Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: c0e+uFREFEKNg8+ytKF7bHxDp+J+FDQKudsbufhBwrs=
Subject key identifier: 29:2F:A0:26:B5:C7:8B:4B:8F:37:5E:D9:2C:D5:05:9F:BA:DA:F8:40
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 01A001DD9E2B98EEA11AD33C25AF58333909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 09F0
Signing time: Fri 14 Aug 2026 20:01:36 +0000
Manifest this update: Fri 14 Aug 2026 20:01:36 +0000
Manifest next update: Sat 15 Aug 2026 20:01:36 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: l3wn6PJ2FLoVn3qNzGypKOUALEbJYFANlq1AgQ5t6ww=)
2: szG4-iX-wy9Ea4Hl_ZxkAAsV2VI.roa (hash: KBtNUYEno10Fs+9SpyYwnipEOPhepmYstt4xaQRcuLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:9e:2b:98:ee:a1:1a:d3:3c:25:af:58:33:39:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Aug 14 20:01:36 2026 GMT
Not After : Aug 15 20:01:36 2026 GMT
Subject: CN=292fa026b5c78b4b8f375ed92cd5059fbadaf840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:a5:80:5c:70:16:06:32:ef:25:f7:e2:2b:
f8:db:e2:33:a5:4c:d2:8f:bd:44:82:e2:eb:b9:a1:
06:1c:a7:6f:b4:99:c3:52:f8:d4:c4:eb:8d:15:bb:
0a:29:4a:f2:8e:f2:07:71:5d:95:44:d1:9a:e2:a0:
5c:6b:ee:27:9b:45:2c:6d:37:a1:0a:d5:ff:9b:e2:
59:ac:6a:fd:5a:6f:eb:5d:be:d1:07:44:e3:53:55:
6d:99:bb:7d:cb:1f:76:e3:df:6f:46:fa:8a:34:3c:
2f:41:de:f5:8e:a5:60:5c:f9:9b:dc:c1:67:e0:1c:
a0:14:e8:53:a5:21:f0:68:3c:b2:f0:08:21:76:d1:
44:d8:7f:2d:10:61:76:f6:2e:2d:06:5d:5c:49:22:
5f:24:e2:c1:53:ab:8e:19:58:59:e2:76:38:a7:b2:
c9:4a:5f:b4:4d:fa:69:35:51:3a:43:c0:25:83:9e:
3c:4e:7e:9b:d4:89:8f:1d:9f:3d:e1:72:20:cf:61:
10:09:13:ca:2a:84:0d:d7:85:f4:0e:d5:cb:8b:c7:
10:ea:5d:cd:cf:35:bf:a7:62:e2:27:27:95:3e:b7:
14:67:66:70:49:73:22:e8:7a:9a:19:19:f7:52:26:
26:c2:dc:db:ae:06:83:7a:aa:2d:5a:e2:d7:5c:18:
2d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2F:A0:26:B5:C7:8B:4B:8F:37:5E:D9:2C:D5:05:9F:BA:DA:F8:40
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:dc:86:34:40:26:0b:a0:a5:68:c9:00:2d:19:84:d4:03:20:
ce:9e:3e:b0:74:16:5d:7b:44:47:21:d9:18:bd:f9:27:d5:ee:
84:be:ab:ad:df:75:c4:4d:59:66:4c:52:b2:1a:6f:34:43:3b:
99:ba:4c:18:82:84:6c:f1:b5:b8:b4:28:e5:b1:d4:a4:6b:da:
b3:95:89:15:1e:a1:c2:29:83:65:12:14:33:14:39:54:4c:26:
01:3e:8e:07:6f:bf:1b:c9:73:75:b5:c1:1b:9c:a3:bd:35:5c:
06:a7:a1:c9:39:b1:e8:55:8b:be:9c:be:86:e3:82:25:60:fe:
ac:37:6b:3b:a7:a7:59:b6:39:8c:cf:31:a6:e3:f3:df:ac:65:
e7:d4:1a:46:fe:5d:8b:9a:d1:50:d2:3c:b9:ee:d5:90:3d:88:
94:4f:e5:b2:56:18:f9:0d:b6:b3:c7:2b:6c:27:02:eb:8a:9d:
7c:be:df:13:e1:d1:ff:6d:39:fa:9c:71:d1:6f:03:a2:3c:22:
56:0e:f5:cf:f7:77:e4:d9:0a:9d:c4:98:6d:b7:11:1e:08:8c:
da:2e:b8:b6:b4:c1:91:b2:ac:d2:a1:26:ba:4f:46:57:3b:01:
c0:19:bf:2f:f0:ff:0d:f4:4b:79:7d:5a:37:85:41:44:c9:ee:
8d:f9:47:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:42 2026 by rpki-client