Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
File: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft (raw, json)
Hash identifier: aojXAiYGyNjY2IvTHRsj7YYlhqugm4Hy+Cb7p8XzpTk=
Subject key identifier: 2E:92:B3:D7:75:73:88:7B:DB:C9:2A:D6:5C:C2:53:37:5B:77:A3:F8
Authority key identifier: DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
Certificate issuer: /CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Certificate serial: 01A001DD46649BE6FD333778DE4D0FDC7E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
Manifest number: 1302
Signing time: Fri 14 Aug 2026 20:01:13 +0000
Manifest this update: Fri 14 Aug 2026 20:01:13 +0000
Manifest next update: Sat 15 Aug 2026 20:01:13 +0000
Files and hashes: 1: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl (hash: Liy9gkJEeego1pO/g9e4ZteKZKaqOpprsdp9/FzenCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:46:64:9b:e6:fd:33:37:78:de:4d:0f:dc:7e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Validity
Not Before: Aug 14 20:01:13 2026 GMT
Not After : Aug 15 20:01:13 2026 GMT
Subject: CN=2e92b3d77573887bdbc92ad65cc253375b77a3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:aa:51:e5:48:1b:8e:19:9c:6a:d7:24:c6:74:
ec:61:5f:a1:df:c7:dd:1a:51:f8:d9:89:4a:a6:44:
75:cc:02:e4:83:ce:8d:2d:e1:0c:d8:f5:53:8f:86:
0a:32:57:f3:68:96:09:ec:2e:d5:0c:24:4c:4b:7d:
db:3c:46:cd:fd:8a:4b:60:d8:a7:c8:ea:cb:6a:29:
6f:61:55:0d:2a:70:c3:05:87:48:c5:8a:08:de:5b:
b4:c3:1a:09:3c:89:fa:21:55:ed:60:71:07:70:b4:
9b:d4:60:91:85:49:0c:0a:6b:19:06:3d:f0:1e:2e:
64:03:3c:b8:6a:1f:f0:24:a9:cb:42:7a:34:44:5f:
8a:b3:37:23:e1:4b:60:fd:e5:b2:72:0b:06:84:dd:
13:af:09:bb:e9:94:c1:95:04:b8:97:71:08:2c:2d:
27:cc:e6:a6:5b:45:e9:a7:5f:6c:89:73:92:f4:65:
78:e0:3a:a8:b7:c3:fa:2c:2f:3f:d8:ed:b4:a5:3e:
c8:a7:26:ab:53:2f:31:86:82:77:47:33:e9:ea:ef:
f4:67:1c:c4:e2:7d:5e:6f:ef:1b:d1:b7:6d:7f:b7:
7b:15:0b:20:c0:6d:81:51:a5:22:2b:ee:0e:93:10:
f2:2d:92:cd:ff:70:f2:00:da:6f:d8:5b:12:19:08:
cf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:92:B3:D7:75:73:88:7B:DB:C9:2A:D6:5C:C2:53:37:5B:77:A3:F8
X509v3 Authority Key Identifier:
keyid:DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:05:42:df:5d:41:e1:04:72:dd:f1:d6:96:fd:c5:bd:9f:95:
ac:94:cd:1d:fd:f8:2a:2c:b3:cb:9f:0b:84:ad:fc:31:47:d6:
66:37:c5:1d:3e:0c:e0:b1:4b:d2:66:a2:c8:f3:77:5d:fd:c3:
11:41:54:c8:e8:1e:c7:d3:78:5f:c1:63:b6:18:52:00:d3:6e:
41:17:d1:3c:3c:36:22:0b:34:58:30:78:03:21:c4:8f:9d:af:
67:cb:62:9b:66:56:4b:af:09:ea:d0:98:31:39:ae:04:36:74:
21:e0:af:27:16:9b:47:a9:4f:6c:4c:12:6c:88:68:a7:10:50:
1b:ff:0c:96:94:5e:dc:b6:70:17:a5:5c:d1:8e:0f:0b:9f:29:
79:24:af:cf:7b:f2:f4:17:36:50:eb:ed:97:45:0f:58:67:62:
fc:a3:1a:5f:df:ee:c3:15:92:17:28:14:3b:31:60:8c:6d:9e:
db:0b:ab:2e:0f:21:30:43:b5:ac:a4:24:3e:b5:a1:6e:59:c9:
03:1b:b8:d5:0f:4f:d4:ca:83:8c:f0:fc:c9:14:2d:70:21:31:
34:5a:dd:51:a8:25:a5:e0:e5:8e:ce:65:7f:fe:54:65:a2:c6:
07:bb:7a:28:2c:a4:b8:53:7d:88:7d:6a:66:7e:2c:35:d3:e0:
50:60:67:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:56 2026 by rpki-client