:
21:1e:08:bd:63:dc:af:ef:0e:cd:1e:70:0a:cf:9d:9c:4f:58:
f7:83:27:c2:df:e4:25:21:09:f4:c7:b9:64:a1:99:7e:4f:33:
d3:92:f2:63:03:fe:5e:8d:c5:11:f7:1f:28:4a:5a:c9:53:04:
05:84:11:a8:b3:75:6d:71:12:22:89:25:42:67:9b:e7:0f:66:
ca:70:0d:6d:72:48:2c:2a:4f:ea:ca:3e:9e:5f:83:ec:8b:53:
80:f8:f4:e2:d1:1e:5c:f5:ca:df:be:f8:b9:b5:d6:50:1a:d5:
08:d5:0a:38:51:8d:56:7a:52:27:de:e0:01:a6:2c:16:48:47:
23:d2:82:b5:7a:57:e5:12:c3:ca:b9:94:c5:a6:ec:09:93:67:
1e:85:3d:47:f6:c7:c2:ae:23:32:64:ff:5f:f1:b6:8c:13:f6:
55:63:5d:f9:40:e8:dc:cd:f1:0e:e3:1a:5c:02:dd:11:41:2e:
d6:d0:51:13:ab:10:c7:01:0b:83:06:48:64:69:9a:24:25:f8:
23:8d:ac:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps2IZqT3VWl3ogxjg7MSFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjN2ZiZDY3NzQ0MWNiYjVjMGJkNDdiY2QyZjM4YmExOTJh
MzM2YTYwHhcNMjYwMzAxMTQwMDMxWhcNMjYwMzAyMTQwMDMxWjAzMTEwLwYDVQQD
EyhkMDlkZDlmYzc0YWU5ZTQ3NDFmNzZlZmIzYWQwMmU0OGYzNTU1OGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wnw+bOTyz0/H7Pa/1cvQANU95yH
4pZqNu7O0BXLkYc2StpEA59i5HIxl8K2jrUqZaIRqtdG+LZPUaXNwiNpcj0gKZCX
FUuKkNhUGJyRaoJR8wxkkzRuVHEMSyZgWjI3PG1uoAFSi55KZpnsYiIIISZpW5kA
sNpIokYNxwNMtmK+HbqBmEtqHmzHryOXoGalcOCC1AIB4ROupOy3bl8ht7Qs1oYC
5qLWLkD2HCib6vsdGsbZroi4renjVy9LRnuA6+lnCWrAcHf6ehnkr/rCC+tBAAzP
m+oB21o4WIWAt3IEsh59Cukmwjv1UQb4ChPbvOtBw+7ugmr67RUb3+HfoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCd2fx0rp5HQfdu+zrQLkjzVVjbMB8GA1UdIwQY
MBaAFNx/vWd0Qcu1wL1HvNLzi6GSozamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMt
NzZkM2Q0ODBmYTY4LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMtNzZkM2Q0ODBmYTY4
LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxAI6FZ2
tceMWPj1i9J6hUxKb93D2J71aE3m34LpuTMk6JlP2GIDLdjAsIb/fOG6RlRSFpwF
IR4IvWPcr+8OzR5wCs+dnE9Y94Mnwt/kJSEJ9Me5ZKGZfk8z05LyYwP+Xo3FEfcf
KEpayVMEBYQRqLN1bXESIoklQmeb5w9mynANbXJILCpP6so+nl+D7ItTgPj04tEe
XPXK3774ubXWUBrVCNUKOFGNVnpSJ97gAaYsFkhHI9KCtXpX5RLDyrmUxabsCZNn
HoU9R/bHwq4jMmT/X/G2jBP2VWNd+UDo3M3xDuMaXALdEUEu1tBRE6sQxwELgwZI
ZGmaJCX4I42sSg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:40 2026 by rpki-client