
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File: 3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier: B3FHjdZWMUkFfssv5PKVmKObsSucqSIUkzGFqlmgJ8k=
Subject key identifier: 9D:AE:64:77:2F:55:2D:14:EE:9C:20:68:B8:67:6A:48:AA:75:07:CB
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial: 01A00282017150F94C8671A6CF7A7CF57F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number: 1A05
Signing time: Fri 14 Aug 2026 23:01:09 +0000
Manifest this update: Fri 14 Aug 2026 23:01:09 +0000
Manifest next update: Sat 15 Aug 2026 23:01:09 +0000
Files and hashes: 1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: 3xk4jPq+TgPEFMg+UM0bOE07qmWN4GVeWNq1yVQX++M=)
2: 5eF8s6L4dxVdQ8kG6JSRKH5Z-p4.roa (hash: W/wS7TiCIbBG/r7K+DfX8KMRxtkECp8i1kkTUjuuZaI=)
3: 5tcCkCr9HL184Lf-stMsZLwXzY8.asa (hash: W+8BBuc5L8FD4aYBcumTsMn0Sc7cRyfKyOoBOmnm+hw=)
4: Lt-JS9jFkT4UgaNicX0rbzX6mAk.asa (hash: xwZnxqjyxoKeHqIztJC/xo2eZabCtc46qjY8fPIJBWM=)
5: QfmBtp8KP7z9Jf5dlAT_B8Tard0.roa (hash: uRY0F8qxF9a6vSVsKTRXDUbGyb6OveIKtipgP1G7Ly0=)
6: V4te01z2mPYByn_WDoLME3CzX-0.roa (hash: gfJ/GwODtNT85oPrPT0DpykGNXUPo2/It/pR8L+5MmI=)
7: rtn1yFDMEF3uOmDML8IMWwUHHk8.roa (hash: z0koHkmAbR2uxvEhOZByMFluLfmEdIOonXQa6YxqrIY=)
8: ue-Y0ctMxDRIaXof8C95hwV8dOQ.roa (hash: FlHy0MeZzzmzPGhIk531V6sP1Eub2bevIcHJmxYMIHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:82:01:71:50:f9:4c:86:71:a6:cf:7a:7c:f5:7f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Validity
Not Before: Aug 14 23:01:09 2026 GMT
Not After : Aug 15 23:01:09 2026 GMT
Subject: CN=9dae64772f552d14ee9c2068b8676a48aa7507cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:3e:b0:89:2c:21:fb:90:7f:87:97:4a:22:
22:0d:e4:7f:b8:53:c5:de:a5:30:2e:41:ce:d3:da:
8e:d9:bd:57:20:79:35:5b:f9:6a:2b:99:ee:ee:a0:
47:ca:2e:f8:97:4c:4b:a0:d1:6d:7f:c8:51:32:cd:
bd:0c:14:a5:31:a2:52:f1:bf:f8:b1:ce:31:91:43:
af:19:a4:85:82:70:f8:8e:ef:b9:e7:56:a6:27:29:
ec:65:14:aa:df:06:7d:f4:a6:e8:66:63:3f:47:ca:
44:65:be:e1:e9:86:93:d1:a3:1f:ad:ed:50:90:ee:
0b:54:1e:e6:f9:b0:94:03:fc:39:85:3f:61:ac:17:
39:84:3b:66:a2:4a:44:68:1e:4b:ae:4c:ae:bf:74:
9f:17:b3:10:8f:98:34:98:19:0a:59:be:d5:b9:2a:
83:d3:2f:96:ca:fb:74:15:88:1d:44:75:43:04:e2:
30:c2:12:9a:bb:15:5b:a9:3f:ef:d3:8a:19:5f:4a:
6c:f1:f0:9a:85:39:51:5a:08:1b:56:e8:ff:1a:dc:
79:23:95:f5:21:b8:4b:ff:f1:5c:fe:e2:27:aa:44:
44:18:df:00:c8:06:ab:92:03:1d:ed:66:6f:58:b1:
75:56:3c:69:68:77:03:30:c5:bc:dd:a5:71:9e:de:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AE:64:77:2F:55:2D:14:EE:9C:20:68:B8:67:6A:48:AA:75:07:CB
X509v3 Authority Key Identifier:
keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5e:78:b2:33:91:c2:3c:2c:f2:3b:d1:87:06:61:4e:6c:68:
ae:f7:b4:c0:fd:10:9c:9d:b6:7c:99:92:50:3f:2c:34:b4:f9:
28:5f:f9:e9:cb:86:7e:3a:04:7d:b2:d1:12:59:3e:c3:da:b2:
be:6a:e3:bb:8f:a2:b9:4e:36:75:d1:31:56:3a:ce:f3:4e:ea:
0f:99:94:50:3c:d1:e2:0c:41:83:3f:48:5c:c1:84:f5:52:be:
3d:d4:41:ca:cc:12:35:3f:ec:52:b2:e2:a5:25:a1:82:65:af:
40:9f:ba:2b:23:bd:29:f5:87:d1:8b:d4:12:10:4a:7b:1f:68:
7a:c4:c3:ea:df:ff:e0:b0:4b:45:2c:38:c7:56:6a:23:c1:aa:
f1:40:c1:a8:dc:49:55:45:31:2b:6a:e8:f5:40:40:46:db:89:
6b:f6:5c:fd:c7:95:d4:c9:29:43:b7:fd:6d:48:74:cf:e5:71:
b7:0d:59:b2:cd:22:47:68:eb:33:e7:20:d2:22:59:78:8c:7c:
10:d0:6b:2b:e4:fe:57:a1:75:bb:b3:6b:e7:25:08:e5:30:40:
5c:b0:f2:53:02:8e:28:60:f0:38:3f:e8:d2:de:a7:1f:ff:9e:
a8:3d:a4:43:ef:9a:76:a7:e8:f2:b3:7a:fc:12:f1:a8:39:ca:
a1:0e:1a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:54 2026 by rpki-client