
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
File: 3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json)
Hash identifier: Xsqc3zhW9d5plO+qMTc20Om7wUQ7lbECZYvJM0uhIGY=
Subject key identifier: 88:F3:BC:E2:2E:24:59:A3:FA:E1:7A:3E:F1:E9:1C:24:FE:7F:25:F0
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 019D28BBE980CA3C5F1B95E88F181F5B2265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
Manifest number: 17F0
Signing time: Thu 26 Mar 2026 06:01:36 +0000
Manifest this update: Thu 26 Mar 2026 06:01:36 +0000
Manifest next update: Fri 27 Mar 2026 06:01:36 +0000
Files and hashes: 1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: VGo6Eb11uRZs3WSQjyxrsMTitwFoJTxEAwAxuTHrJ00=)
2: GaliuPIZanwNNTmC2l2PRqNaNHU.roa (hash: YuUytkg/afnUQ+5sEqzkuPU4hcl7BMXhycN/8oN5ZIY=)
3: f4_ZJ0TCTzsSkqudnJSIXp4bLQ0.roa (hash: W6ac4Me1PrNz+AfdrWTNIVyjCCLobhnKb0ISiPAW2p8=)
4: nAbHaxO3F_18HAXfxwmg-q53xPw.roa (hash: aQFQyHqG1hcOEyQibZ100kvvqbyGli2FgVSov4NcoCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:e9:80:ca:3c:5f:1b:95:e8:8f:18:1f:5b:22:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Mar 26 06:01:36 2026 GMT
Not After : Mar 27 06:01:36 2026 GMT
Subject: CN=88f3bce22e2459a3fae17a3ef1e91c24fe7f25f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:20:06:d0:da:f9:7c:ce:54:6b:1b:5c:ce:
e8:a7:26:19:62:f7:a0:79:62:cf:23:ff:d1:dd:df:
86:bc:ce:d3:cb:8c:13:90:2f:9c:48:7c:ad:63:8c:
89:eb:fd:53:5d:c3:f0:61:1d:97:26:5e:e5:cf:50:
a0:80:e4:bf:21:22:98:90:79:83:3d:0d:d4:b0:b7:
da:c2:4d:c9:fb:f9:d5:d4:99:98:4a:2d:53:70:b1:
eb:29:38:41:3c:9c:80:3a:77:51:73:74:ba:df:6b:
ab:4e:73:b7:0a:8b:c7:fb:a3:10:63:5d:ad:97:d2:
83:52:0c:8c:28:4b:aa:cf:20:08:09:b5:f3:24:52:
d9:28:f0:c3:23:dd:60:92:d7:49:d5:17:8e:a0:c3:
74:ce:30:f1:91:df:70:9d:33:3f:2d:3f:73:31:4b:
9e:ab:71:5c:d1:4d:55:64:d1:43:c9:f7:04:e2:a5:
df:cf:3f:c1:d8:b6:04:6e:c9:7a:1e:7d:35:32:9b:
33:49:46:2f:b3:ca:d4:6f:15:17:de:3f:da:bd:d9:
7f:27:79:2c:7b:d8:29:9d:40:2f:74:03:b2:85:ce:
08:04:be:df:ee:27:ac:0b:76:2a:2c:53:06:88:c5:
64:2e:b5:f8:e5:ea:b1:04:41:38:55:d5:31:c6:6b:
0a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F3:BC:E2:2E:24:59:A3:FA:E1:7A:3E:F1:E9:1C:24:FE:7F:25:F0
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:71:9e:ab:bb:7b:7e:dc:c9:f7:60:b5:c5:31:ea:c2:ee:0b:
e2:ff:18:7a:d5:4b:59:2c:a7:2f:ee:07:a2:8d:6a:62:58:3e:
ea:84:5a:28:46:e8:e4:82:05:66:a2:65:cf:72:65:d2:9d:c9:
c8:19:31:06:e3:2e:a0:c7:ea:22:2c:36:57:ac:eb:ab:13:ea:
08:02:7d:64:ce:5c:89:fa:61:ba:77:69:91:d4:02:4b:4f:4f:
9a:40:c7:92:c4:63:32:91:cb:f4:10:df:40:9f:79:82:4c:ad:
99:37:b4:d4:c1:7a:f0:dc:50:ae:2b:fe:f5:cf:1a:ac:78:ca:
f7:97:23:56:c4:42:01:f1:df:c2:3f:84:71:43:68:b5:d0:7c:
71:39:a3:7d:20:77:be:08:03:f4:ce:d0:f7:6a:2d:a9:f0:fa:
4b:5d:6d:9e:50:d8:02:de:18:6d:c6:b2:9c:dd:76:5b:bd:c1:
41:cb:36:62:88:3b:96:ea:84:44:20:53:f1:b7:40:33:0e:c2:
58:31:fd:98:9d:8e:28:2b:ce:07:17:33:9c:4a:36:c0:41:76:
c0:4c:8a:9b:6e:10:f8:ae:c9:7a:a4:38:86:a6:dd:54:2a:59:
b2:79:7d:27:29:f2:8d:f8:fe:5a:8f:94:f8:4e:65:63:5e:20:
dc:7f:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:12 2026 by rpki-client