Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
File: 3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json)
Hash identifier: eY0StolcGpHDGxh9543pkdMJkR7ZPIp3DPvfsZ751EU=
Subject key identifier: 8A:EF:30:EE:3E:DA:41:5F:A4:19:BE:23:28:11:73:62:3A:35:93:4B
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 019F9135BDFEAD5FD63D989BDB70F47DC18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
Manifest number: 1935
Signing time: Thu 23 Jul 2026 23:00:46 +0000
Manifest this update: Thu 23 Jul 2026 23:00:46 +0000
Manifest next update: Fri 24 Jul 2026 23:00:46 +0000
Files and hashes: 1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: 4i1qqccsxCbFL+AAsIHHLpE2wdVe6Ao5pEnp2LLOCHM=)
2: 7UD9mSTFV8lFN4ROehlHuZ5VKzk.roa (hash: 7/SDaPbxGJSgvje7ZyVfzpaTxUzpeca2cxXLtLcUMNc=)
3: 9QdlknWZ4OMboGxjAADXJxO9UPA.roa (hash: sI6mV2VF/PMi0q/p4atmEH2bb6DPFyZGr7glssOf33c=)
4: WNlY6EleMRRBrp6sZUEH7DxvZlc.roa (hash: dLCuSMcuIVzwoKSwK9PkR1g78fv8OGI64PcrszyfgyA=)
5: ekV3uRphNew5aOcMQo-s8iHH-AY.roa (hash: FE+IQctGJcO3sSaP7HNmckkGvxU4kU9yBANBqpeU4lI=)
6: f4_ZJ0TCTzsSkqudnJSIXp4bLQ0.roa (hash: W6ac4Me1PrNz+AfdrWTNIVyjCCLobhnKb0ISiPAW2p8=)
7: nWay-kjM-uXQonlEIzksgPJ2hIY.roa (hash: QNv+cuZE5AYtfPUCgiQFK8fsilnJCXuMMkCSBo7INTo=)
8: trpSFTYBfP1Vvg7yfH-5OGH9MeQ.roa (hash: VU1m0yBvVvk7PN74r9OfMGcifzfFHUwb4uMDuxPUkZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:bd:fe:ad:5f:d6:3d:98:9b:db:70:f4:7d:c1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jul 23 23:00:46 2026 GMT
Not After : Jul 24 23:00:46 2026 GMT
Subject: CN=8aef30ee3eda415fa419be23281173623a35934b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:6e:66:63:47:95:47:df:c4:54:e3:44:17:
37:43:27:bb:b8:74:bd:bb:bc:e8:a5:7c:12:0d:55:
d9:05:33:8f:1f:6d:6f:38:1c:e7:a3:dc:50:aa:3e:
34:94:bd:53:ea:64:e7:46:5c:87:c0:99:bf:1a:a4:
19:86:8e:d2:3b:d4:47:22:a4:af:5c:26:df:20:cd:
01:c7:cd:9b:90:82:2a:27:49:13:1a:25:28:63:c9:
4f:e2:8e:82:f3:a2:71:5e:d5:a8:96:76:11:ee:68:
00:7b:84:1f:19:1c:e1:e9:d0:36:f6:c0:02:ba:e1:
e2:4e:7e:79:20:b2:26:ff:25:a6:98:9f:fd:6d:47:
0a:32:b5:a9:4a:cc:88:e5:83:10:6b:25:91:76:2b:
e5:ca:62:3b:61:46:90:23:90:09:9b:e0:5d:5e:2d:
30:30:40:16:04:cd:24:3f:57:7f:b7:db:58:8e:78:
89:04:be:42:45:c0:80:bd:ea:e3:e5:c6:30:64:dd:
17:48:64:cb:d8:59:4e:ea:15:2b:29:7b:cd:9a:38:
e6:fa:b3:62:d4:1e:1d:55:91:12:cb:0d:9b:f6:28:
70:06:cb:70:9d:72:bb:9c:bb:70:10:2a:ba:ba:48:
58:fa:b4:ec:b4:8e:b7:16:c4:5f:28:7b:14:4d:2d:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EF:30:EE:3E:DA:41:5F:A4:19:BE:23:28:11:73:62:3A:35:93:4B
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ac:ea:b8:65:4f:e3:5a:e8:16:79:81:b0:6c:16:b9:c6:f6:
67:32:07:ad:68:63:55:67:cd:83:86:8c:ff:a3:ba:12:d8:1f:
75:b3:8c:5d:2e:0b:bd:ba:47:15:97:d4:26:c0:2c:3b:48:99:
29:c2:f8:86:0b:fc:e7:ed:52:37:06:27:92:67:f8:bf:ad:b4:
27:fe:a9:00:fc:39:dc:0f:c7:3b:3d:e0:da:35:22:ad:91:9e:
d0:3a:78:21:be:92:4b:01:43:76:61:87:e2:06:f2:57:4a:80:
dc:a3:6a:0a:c9:0e:f5:10:b3:26:02:9e:3c:bf:cb:8e:a1:38:
41:f8:34:6b:e9:3c:47:27:93:61:02:c7:b0:b3:14:d4:35:44:
1b:a9:49:e9:32:26:94:a5:54:bb:38:61:22:0b:37:39:fb:1d:
8c:7f:21:3c:2a:38:de:ae:e6:e8:38:b7:bd:3b:89:93:53:71:
20:a9:b1:e5:d1:b4:98:c1:06:39:79:90:8f:78:50:54:b7:dc:
21:c0:0c:8f:82:cb:e1:a4:3b:75:68:f8:bb:d7:d5:87:60:00:
0a:11:e3:f5:34:b3:8e:56:11:3c:b4:3b:27:7b:75:37:b3:45:
e4:8c:4d:85:24:74:4b:c7:d4:90:9c:5d:fb:37:48:7a:f5:74:
5d:84:e0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:17 2026 by rpki-client