Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
File: 3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json)
Hash identifier: gYHCVqapeBN6L1pau76FEKFxVzMi3Hq6KJwueNJ+TBk=
Subject key identifier: C7:EA:25:CA:1E:71:04:FD:D4:74:E8:94:21:3D:BC:7B:09:31:8D:28
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 019DCDBD9ADFB514C3BF5403AC10FA9E2B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
Manifest number: 0768
Signing time: Mon 27 Apr 2026 07:00:48 +0000
Manifest this update: Mon 27 Apr 2026 07:00:48 +0000
Manifest next update: Tue 28 Apr 2026 07:00:48 +0000
Files and hashes: 1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: ns6gvUtPFNagKbYb3g+DeKqmUrgwZhMzyfN1Pl5sWDY=)
2: NQ95q7_fBq4hFcM7C69i14yhMnM.roa (hash: ejJOBDnYVVoI5WWCPtoXZfJQheFohOE2AVvhuxDWrtI=)
3: pUGXrda-5CwDfT8dIuT70gU_mF0.roa (hash: erT2OQfqvKXCpo5RhfMrTrP52PKYM1WR0OlhH7BXo1s=)
4: zJpEN2ijfRgiPpGHtFsEVOdxvB4.roa (hash: q/PuTzWdeYcrIsP9D1aXyxve/lRb4cTeCB+ZsL9JRf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:9a:df:b5:14:c3:bf:54:03:ac:10:fa:9e:2b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Apr 27 07:00:48 2026 GMT
Not After : Apr 28 07:00:48 2026 GMT
Subject: CN=c7ea25ca1e7104fdd474e894213dbc7b09318d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:cc:90:41:42:de:f2:15:df:bb:9b:f0:97:
a1:30:ee:6c:b1:e4:0d:9f:24:2c:82:c9:6c:48:c2:
f8:53:a2:c5:71:eb:08:cd:4d:3d:71:54:5b:60:09:
f3:a2:8c:cd:ec:00:4f:69:ed:14:9c:51:ef:0b:36:
7a:39:8b:e4:22:55:3a:0c:9c:09:0c:fd:47:97:99:
15:fc:c3:a3:93:1f:64:01:1d:b9:8a:18:28:93:00:
fa:25:1e:ef:3b:da:c3:17:03:53:01:54:0f:2c:1a:
4e:d3:04:06:86:50:e7:57:53:8f:10:15:61:05:63:
3c:91:70:22:96:1c:ba:f4:bf:41:cc:e5:f8:4b:80:
38:c8:c5:04:1e:08:6a:35:25:8a:8b:34:9c:3e:b1:
a2:07:67:9d:33:ff:43:ce:e9:89:b5:e5:eb:38:eb:
c4:f8:c1:1d:0b:26:a5:74:5f:d3:64:02:1e:dd:03:
bd:ef:b4:8b:ff:a8:39:c9:c7:0d:45:a8:db:6b:82:
f1:d3:8b:ac:f7:eb:f0:5c:70:5d:38:7b:82:80:02:
8d:7d:63:b6:b3:74:e5:e9:46:92:80:a6:a6:b6:66:
68:6c:54:01:01:45:99:96:e5:11:9e:0d:1b:4a:07:
37:79:4c:3c:b9:f3:20:76:51:7f:a7:d3:ff:28:28:
3c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EA:25:CA:1E:71:04:FD:D4:74:E8:94:21:3D:BC:7B:09:31:8D:28
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c1:51:ab:94:69:27:4a:7c:ac:91:86:20:88:a6:1f:ea:90:
03:1e:26:85:d8:f6:6e:9c:f5:20:07:60:ae:82:41:e5:cd:f1:
31:1d:70:64:40:b0:e8:25:d5:ab:2d:3b:76:5c:c5:cb:47:fd:
59:32:7a:28:13:9f:ed:f6:8e:0c:c1:ee:34:85:bb:dc:2a:32:
20:89:4f:8e:02:25:66:4a:81:8f:d5:b5:5c:ee:8f:e7:a8:08:
09:0a:31:cb:3c:87:32:62:56:35:14:7b:ec:9c:3b:58:54:f0:
38:d2:83:30:6b:b7:dd:a7:cd:8a:2a:a9:16:ca:af:aa:06:4f:
31:d1:8b:da:ff:7a:bc:b3:32:9f:83:63:12:36:aa:af:43:f2:
9b:4d:33:2e:da:c9:dc:e2:db:af:c8:8a:e7:b5:3e:cc:16:9c:
b7:7d:6d:c6:31:56:cf:29:4f:89:07:84:ea:f6:24:0d:0c:ec:
bf:3b:e8:fe:7f:37:a3:ff:b9:d3:51:14:b3:51:f3:73:9a:6f:
d6:41:52:8b:bc:75:66:1c:c9:48:48:34:4c:27:a6:ae:a3:dc:
1e:47:17:e0:07:14:28:21:97:d3:51:9a:b4:f2:3b:24:1d:b8:
2b:ba:74:7e:ec:cd:92:a8:7c:ee:11:58:63:ba:b0:53:c1:0e:
f1:f7:a1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:45:40 2026 by rpki-client