Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: 8EnajlCtll0oCja+XPccuZ7FPLBXNiXRhdFuvRhSKNs=
Subject key identifier: 1B:B6:27:D9:86:AB:53:97:04:FD:84:34:95:AA:AA:BC:23:CE:07:B9
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 019E30726DBEF9BF8F1B4DEC5144E581FF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 08FF
Signing time: Sat 16 May 2026 11:01:05 +0000
Manifest this update: Sat 16 May 2026 11:01:05 +0000
Manifest next update: Sun 17 May 2026 11:01:05 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: gmapBlJ3gi+OAjOemHCy680uS6T2LoEehgGfsBF70nE=)
2: szG4-iX-wy9Ea4Hl_ZxkAAsV2VI.roa (hash: KBtNUYEno10Fs+9SpyYwnipEOPhepmYstt4xaQRcuLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:6d:be:f9:bf:8f:1b:4d:ec:51:44:e5:81:ff:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: May 16 11:01:05 2026 GMT
Not After : May 17 11:01:05 2026 GMT
Subject: CN=1bb627d986ab539704fd843495aaaabc23ce07b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:31:b0:11:3a:81:e8:bb:30:b6:71:39:76:a7:
a0:a1:71:b0:e1:62:34:12:cd:8a:4f:4c:d1:bf:53:
8c:35:85:51:dd:42:f2:e0:9d:3f:be:a1:a9:b0:78:
7c:00:e1:d9:3a:39:1e:99:31:e3:80:03:34:6a:2e:
5f:a7:f9:0b:cf:ff:19:2d:b9:7d:19:ba:32:f3:07:
da:5c:b5:c1:d2:74:fe:f3:c0:c3:6d:4f:7c:4f:68:
fe:5a:c3:2d:18:da:d4:27:ed:9c:da:9c:b8:56:58:
a8:e9:09:f5:a3:36:0e:57:1c:f4:8a:ef:db:07:e4:
83:c7:79:c6:3e:3b:ae:4b:07:56:1b:04:b9:8f:54:
f0:49:3c:6b:2f:c1:e5:1e:22:48:64:2d:a5:1f:47:
af:99:3d:f3:f0:09:01:18:36:22:e0:38:ac:b5:66:
3e:d3:a2:88:71:cf:64:7e:bf:e5:fe:70:50:ee:04:
b8:bf:26:c0:2d:13:af:5c:2f:ea:7e:27:6e:f0:45:
27:56:fb:0e:97:84:b1:1e:5f:08:60:6f:b2:46:45:
ed:89:f1:2e:19:4a:0f:fe:13:82:28:77:b0:71:c0:
dd:f7:bc:cc:4e:87:4f:9a:5e:71:96:83:d4:9e:d4:
aa:b9:83:a5:fe:9d:43:31:e3:27:9c:7d:c2:c0:54:
a3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B6:27:D9:86:AB:53:97:04:FD:84:34:95:AA:AA:BC:23:CE:07:B9
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:14:ae:0b:80:b7:29:cf:29:32:b7:b9:8a:61:f1:8f:6c:4e:
4b:07:fd:2e:99:f1:6a:5c:06:de:52:0a:e4:5e:27:97:4b:7c:
8d:96:81:f1:85:65:b8:b7:31:24:47:b2:38:92:dd:0b:c6:37:
6b:cb:54:29:c6:7d:f5:bf:06:11:0e:d2:fe:97:0f:0f:42:38:
47:98:70:9a:39:66:1c:f6:90:83:20:97:a8:cb:16:16:0d:9a:
73:03:4a:87:f6:68:5e:55:30:14:ec:8b:c4:fc:3c:25:25:52:
fd:b0:c0:61:54:df:9d:68:5c:a8:bb:fb:46:fe:12:8b:07:17:
3e:73:21:91:2e:e3:21:ff:77:94:54:57:f1:0a:cd:d0:23:80:
cd:2c:26:a7:a5:65:12:5a:30:46:fa:0d:d5:3c:42:1a:16:77:
eb:74:05:8c:50:46:6e:89:05:04:47:eb:df:48:73:b4:ce:a7:
99:49:10:c1:e5:52:72:ba:59:c2:97:59:26:9c:48:48:c2:b1:
8b:b9:8f:65:6d:8b:19:45:db:5d:71:d9:dc:2e:be:1e:99:37:
6e:6f:4f:a3:f5:14:e0:32:3e:3e:b9:36:aa:b7:25:7e:62:31:
4d:65:5d:31:89:9a:03:00:72:2b:5b:52:d7:78:22:16:fa:0f:
4e:02:91:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:01 2026 by rpki-client