Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: jEiKRj2wNV3mw5T5J/FG9yJ2iN6JeTsCUM0hXPLusgc=
Subject key identifier: 9D:F4:DA:95:99:0A:22:55:73:27:63:19:3C:EB:5A:97:A0:15:CE:DC
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 01A13E94F9A8E3BB1100D0DC911929940888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 0A94
Signing time: Thu 15 Oct 2026 08:01:52 +0000
Manifest this update: Thu 15 Oct 2026 08:01:52 +0000
Manifest next update: Fri 16 Oct 2026 08:01:52 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: RNfJBaYiGKyn9amBN0nI1V6Dh3b8uZ1jwVthYRaYewY=)
2: szG4-iX-wy9Ea4Hl_ZxkAAsV2VI.roa (hash: KBtNUYEno10Fs+9SpyYwnipEOPhepmYstt4xaQRcuLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:f9:a8:e3:bb:11:00:d0:dc:91:19:29:94:08:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Oct 15 08:01:52 2026 GMT
Not After : Oct 16 08:01:52 2026 GMT
Subject: CN=9df4da95990a2255732763193ceb5a97a015cedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:30:2d:bc:2d:26:fd:3c:82:9e:e6:90:6e:
97:49:f2:4a:e8:64:4e:8d:59:e7:23:b4:ee:c4:b4:
ee:96:3a:86:af:ca:54:f0:32:a4:ff:26:98:77:a3:
1d:e8:9b:dd:41:9f:8d:0a:63:87:53:3e:da:b8:88:
73:7c:b9:13:cd:db:10:32:8a:fb:fe:46:68:1b:dd:
9a:14:21:0a:6c:1a:01:4e:fe:96:0d:9f:2a:f5:40:
7c:8b:fb:85:a6:73:c9:3f:6c:f7:24:1b:2f:8d:80:
81:04:af:f1:6d:4c:cf:75:ae:47:00:ac:d4:34:c3:
4e:e5:3b:78:d5:50:05:29:7d:88:0c:17:64:5a:8e:
eb:52:56:27:29:20:51:75:3f:05:0c:af:20:ac:18:
a4:80:bf:07:dc:72:67:0f:b9:65:27:7b:fe:21:3b:
f6:1d:e3:16:0c:17:d9:69:c9:4c:a4:61:d3:15:3e:
f7:a6:f9:d5:6f:e3:8b:99:52:9b:46:18:fc:80:49:
e3:6d:38:80:56:d0:dd:4d:cb:52:83:5d:ac:9e:fa:
a8:ca:b0:90:73:5b:c2:46:6e:64:d6:0e:26:5e:c8:
16:be:ef:26:88:4d:59:fd:5e:87:86:5a:12:82:fd:
70:eb:3e:19:02:69:a0:7a:43:14:af:38:49:84:5c:
05:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F4:DA:95:99:0A:22:55:73:27:63:19:3C:EB:5A:97:A0:15:CE:DC
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:51:71:38:ab:19:ac:61:2b:d0:5b:4c:e6:36:75:03:5d:a3:
2c:e9:f4:33:6f:08:28:ce:9d:24:aa:5b:3d:47:8e:47:fa:3b:
37:63:08:28:b1:dc:fe:30:24:c0:b0:ed:67:4a:cd:62:f9:77:
c9:45:f6:44:bf:45:62:ab:65:81:7c:2d:dd:5c:60:89:f2:1b:
8a:62:15:be:8a:c0:79:63:24:76:84:32:14:92:92:39:f4:3f:
0a:87:31:b5:13:3a:f6:41:c2:db:20:a7:b6:b4:a6:a0:98:9a:
d4:55:37:7f:b0:60:5f:28:30:73:29:68:c0:60:3a:b7:5d:3d:
ea:ae:d8:cb:41:12:5e:4d:da:ec:dd:0c:3e:f9:87:d1:78:3a:
73:db:35:90:ba:15:57:c3:46:53:1c:de:18:5f:b9:e8:42:90:
55:86:78:6e:2a:a7:75:bc:d0:95:3a:f5:0a:62:98:10:04:95:
8b:b5:4f:2c:0f:ec:02:b2:5a:5f:64:61:d9:ae:77:8e:72:81:
5a:45:a3:79:0e:07:af:ce:89:34:d9:91:14:30:e3:ff:72:17:
ec:76:2a:86:a7:ce:09:2a:ce:dd:78:98:e9:f7:dd:ba:f9:a2:
29:e3:e9:63:91:ab:4d:75:32:85:8e:c7:12:55:ec:97:a3:66:
bb:a2:17:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:06:12 2026 by rpki-client