Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier: QPPTHmP98Nl3MZBFy7/cQpbqwySrWCJJUtPSpMD932Y=
Subject key identifier: 21:05:DE:34:D6:53:7E:52:10:5E:0B:93:B4:F4:EB:17:39:B7:BC:17
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 019FA898F63D73B351F174F1C0FC4CF0D6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number: 1586
Signing time: Tue 28 Jul 2026 12:00:24 +0000
Manifest this update: Tue 28 Jul 2026 12:00:24 +0000
Manifest next update: Wed 29 Jul 2026 12:00:24 +0000
Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: LrrEAARHX+t5/6weZ2GBfNl2NrLon002/KErBkaoM/U=)
2: VcgWyeq648Gc4ahE2H4P_5An-Vk.roa (hash: lpEbA2Oc/IvvrSvQYZYfTGRO3+SQWqSCIH6JyIv+3/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:f6:3d:73:b3:51:f1:74:f1:c0:fc:4c:f0:d6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: Jul 28 12:00:24 2026 GMT
Not After : Jul 29 12:00:24 2026 GMT
Subject: CN=2105de34d6537e52105e0b93b4f4eb1739b7bc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:a9:00:23:12:a7:f3:14:20:31:e6:f7:c7:
f3:80:64:53:32:04:99:7c:3c:7a:45:14:23:de:a9:
ca:c0:64:94:f0:b2:3e:1e:96:be:31:99:45:33:76:
30:d5:76:79:08:14:2a:27:88:0c:0b:e2:7d:44:72:
b3:73:a5:14:68:9a:e5:dc:2d:bd:b4:2e:b6:d7:1a:
07:7d:e3:86:cc:10:89:33:e2:b6:c1:0e:9c:0c:7e:
68:1e:29:3b:64:cc:1f:98:ce:5b:3b:3b:ae:a4:33:
9b:d8:e1:f6:d0:eb:c9:16:88:d4:b7:a9:24:61:a4:
8f:e9:b3:e4:1e:da:65:4f:30:45:69:01:c2:2a:14:
b3:16:68:00:98:ee:9e:fe:42:77:2c:64:04:4d:75:
15:c0:ae:a2:bb:37:72:d2:29:19:84:ed:df:e7:b6:
05:83:e7:7c:b9:2d:be:37:d9:8b:d2:8c:2e:b0:e7:
21:2d:a5:68:d5:99:2b:f9:84:9f:1b:dd:62:6f:04:
ee:2e:f1:55:37:7f:76:86:b8:02:36:f9:6e:9d:19:
b1:68:d6:af:01:dc:5b:95:df:d5:c3:e7:44:f3:70:
d8:b8:83:8e:9d:61:33:18:f9:3e:ba:c9:84:05:6b:
53:be:a3:3a:ad:12:ce:c9:cb:05:a4:b1:93:6b:0d:
9e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:05:DE:34:D6:53:7E:52:10:5E:0B:93:B4:F4:EB:17:39:B7:BC:17
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5f:d5:24:65:98:81:fe:f6:64:29:4e:b9:b4:d7:44:34:64:
ad:41:8e:af:a3:c1:54:b7:a2:d1:bc:48:28:d6:f2:54:f2:ba:
b6:da:e3:05:b2:e7:57:4b:98:43:d9:f7:53:a8:b2:9e:9b:3c:
f8:3a:a0:0b:88:b4:69:28:2c:ef:5a:38:1f:a4:dc:f1:6a:3e:
5d:00:fd:94:61:30:4d:c2:fa:ab:46:12:11:10:d0:eb:df:19:
9b:dd:b9:75:5c:0c:e8:f9:25:cc:07:bf:9e:4d:3a:97:3e:80:
f0:cc:4a:81:8b:5a:aa:c2:f4:7d:cb:bd:71:ed:cf:8b:44:d0:
2a:df:91:60:e2:a8:b3:56:c5:10:15:71:2b:f3:a0:30:6e:a7:
51:42:07:01:08:b5:59:46:4e:f1:52:c3:0a:2b:4c:ab:25:b4:
14:58:d0:10:31:98:87:62:c3:4e:94:f0:9d:34:03:c4:11:d4:
5e:e7:db:eb:14:6d:df:08:95:12:25:38:c4:52:93:7b:74:9f:
60:50:e7:fc:83:bf:f3:22:1b:da:a8:6d:39:e4:55:61:4f:6e:
bc:63:d9:7f:12:ce:e5:1b:71:27:23:0d:3e:14:71:7a:90:fc:
d2:28:80:2e:80:3e:88:95:5d:60:b2:8d:35:95:ff:32:24:82:
85:11:01:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:08:57 2026 by rpki-client