Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: Egqj9sbGhjtxhDMnVZYB/LOku2YLQShAHbzeiSN6Z7A=
Subject key identifier: B6:AE:7A:F0:66:62:42:35:23:2A:A9:4E:B2:60:D5:BE:3C:46:03:EB
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 01A00213DBCB61CE0BFED2692A6E4ED5F07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 1A10
Signing time: Fri 14 Aug 2026 21:00:50 +0000
Manifest this update: Fri 14 Aug 2026 21:00:50 +0000
Manifest next update: Sat 15 Aug 2026 21:00:50 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: rubRQlLLtviX4FqDVgDlDMT0qRCIHICXTyKH9fa7guk=)
2: 9zaCEl1SgGOc-A7zIR9SmhOUbCA.roa (hash: eFtzjl4+/9tlA7bC6sKrJsHMLsAxLeLlfmditC5aZTs=)
3: _QaXkGOzguH_3SYFNe1d3y7B2Tw.roa (hash: KztSdz5ODte8K6guWxzrXZlYDG1F2rVO/Vqml3J+Q0o=)
4: fsnKswSMyeM4OK2o8J_ZzwwYiiI.roa (hash: tWk+nFmUcDykdNhoUyVPw1UFkRx/3AJQMBQrLxH1g5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:db:cb:61:ce:0b:fe:d2:69:2a:6e:4e:d5:f0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Aug 14 21:00:50 2026 GMT
Not After : Aug 15 21:00:50 2026 GMT
Subject: CN=b6ae7af066624235232aa94eb260d5be3c4603eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:00:9e:e7:63:fe:ce:f4:bf:72:0f:61:f8:
d0:b2:73:d4:9f:d6:e1:eb:e4:30:79:60:3a:99:56:
6f:b6:6f:d9:6a:0d:37:f8:82:01:35:60:e6:88:72:
0c:d2:46:8c:69:4e:9d:df:ca:cf:74:cb:13:0f:d9:
05:85:f4:a7:91:ae:53:52:35:ce:8a:68:a0:b5:1b:
ae:f1:81:4a:92:c4:5f:6f:a4:19:6f:bc:9b:af:12:
7a:54:25:c5:46:90:74:ff:29:f7:d5:c2:34:f6:5b:
af:02:c9:ac:09:52:15:d9:b2:2f:b3:de:20:f3:3e:
5c:4a:dc:c1:6d:8b:a4:0e:ea:24:f9:95:e5:34:5d:
20:62:04:60:3f:67:48:fc:03:d0:d8:d5:88:82:96:
11:89:7a:34:07:f7:95:ec:68:38:7b:42:29:53:08:
d9:30:30:f7:d8:c2:07:9f:d0:b0:f3:88:4c:ff:84:
62:2a:86:72:71:e9:26:67:2a:5b:51:4e:26:fe:90:
6d:a9:ad:f4:ba:d6:95:2f:dc:3e:3b:a6:63:a8:c3:
a4:0d:cf:35:23:6e:ae:37:00:46:49:f6:6b:7e:dc:
85:bb:0e:96:22:de:bf:b4:d9:13:60:3f:ad:f4:9a:
8f:82:50:89:47:cd:8d:e4:af:02:5b:7a:31:fa:23:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AE:7A:F0:66:62:42:35:23:2A:A9:4E:B2:60:D5:BE:3C:46:03:EB
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:28:c9:69:d9:6e:cf:9a:42:0c:de:e0:64:dc:d3:fc:e9:e6:
d7:0e:c5:35:09:f1:05:f7:51:37:f7:8a:26:92:22:ea:d0:3e:
72:be:a4:6c:bf:a9:7c:27:82:eb:08:d0:92:f6:f9:9a:0a:78:
e5:49:85:d7:e5:58:2e:31:8d:99:7a:c5:1b:d7:61:2e:b5:c3:
7d:35:0a:e9:7c:65:b8:00:4e:0f:1a:0c:1d:57:58:2f:0f:3f:
1a:01:3b:c9:38:f1:06:5e:35:ee:50:7a:d8:98:8c:c3:9e:73:
e4:24:ee:2f:7b:04:f6:f1:39:e0:43:cd:3e:18:a0:42:98:76:
db:5a:e3:eb:c1:42:53:a7:1e:bc:f2:73:4f:b1:1e:22:c2:99:
68:1f:a0:1a:12:90:11:97:86:e6:a5:f6:02:a6:c3:cf:72:f2:
95:fb:0a:85:3d:21:75:03:04:b7:fe:7f:a6:ee:b9:91:22:08:
07:e7:b5:8e:78:0c:81:48:88:22:d3:ed:11:d3:e2:1d:cd:4e:
84:8d:0c:34:62:bf:b4:82:db:be:24:36:97:f9:ee:86:a1:0c:
af:45:2b:5d:19:40:db:c8:71:5e:41:23:2e:5a:5e:c6:76:cb:
8d:79:0a:7b:5d:09:d4:f5:d7:66:cc:61:97:29:5a:54:48:04:
78:fd:15:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:27:35 2026 by rpki-client