
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
File: 3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json)
Hash identifier: Ju+KJdXerA371HMCsYKdYgkM8UbAwlxB9TLdkIu+/xk=
Subject key identifier: 82:DE:E8:0E:7E:37:3C:F5:18:89:F7:F2:7F:6E:E2:D7:2A:27:AD:FC
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 01A001A5E948BBF0B69D8A73B2BB4C631217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
Manifest number: 088C
Signing time: Fri 14 Aug 2026 19:00:45 +0000
Manifest this update: Fri 14 Aug 2026 19:00:45 +0000
Manifest next update: Sat 15 Aug 2026 19:00:45 +0000
Files and hashes: 1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: kgeTt8sl1NIqErrkGeLPRRt1iduhLCAkKSTbRsCN9BA=)
2: NQ95q7_fBq4hFcM7C69i14yhMnM.roa (hash: ejJOBDnYVVoI5WWCPtoXZfJQheFohOE2AVvhuxDWrtI=)
3: pUGXrda-5CwDfT8dIuT70gU_mF0.roa (hash: erT2OQfqvKXCpo5RhfMrTrP52PKYM1WR0OlhH7BXo1s=)
4: zJpEN2ijfRgiPpGHtFsEVOdxvB4.roa (hash: q/PuTzWdeYcrIsP9D1aXyxve/lRb4cTeCB+ZsL9JRf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:e9:48:bb:f0:b6:9d:8a:73:b2:bb:4c:63:12:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Aug 14 19:00:45 2026 GMT
Not After : Aug 15 19:00:45 2026 GMT
Subject: CN=82dee80e7e373cf51889f7f27f6ee2d72a27adfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:72:74:1c:1e:51:58:07:d9:5e:2b:b2:f3:
e2:70:81:f3:f7:53:c5:53:65:aa:89:f6:ac:45:49:
98:41:7c:73:1a:a7:54:1b:a8:25:95:35:6e:cf:0d:
86:e4:25:a2:96:f7:49:d2:4f:75:c4:59:74:91:08:
c5:7f:3c:a7:90:3c:ed:ea:ba:c5:9d:52:c4:0f:62:
22:13:f2:ba:68:76:09:36:fe:8c:49:b8:a1:c7:38:
f6:65:cc:d2:c2:e0:99:91:83:42:c5:e0:da:12:df:
bb:7d:b3:d7:df:97:7f:99:7e:b5:cb:f5:08:c8:2e:
28:1f:62:77:9e:ac:41:86:4e:3e:37:3f:74:e9:c9:
44:43:32:57:f9:71:86:7d:fd:85:02:51:5f:9b:60:
05:ac:a9:bc:0b:a8:e4:6a:f9:e4:ed:07:d9:55:fa:
dc:37:20:2c:3f:53:2d:0b:c0:e7:61:e0:a9:78:bf:
26:29:89:bc:6a:8d:31:86:9b:38:ac:2c:8a:06:89:
21:fd:d1:03:e2:fe:cd:0c:15:37:09:3a:54:a2:38:
5a:a9:5e:07:e7:20:fb:c4:2e:f0:12:c9:68:b5:12:
d6:a7:fe:0f:f7:38:4f:73:43:64:b2:dc:62:25:7a:
61:a0:be:6a:c2:dc:d2:26:82:27:05:fc:75:c5:dd:
ef:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DE:E8:0E:7E:37:3C:F5:18:89:F7:F2:7F:6E:E2:D7:2A:27:AD:FC
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ae:ed:af:4f:7b:aa:43:44:ea:04:6c:b6:64:af:57:47:86:
43:67:35:41:9d:c4:6b:66:4a:78:32:fa:a9:39:66:5f:9f:5a:
91:02:92:63:4e:4d:42:28:e9:1b:5a:15:75:41:58:f1:f4:6c:
ff:cf:0e:5a:a8:f5:78:8a:f0:8d:34:79:8b:98:41:88:9c:81:
b3:75:52:63:a6:d2:44:9c:d3:82:b4:68:9e:df:1b:9e:3b:e8:
10:bc:13:4c:4e:bf:c0:11:7c:0a:75:b9:5f:51:10:43:fd:57:
ba:05:dc:46:d1:1a:ce:1e:0f:c6:5c:0a:1b:01:6d:2d:45:dd:
06:6f:6a:5f:82:db:37:56:f1:b2:13:86:aa:6b:b1:a3:c1:a0:
ef:f5:e2:48:97:e2:21:0b:3e:92:0c:8a:1d:9e:d0:a3:71:84:
e3:0e:16:c0:db:04:d6:4f:01:cd:e6:42:7f:5f:2d:57:8d:9f:
00:e2:6e:45:34:71:b8:0a:90:7d:59:d1:c0:72:62:94:bb:c1:
b8:db:9c:b4:2e:86:5c:ea:90:14:63:bc:a9:f7:4f:70:bc:21:
ae:9c:16:56:85:6b:06:3b:f5:5c:8f:37:fe:a8:80:3a:7c:34:
35:64:96:b8:48:37:65:1f:ee:54:aa:0c:6d:dc:81:44:39:a9:
a8:00:53:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:12 2026 by rpki-client