Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: Mi11/JYHP6TlUY814xSjP++6cQCsc/q4WvFN4WWmdD4=
Subject key identifier: 83:39:73:31:12:FF:B8:32:6B:4D:C9:AD:7E:C2:6D:3D:F8:23:F6:50
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 019FA907A564D14F0115E9BB178AA084DD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 09C2
Signing time: Tue 28 Jul 2026 14:01:18 +0000
Manifest this update: Tue 28 Jul 2026 14:01:18 +0000
Manifest next update: Wed 29 Jul 2026 14:01:18 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: bEStnVCli4qsvK80hYOJ3xxNuVEtVJ6U5NeYkm2YCKI=)
2: szG4-iX-wy9Ea4Hl_ZxkAAsV2VI.roa (hash: KBtNUYEno10Fs+9SpyYwnipEOPhepmYstt4xaQRcuLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:a5:64:d1:4f:01:15:e9:bb:17:8a:a0:84:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Jul 28 14:01:18 2026 GMT
Not After : Jul 29 14:01:18 2026 GMT
Subject: CN=8339733112ffb8326b4dc9ad7ec26d3df823f650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:02:02:cc:ac:f2:94:1e:9a:b8:59:86:59:
55:8e:c4:d3:64:01:df:e4:8e:37:b5:77:6b:9f:6b:
ca:76:d3:19:fe:57:e9:cc:df:ba:9f:a4:74:b3:05:
d3:59:b9:6e:27:cc:e5:6b:f1:c4:1a:fb:fb:80:85:
eb:25:24:4d:fd:5c:7d:f8:40:6c:9d:43:a9:fb:60:
a6:11:fe:ab:ac:7c:30:29:30:4a:11:64:6a:6a:55:
45:27:a7:01:19:c3:1f:72:d8:93:65:6d:ed:14:47:
2a:e5:aa:ee:28:17:07:b7:59:c4:f5:7c:b8:55:e5:
f8:2b:9e:7b:ec:81:14:6f:58:c9:9e:dd:31:58:ba:
83:d5:71:fc:72:ea:12:ac:cd:32:af:59:b5:f7:dd:
b1:b4:26:e6:e5:38:ba:1a:93:f0:72:cf:0f:fe:f8:
ef:c2:ce:f8:98:46:20:bc:2e:27:4d:b0:d6:21:3e:
50:c6:65:29:1f:2f:27:ed:f3:97:ac:a2:c2:55:a7:
ef:89:bf:36:db:c1:bc:ac:21:f7:22:3d:c6:f8:69:
bd:9f:d6:40:31:97:0a:61:fd:d2:b3:fe:c8:db:b9:
da:2b:cc:5c:2d:e5:4e:1d:5e:16:70:7d:01:4e:ef:
2d:5a:c6:b8:a6:b3:41:b2:cb:d9:22:f2:12:b3:7a:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:39:73:31:12:FF:B8:32:6B:4D:C9:AD:7E:C2:6D:3D:F8:23:F6:50
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c9:cb:af:8a:da:5e:b7:a7:ce:30:aa:d9:70:9e:44:3f:ff:
ec:b6:c2:aa:0e:3c:8d:8d:94:d3:ea:c7:b7:8b:a7:b4:c5:99:
1b:a8:cf:d0:78:3a:6d:68:92:57:6a:d2:8c:a4:2b:ca:51:22:
bc:34:33:52:aa:83:d2:2a:f5:cb:72:b4:16:2d:b7:f1:26:12:
47:5c:28:c2:14:65:46:a3:73:35:9e:a7:11:14:40:2c:22:42:
8b:2c:4b:d5:02:88:51:46:24:00:e7:66:05:b2:3e:58:55:d2:
80:7a:9a:e6:9b:02:c8:06:c1:be:55:25:de:5a:74:99:eb:eb:
2a:d5:4d:0d:1b:d8:6d:55:e9:37:31:d9:f7:4a:d4:3c:25:06:
02:29:b1:98:b6:60:c2:d5:78:70:72:a6:89:55:00:54:e8:8a:
52:d1:64:99:c0:7d:f2:a5:15:21:be:e9:96:96:26:0d:e9:c6:
33:98:45:9c:e0:af:ee:fc:90:8a:1a:90:6b:34:31:09:a4:8c:
b2:09:36:32:d2:d5:4c:2d:fb:1e:b4:92:4a:de:e7:8d:87:92:
c8:8a:e8:d8:56:a4:2b:b8:dd:b3:ce:48:6e:d3:e9:70:1a:29:
72:0c:26:b4:0d:9c:7b:35:cf:31:ce:88:e1:24:9f:a8:3a:3f:
26:59:9e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:42:07 2026 by rpki-client