Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: HYUZd93MoA4W2XA6pZ32qpSCj3PSo76amQavBP4LJ0Q=
Subject key identifier: A4:87:B9:CC:D1:17:7D:F2:50:4E:74:35:82:CA:F0:0D:1E:44:99:1D
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 019D3940F7F5DFD61586B6CD165A002C5CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 087F
Signing time: Sun 29 Mar 2026 11:00:52 +0000
Manifest this update: Sun 29 Mar 2026 11:00:52 +0000
Manifest next update: Mon 30 Mar 2026 11:00:52 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: gQUObD/s0yoeF7byDF9EBPA9I5eieTwQLoU4IkyYNNU=)
2: szG4-iX-wy9Ea4Hl_ZxkAAsV2VI.roa (hash: KBtNUYEno10Fs+9SpyYwnipEOPhepmYstt4xaQRcuLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f7:f5:df:d6:15:86:b6:cd:16:5a:00:2c:5c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Mar 29 11:00:52 2026 GMT
Not After : Mar 30 11:00:52 2026 GMT
Subject: CN=a487b9ccd1177df2504e743582caf00d1e44991d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:60:d6:b1:70:40:cb:c4:20:d9:b1:ee:82:
a7:66:41:48:36:e9:56:5d:de:58:d8:40:64:a7:2c:
07:a5:dc:6b:a2:2b:e9:ca:dc:e6:36:2e:db:b1:52:
10:3e:ad:05:76:48:55:5f:04:25:94:f2:26:c8:c9:
b0:b7:58:dd:64:2b:3a:43:71:1b:3c:76:60:9f:4e:
7a:17:7a:ed:1b:1b:e2:f0:dd:88:ee:d1:3b:54:e5:
03:8e:97:dc:94:52:29:ae:13:51:38:8d:17:cf:03:
77:90:ca:d2:00:c3:2d:c6:39:7c:a5:37:ae:18:80:
01:8a:ad:5d:74:e2:0d:03:8a:f9:c6:9f:c7:00:c1:
ee:99:18:fd:d1:66:0c:70:82:27:f4:49:d1:b8:6b:
45:27:26:09:db:f9:b2:7d:ce:30:dd:6e:b7:91:87:
c3:58:fc:86:20:8c:13:ea:61:08:70:eb:a9:07:bc:
89:cf:8c:1a:ae:b3:10:cf:2c:31:28:27:c6:76:31:
d5:e2:d9:a1:db:26:8f:68:34:93:1e:67:76:cc:70:
5d:fb:75:12:91:6e:3f:40:1e:e1:ef:dd:be:f9:ed:
d2:b3:a4:7f:31:4b:b9:2a:d4:a5:f1:36:19:42:35:
bc:9c:70:9d:22:ff:f7:77:ed:e9:75:f6:a3:8e:47:
f8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:87:B9:CC:D1:17:7D:F2:50:4E:74:35:82:CA:F0:0D:1E:44:99:1D
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:76:8c:6a:39:f2:3a:03:1d:e8:49:41:5e:e1:9f:b3:b0:04:
e2:50:1e:98:64:88:17:37:77:5c:cd:58:fb:cd:6f:15:41:e0:
1e:d7:0d:63:08:28:52:41:ca:dc:08:54:03:34:1c:b4:e7:d9:
f2:14:c7:86:b7:ac:76:ac:76:b3:eb:02:27:65:c1:97:c5:3b:
87:68:76:ec:79:d4:07:4f:97:a2:2f:28:f2:58:41:4c:13:21:
e8:29:8e:98:89:51:a1:33:2d:93:1c:5a:7e:4e:53:ca:24:23:
36:5c:dc:98:0e:b9:15:a4:00:e5:73:c4:aa:19:2e:1d:98:ad:
b6:43:48:10:4d:49:8c:91:57:14:d4:64:a3:fd:cf:00:47:33:
11:60:46:02:a4:18:ab:79:ac:43:71:0a:09:dd:96:ad:a4:ba:
05:69:4e:0c:21:28:f0:4b:a3:bf:2b:f2:c6:cd:a2:6a:9c:62:
5f:ff:7e:e1:54:6a:ad:f2:20:a3:39:2e:b3:23:20:5b:3d:66:
4f:71:5d:c5:25:b0:17:f8:12:5d:ec:74:ac:a4:f4:b1:84:37:
2f:e3:da:de:cd:43:91:97:6d:29:65:5a:1f:75:98:65:d8:18:
06:f1:7c:9c:e4:b7:84:8a:e1:8a:32:d4:c1:46:22:89:42:05:
1b:9a:a3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:17 2026 by rpki-client