Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
File: 3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft (raw, json)
Hash identifier: hhSPkM0QTs7dXrT+Az4kP2ZOb1FV74hd3gqAxvipQyI=
Subject key identifier: 35:37:4D:05:82:D0:8E:F6:DE:A4:F8:E7:D1:4A:92:4A:EE:CE:6F:FC
Authority key identifier: DC:98:98:EC:BA:C7:DD:B3:9B:20:EA:99:B0:38:D2:6C:46:A8:24:D4
Certificate issuer: /CN=dc9898ecbac7ddb39b20ea99b038d26c46a824d4
Certificate serial: 019F8F7E3A4C0C0AE9AC9A614830F643FEE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:41 +0000
Manifest this update: Thu 23 Jul 2026 15:00:41 +0000
Manifest next update: Fri 24 Jul 2026 15:00:41 +0000
Files and hashes: 1: 3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl (hash: fgGITQ/7BNHOcHmKd74Ng1pYgd2/LT4SdofdY93I+rs=)
2: lGfDr1-zqft5sxdN3ZBuxYLpJQ8.roa (hash: HUobi3hV3dki/qkxRm+DIA0moIcySUJXJvx1G//m6cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:3a:4c:0c:0a:e9:ac:9a:61:48:30:f6:43:fe:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc9898ecbac7ddb39b20ea99b038d26c46a824d4
Validity
Not Before: Jul 23 15:00:41 2026 GMT
Not After : Jul 24 15:00:41 2026 GMT
Subject: CN=35374d0582d08ef6dea4f8e7d14a924aeece6ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:47:bd:cd:ce:c9:8c:8a:70:78:6b:88:5a:
fd:0a:b3:d2:b7:39:8e:37:19:37:df:e6:62:cf:fc:
51:bb:36:58:89:f6:d3:a7:c1:4f:c5:f4:96:7b:60:
ac:20:61:de:77:d3:22:00:5f:31:a3:d6:61:eb:66:
dc:ce:cd:e7:f7:8f:c8:b1:68:c5:5d:8b:b0:16:3f:
33:ba:63:dc:36:07:ac:20:64:9b:74:81:57:d5:0b:
fc:f8:a6:47:26:58:26:e0:b7:df:c6:92:e2:a5:04:
17:e7:76:3a:64:16:25:d4:9f:6a:5f:cf:89:03:bb:
94:08:b9:ab:13:ec:84:d4:eb:07:ff:2e:31:9e:0a:
63:76:d8:4a:e8:10:64:80:9a:87:10:94:a5:12:ff:
a2:6f:d2:39:99:34:ed:3e:15:2b:35:dc:67:02:b6:
ec:93:73:52:9c:70:36:46:cc:27:d3:4b:d6:5d:db:
c2:78:92:e1:9e:4f:cb:14:f3:ac:c4:1f:51:b3:bf:
cd:9f:1e:a1:a3:da:66:28:ee:04:e0:83:83:21:be:
eb:ea:68:ff:f5:f0:a2:b2:e9:dd:32:57:3c:27:ff:
db:6a:d4:27:2d:40:38:59:2b:b5:29:1d:7c:1d:31:
88:77:68:af:d6:4f:75:ce:87:55:c7:38:82:35:1f:
12:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:37:4D:05:82:D0:8E:F6:DE:A4:F8:E7:D1:4A:92:4A:EE:CE:6F:FC
X509v3 Authority Key Identifier:
keyid:DC:98:98:EC:BA:C7:DD:B3:9B:20:EA:99:B0:38:D2:6C:46:A8:24:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:79:db:13:c5:ee:13:8e:ff:f5:49:ec:3d:22:f4:0d:b2:67:
fa:da:9f:05:9e:79:44:92:7a:0d:3e:ca:47:3f:91:21:82:c0:
fd:49:3f:22:d4:7d:30:b0:9f:13:eb:62:31:ce:26:bd:52:91:
3a:41:b2:13:b5:25:64:2a:7d:00:b3:f4:4e:d2:ec:a3:d1:5b:
f8:a7:b5:c8:50:d0:f3:d3:6a:5c:11:7b:4a:ca:78:cc:ce:bc:
77:ba:0f:aa:3f:aa:95:33:d5:95:4b:4d:80:4d:29:a9:11:5c:
f1:7c:c2:10:97:cb:0c:8e:20:ab:43:0a:6e:8b:b4:4a:1a:fd:
85:fa:62:55:68:5b:a7:01:57:e6:86:3e:84:d5:5c:7c:6b:8f:
65:23:dd:b0:1c:4b:84:eb:67:ef:8f:ae:cc:54:a5:95:39:c7:
65:8b:f6:59:41:5d:e8:96:c2:41:b5:d5:1d:7e:1e:a4:21:4e:
77:2d:e3:02:c4:ca:eb:18:21:3d:de:b3:d2:00:c2:5a:ec:0d:
1e:02:26:6b:01:b8:44:49:47:0e:bb:fb:75:03:12:3b:8d:8e:
ff:54:46:25:0c:92:63:d7:6c:31:8f:e0:ed:bb:a4:7d:e9:c6:
e2:d5:25:a5:51:89:ea:f5:63:45:f9:8d:ef:b4:4f:14:bd:03:
a4:04:7d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:23 2026 by rpki-client