Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
File: 3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft (raw, json)
Hash identifier: G18PyNMt09PZ25BplyfNySCt2oRVbdBHioZ5XZlOEtg=
Subject key identifier: B3:A3:80:F2:99:A7:ED:8C:08:20:9E:ED:68:96:FD:3E:BB:67:9A:FD
Authority key identifier: DC:98:98:EC:BA:C7:DD:B3:9B:20:EA:99:B0:38:D2:6C:46:A8:24:D4
Certificate issuer: /CN=dc9898ecbac7ddb39b20ea99b038d26c46a824d4
Certificate serial: 01A01C7829EBDBE22B3CF1469FDBBF2C425F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
Manifest number: 88
Signing time: Thu 20 Aug 2026 00:00:32 +0000
Manifest this update: Thu 20 Aug 2026 00:00:32 +0000
Manifest next update: Fri 21 Aug 2026 00:00:32 +0000
Files and hashes: 1: 3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl (hash: R6CVyQPPR44CtQKxFSQGGfXtz7Ssgv/sui+jTdtQZd4=)
2: lGfDr1-zqft5sxdN3ZBuxYLpJQ8.roa (hash: HUobi3hV3dki/qkxRm+DIA0moIcySUJXJvx1G//m6cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1c:78:29:eb:db:e2:2b:3c:f1:46:9f:db:bf:2c:42:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc9898ecbac7ddb39b20ea99b038d26c46a824d4
Validity
Not Before: Aug 20 00:00:32 2026 GMT
Not After : Aug 21 00:00:32 2026 GMT
Subject: CN=b3a380f299a7ed8c08209eed6896fd3ebb679afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:91:23:b9:5b:dd:d9:dd:5d:80:b3:5a:0e:
d9:c5:30:3d:26:7b:44:87:d0:cd:cc:b8:f3:39:fb:
d4:6b:29:6d:f7:61:09:a6:84:a9:e4:ff:64:7e:aa:
70:2c:a9:00:f7:91:b1:39:52:af:c4:84:2e:39:e9:
0d:ed:90:4e:c7:07:74:03:39:2b:c5:2b:c0:9a:9b:
60:20:80:95:2f:c8:e9:fa:ee:19:0e:ba:67:e3:8f:
ab:80:91:a4:27:bd:87:45:83:70:16:56:60:7b:ee:
2e:61:b5:b5:b9:2b:b1:cc:83:2d:70:36:b4:8a:14:
eb:53:5f:5e:8a:0c:59:bc:1c:b6:04:f5:02:b5:a2:
c2:59:04:03:cf:cf:bb:aa:cd:08:c2:48:41:d0:eb:
4e:4f:b2:22:d1:61:01:12:05:65:ff:e1:7f:4a:5d:
c1:cd:e9:8d:e3:18:e7:37:12:ea:b7:56:81:f1:92:
cd:49:be:76:7c:50:30:2c:8b:1c:72:20:52:47:fd:
28:97:b9:fc:55:88:f4:4e:76:ea:f7:fb:d2:7b:89:
21:89:a9:eb:c0:39:16:9c:d7:ac:19:bc:d5:95:84:
aa:b5:1f:ac:4e:30:2b:12:ff:41:05:b1:fa:cd:75:
cf:59:e7:81:7b:88:0a:c9:b7:31:b0:96:56:3c:60:
ec:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A3:80:F2:99:A7:ED:8C:08:20:9E:ED:68:96:FD:3E:BB:67:9A:FD
X509v3 Authority Key Identifier:
keyid:DC:98:98:EC:BA:C7:DD:B3:9B:20:EA:99:B0:38:D2:6C:46:A8:24:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:61:e8:e7:7b:5d:30:5d:39:30:8e:a9:98:10:c8:c6:5f:39:
da:83:03:b5:68:2f:f7:14:3b:41:da:fe:e8:5f:a6:b4:3b:7c:
f3:4c:f3:33:ba:c4:ef:d1:ba:a8:88:60:4f:30:2a:dc:4b:d5:
fb:8b:9d:0c:77:11:55:52:23:34:de:fa:f2:fc:35:4c:26:ac:
2a:c5:97:41:7e:6f:dd:1a:a0:89:28:21:3c:75:d9:93:7a:e0:
dc:fa:42:cd:99:a3:e6:32:20:7a:5b:37:9d:1c:53:32:50:7f:
d2:93:08:8b:ae:73:7f:f9:63:0a:71:ad:49:30:06:87:23:d2:
81:8e:e3:c0:d4:74:87:e0:9f:13:8b:f2:32:f9:a4:76:11:d5:
23:e2:ed:0c:8b:45:80:53:f4:9a:e1:18:17:86:34:38:de:0e:
d5:a2:4d:1e:a3:86:ff:74:bf:77:a2:97:b4:5f:f1:2c:c3:ad:
5b:f9:33:98:56:fe:82:81:de:e6:69:48:4f:19:c7:b9:97:e8:
5a:60:73:bb:da:56:45:e4:18:65:aa:50:03:87:ff:cc:be:e2:
d5:fe:a9:04:00:fe:67:0a:3f:63:29:da:1b:99:71:ea:49:e9:
22:02:cc:ad:ca:f3:e7:ab:81:01:97:56:98:be:22:bd:db:bc:
2c:da:06:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 09:09:22 2026 by rpki-client