Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier: kI2L+eUVsJ0oO89WbLXD8fxBDN1t2rR7dggtoRbb+Mc=
Subject key identifier: 64:16:65:4B:D3:D0:1A:EF:E2:45:77:8E:50:74:A9:65:A4:6A:F3:35
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 019F17C3024E1CD254F10C13BE24561B86EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number: 153B
Signing time: Tue 30 Jun 2026 09:01:23 +0000
Manifest this update: Tue 30 Jun 2026 09:01:23 +0000
Manifest next update: Wed 01 Jul 2026 09:01:23 +0000
Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: 5OOG2Big6eILe87fdH/mhqxFeZtpIL1fVip7i0xHjy4=)
2: VcgWyeq648Gc4ahE2H4P_5An-Vk.roa (hash: lpEbA2Oc/IvvrSvQYZYfTGRO3+SQWqSCIH6JyIv+3/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:02:4e:1c:d2:54:f1:0c:13:be:24:56:1b:86:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: Jun 30 09:01:23 2026 GMT
Not After : Jul 1 09:01:23 2026 GMT
Subject: CN=6416654bd3d01aefe245778e5074a965a46af335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:77:05:15:26:86:1b:07:dd:06:c0:0d:59:
de:ae:0d:31:a8:2a:c1:22:4f:c2:cf:26:e6:ad:a5:
98:e5:33:c2:9b:95:40:1a:4d:e7:be:7d:87:d0:8d:
4b:e1:c5:5a:00:69:3a:6b:c2:ba:17:0e:6c:06:ea:
96:e6:f3:b5:19:d3:d9:2e:b4:79:02:38:66:c9:19:
20:c5:e9:51:2e:8f:a6:30:6b:0b:a0:44:d7:59:d0:
5e:76:4f:d4:8c:08:c3:ef:c7:8e:85:55:cc:27:5d:
83:cf:4d:4e:d4:9b:9d:95:5c:33:aa:6e:c0:27:f6:
8d:4e:22:1e:43:e4:61:e4:0a:47:52:54:f2:2c:e4:
2b:9e:4b:92:f0:31:01:25:93:b3:71:cd:c8:f2:35:
d6:9e:ea:e9:40:68:aa:cd:b8:b3:ec:d8:e6:b9:83:
6c:2a:44:c0:6a:b6:36:87:f2:84:88:80:f8:89:80:
8b:f8:a7:5d:03:40:95:01:8b:29:b3:fe:32:f2:79:
3b:ce:af:9e:a6:5a:03:2d:68:c0:24:47:28:8f:42:
bf:02:49:27:39:bb:76:1d:a6:16:69:05:3e:ce:15:
bb:92:93:d8:de:a6:73:18:ba:88:3d:87:22:5d:da:
e1:e2:97:31:c4:8b:39:f4:70:10:6e:42:72:9d:db:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:16:65:4B:D3:D0:1A:EF:E2:45:77:8E:50:74:A9:65:A4:6A:F3:35
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b8:84:ff:c4:68:56:9a:8c:83:14:a4:08:80:b0:97:9b:93:
46:c6:8b:f9:7e:d5:c8:dd:27:95:5e:79:6c:fe:3f:03:b0:84:
51:15:b4:ad:b7:d1:b6:1d:63:e4:d4:10:f7:41:69:08:dc:33:
a8:9a:8f:54:b8:7b:9b:be:bc:6e:3c:3c:61:db:0d:86:90:35:
a9:06:40:aa:a6:3f:12:fa:7a:25:ec:af:25:ff:8f:21:c5:97:
d4:fe:42:78:03:4a:38:66:e4:bf:78:74:d6:ba:6f:dc:21:c7:
c3:dc:ca:c9:86:75:fd:d5:20:40:14:fc:e9:07:6f:62:1a:83:
64:eb:24:82:a2:e0:dd:d4:c6:ad:22:68:fa:91:96:95:5f:87:
80:65:0b:21:fa:f9:0b:fd:f1:ea:af:25:08:f4:eb:b9:32:ec:
5f:44:3c:57:d6:3a:30:4b:33:23:29:94:b3:b2:fb:91:b0:42:
69:7d:c0:a6:90:5f:63:1f:d0:47:7b:54:f9:0a:e8:20:b3:be:
1a:37:ec:4f:26:18:5c:b5:8e:90:4a:ff:41:0a:70:68:e2:eb:
46:a2:9a:ec:e2:23:0f:c3:af:a2:df:cf:c4:a8:ac:05:7b:8e:
81:6a:90:dd:88:92:b1:34:30:6d:ad:b0:7f:3d:a2:e4:71:5e:
86:af:d5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:09:35 2026 by rpki-client