Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: TKvE6pa2WAu6wJ0I6bg2b+zO910XQB0xIEpSRir0Si8=
Subject key identifier: 39:1C:E1:F4:92:6F:69:69:AC:D1:54:72:A5:BE:78:07:33:E6:0F:AB
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 019F1830A775A34BF38615F0BD9498D979FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 0977
Signing time: Tue 30 Jun 2026 11:01:09 +0000
Manifest this update: Tue 30 Jun 2026 11:01:09 +0000
Manifest next update: Wed 01 Jul 2026 11:01:09 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: R/nXneDf2u6cIS1MnnuvpOqsFfvGCgiJb/uiaIsUW78=)
2: szG4-iX-wy9Ea4Hl_ZxkAAsV2VI.roa (hash: KBtNUYEno10Fs+9SpyYwnipEOPhepmYstt4xaQRcuLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:a7:75:a3:4b:f3:86:15:f0:bd:94:98:d9:79:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Jun 30 11:01:09 2026 GMT
Not After : Jul 1 11:01:09 2026 GMT
Subject: CN=391ce1f4926f6969acd15472a5be780733e60fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:a6:00:40:7c:58:5b:fd:dc:c7:f5:74:75:
b3:b9:0a:a7:b2:da:fe:e2:ec:a8:90:2c:fc:74:a3:
94:4b:53:73:52:3f:c3:e3:54:3b:f2:1e:9f:d6:e7:
e5:ce:c6:f2:a6:ba:b4:48:39:d3:0f:a9:3f:98:e2:
5e:25:12:59:9d:33:dc:e1:4a:96:40:f1:e8:aa:df:
cb:25:64:fd:ef:82:58:07:39:ad:78:2c:ab:42:ab:
5a:03:04:fe:4c:d7:fe:94:98:55:f4:10:ab:c0:f5:
4d:72:99:ba:0d:85:29:fa:4d:db:ca:ca:59:88:51:
0a:f4:fb:40:74:48:23:f7:a5:88:09:f3:3f:f3:85:
7a:41:07:8d:18:71:c2:45:a2:d7:1e:6b:57:99:c6:
80:f5:ae:15:3c:fd:c0:ff:d5:40:50:07:af:71:a6:
42:47:bf:e1:fa:2a:80:f8:b5:b2:19:cb:aa:01:31:
ef:f7:9f:62:9b:1e:74:e8:72:04:46:1c:7b:cc:6f:
28:b7:21:7c:62:21:7d:ad:99:d7:00:14:85:87:37:
e1:3c:20:e6:e3:43:f5:12:90:a8:02:a7:c7:72:5e:
28:7f:60:2c:35:1c:69:3e:b8:cf:2b:3c:05:e0:f3:
fa:4f:d6:6c:42:07:98:72:c1:ab:af:e2:46:02:d6:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1C:E1:F4:92:6F:69:69:AC:D1:54:72:A5:BE:78:07:33:E6:0F:AB
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e6:ce:28:fa:d0:cd:9f:f5:d6:7e:10:67:25:a3:c6:2f:5b:
21:43:fc:ae:b3:76:d1:d3:1e:03:42:62:a1:1c:ba:3c:d3:6e:
d3:14:98:b0:97:f2:0b:3e:94:d6:d4:1c:0e:62:9b:e3:f3:70:
b4:1d:4b:e7:b0:15:76:ba:e3:ba:a3:93:da:fa:6d:a1:18:75:
67:c5:eb:c8:bd:e3:37:e1:13:87:bc:d1:09:59:29:5d:aa:ba:
29:bc:30:88:7b:0f:68:a7:28:8d:99:60:34:10:e9:7c:6e:ca:
d8:5f:c4:d6:5d:bc:2a:cd:68:64:02:2e:83:da:95:ab:1d:51:
c5:33:35:e4:d5:7b:9d:55:e9:bf:68:97:d8:53:60:34:e9:cd:
7f:ba:8c:f5:c1:66:16:6a:bc:d4:90:da:5a:15:b0:76:11:94:
6d:a1:6a:c7:fa:ec:af:3e:e5:a4:d2:4b:ce:28:e3:04:ce:33:
73:1d:4c:9d:73:cd:45:a3:14:e5:19:65:b5:a0:68:c3:2d:36:
da:43:d9:d2:7a:5e:ff:0e:58:0c:89:ae:41:4c:a6:87:53:55:
52:0b:43:21:63:5f:fb:68:43:b4:6d:a8:48:04:75:e0:a5:82:
50:9e:5c:d9:47:79:73:8e:13:41:33:4a:29:d6:05:c2:9e:5d:
4b:f3:6d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:11 2026 by rpki-client