Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
File: 3Hgh4by_bgdOpIFKqlxj47qBPF8.mft (raw, json)
Hash identifier: YNk6hEBqCb27NUdGeZZhs70s+qs88/CJBEuXZzcSycg=
Subject key identifier: 6D:66:DB:E3:04:F4:71:16:F7:C6:DC:B1:5B:23:15:91:22:F9:0A:85
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 01A024D67AF73B19AD04BD1A89860A4CC775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
Manifest number: 1A36
Signing time: Fri 21 Aug 2026 15:00:30 +0000
Manifest this update: Fri 21 Aug 2026 15:00:30 +0000
Manifest next update: Sat 22 Aug 2026 15:00:30 +0000
Files and hashes: 1: 32lYY6uEr5NQiZ36Yw1PDpEB0LE.roa (hash: nbIrlyDfM/OsIW8q6DxR5+MKnNJS4Cwv/h7ugS3W6kw=)
2: 3Hgh4by_bgdOpIFKqlxj47qBPF8.crl (hash: jUx0cw855HHBgY+TslguCnXXuCymOpW5152XJu75CoI=)
3: 4brBRSXd-3J0XI6W1cQMml969rM.roa (hash: HAAIbdurASwhGqOl0EqIaoNlObK5qBtHlNL6sAbPYAw=)
4: CV0Da0hDhTImPAfNEKg1Zmq-t4Y.roa (hash: gRQv5O+XgMBfojo8WrrSJ295oJBia/Hac6oJn0s/JA4=)
5: NS8B9quAxg9DaONCvo-F09E4aHg.roa (hash: 611N6cJ08ljysAfZN/DDvW2PaFTUCRX+l4eXQLoeFWE=)
6: YorSmVSKuGvPWA7DA6m1cRcL1FY.roa (hash: qU63ylCGxnEyiZbz76RKuCXngXRAm2RLSoEhfEzs9Wk=)
7: ZkI0BKv7hf_ucyX53-0WeS2FZU0.roa (hash: /W5mPhl5tNlOLzwA/Si8gsOL5g4fr6fls1AqWYZxDGY=)
8: hsVsux8sHzZqQOz9MIXAz_SM6VI.roa (hash: 3Hc4odb8fRJz6qv0eC3Z9gpTtQGDv+DPG+2jWtEDSs8=)
9: vulmYW4p9PU9wnTvn-jVp44qOCM.roa (hash: MXgO5bfy+NsKZlh8zhQJtMRiH5fhuEIemBIGiWuNsdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:d6:7a:f7:3b:19:ad:04:bd:1a:89:86:0a:4c:c7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Aug 21 15:00:30 2026 GMT
Not After : Aug 22 15:00:30 2026 GMT
Subject: CN=6d66dbe304f47116f7c6dcb15b23159122f90a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:b4:86:4d:3e:86:12:5e:5b:a7:7a:f1:62:
95:49:47:00:1e:7c:2d:e0:7a:fa:e8:ae:2f:78:0f:
d0:45:25:7c:6a:cd:a3:19:0b:b8:7e:4b:30:a5:e6:
6c:8b:39:1f:bb:f3:a8:77:48:dc:c0:39:12:a0:a7:
2b:f2:cc:3d:65:19:aa:40:da:a7:41:ce:1b:3f:f5:
f4:fe:bd:e3:cc:b3:60:2e:3e:d5:22:c4:d2:18:c7:
cc:70:fc:db:6d:6d:d2:e0:f5:89:64:5c:99:db:de:
5b:2e:0b:6e:fb:60:1f:a7:9c:82:97:63:ad:57:81:
f8:25:45:bb:57:8b:03:12:d8:08:6c:23:fc:b9:94:
ee:96:4f:48:8b:ba:95:6a:b1:e4:cd:08:c6:02:de:
f5:97:2c:ce:de:04:7b:02:63:25:d4:15:de:41:b0:
97:ca:56:e8:ec:38:3a:03:1e:5b:16:6d:7c:70:23:
40:04:5c:ef:fd:12:62:12:4f:50:9f:45:4f:62:fc:
c4:c6:fb:91:31:39:e2:4f:70:19:20:2d:2c:48:2d:
9d:52:92:a0:7d:ce:91:e5:52:6c:e9:90:d8:61:5b:
0a:29:26:ab:de:e6:5e:8c:d1:ec:de:58:b4:fd:5b:
8d:c3:5e:e6:ef:ce:66:f1:49:ed:c5:44:ca:01:50:
1f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:66:DB:E3:04:F4:71:16:F7:C6:DC:B1:5B:23:15:91:22:F9:0A:85
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:14:06:df:3d:fc:b3:fb:80:29:66:c6:da:5f:0f:1e:07:4a:
3d:22:72:39:a7:dc:ab:cd:12:1a:eb:a2:52:26:b0:c4:80:49:
c4:5f:02:3e:65:d5:0f:33:df:ea:ef:56:33:8d:80:11:0b:3b:
9e:00:b5:72:26:1d:be:37:5c:99:87:c8:f0:c6:62:61:ab:15:
cf:73:b2:77:f8:0f:66:40:4c:86:81:96:a8:af:9e:29:b3:51:
03:50:34:92:5f:e4:42:c0:20:0a:7c:b6:57:0e:0c:8f:cd:ed:
8f:aa:31:3d:21:1b:9e:9e:2d:1f:19:28:fe:44:1f:0c:70:f7:
f8:15:25:07:c0:03:06:25:a4:e4:d0:5a:41:23:8e:57:87:7c:
9e:9e:4c:40:78:b3:61:44:29:d6:1a:a0:59:de:91:b8:14:54:
ca:14:8e:30:9a:aa:e2:2b:9b:56:be:0a:bb:bd:8b:8a:82:61:
88:16:66:5a:13:b3:c7:54:5a:0d:f5:8d:0d:35:e5:68:1c:20:
2e:11:5c:c2:fe:17:e4:d8:6f:8b:58:d7:60:f5:79:5b:15:6b:
a1:8a:4a:b0:e5:e8:a4:19:c8:03:f6:61:b5:0d:bd:34:05:9a:
4b:19:ef:6c:20:fc:4c:85:9e:ef:e5:f1:22:00:55:a2:f4:2d:
0e:c7:28:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:04:18 2026 by rpki-client