Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
File: 3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft (raw, json)
Hash identifier: iWvkvRBecNEmX5ggEWDjtJvbQCnlQ98v43WDxj07ZBE=
Subject key identifier: BC:3C:63:89:E7:71:91:C4:63:17:37:AA:97:5D:54:D2:B8:C9:4A:30
Authority key identifier: DC:98:98:EC:BA:C7:DD:B3:9B:20:EA:99:B0:38:D2:6C:46:A8:24:D4
Certificate issuer: /CN=dc9898ecbac7ddb39b20ea99b038d26c46a824d4
Certificate serial: 01A0D3EF2DECFF24E94D0848367029D80541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:01:02 +0000
Manifest this update: Thu 24 Sep 2026 15:01:02 +0000
Manifest next update: Fri 25 Sep 2026 15:01:02 +0000
Files and hashes: 1: 3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl (hash: K86uK3sAUfYVmug81U+QbN+YaSykthtgTWoBwM37eRo=)
2: lGfDr1-zqft5sxdN3ZBuxYLpJQ8.roa (hash: HUobi3hV3dki/qkxRm+DIA0moIcySUJXJvx1G//m6cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:2d:ec:ff:24:e9:4d:08:48:36:70:29:d8:05:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc9898ecbac7ddb39b20ea99b038d26c46a824d4
Validity
Not Before: Sep 24 15:01:02 2026 GMT
Not After : Sep 25 15:01:02 2026 GMT
Subject: CN=bc3c6389e77191c4631737aa975d54d2b8c94a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0f:10:e8:0a:25:44:73:2e:cb:ce:ec:f7:5a:
04:82:c9:a3:0b:03:5d:74:af:db:a7:49:a9:66:d7:
82:fd:2d:19:9a:65:ae:36:36:cb:89:27:52:ce:4e:
f3:6b:ac:9b:0d:60:69:70:b7:61:27:81:88:c7:09:
21:7b:08:75:5d:ab:db:ab:02:c3:5a:3f:40:f5:48:
01:eb:27:1d:46:28:3b:a5:06:d5:fa:db:57:6f:db:
06:12:e6:0d:9e:bc:e2:c4:b5:cb:82:f6:b3:1d:6a:
fc:83:af:9a:a5:9c:9d:3a:be:a0:b2:47:06:18:1c:
d0:90:0c:a2:f8:f3:b0:58:f6:2f:34:98:a5:a4:b7:
45:32:5e:2e:b0:96:b0:fe:f7:04:58:5d:85:2a:7d:
06:cd:55:74:22:f2:2e:a9:fe:d4:21:96:54:0f:18:
14:50:e4:3f:4d:92:ba:8b:f0:b8:fb:30:ad:d8:0f:
01:2a:18:de:01:a7:0c:4e:f2:99:df:21:1c:ad:1e:
40:71:ba:fc:69:7b:ca:60:9d:56:8a:a1:df:f6:3e:
0b:7a:4c:70:e1:ba:66:56:e5:45:6f:61:71:d6:e4:
d0:a4:71:7b:54:fa:93:2f:aa:57:13:5d:80:92:3f:
6d:07:66:d3:17:ff:96:55:d9:1f:b0:7c:b7:ac:ea:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3C:63:89:E7:71:91:C4:63:17:37:AA:97:5D:54:D2:B8:C9:4A:30
X509v3 Authority Key Identifier:
keyid:DC:98:98:EC:BA:C7:DD:B3:9B:20:EA:99:B0:38:D2:6C:46:A8:24:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0c:d2:8c:ab:c6:7c:f3:05:40:53:89:8a:d3:e6:22:f3:8c:
a4:4d:78:46:09:3b:0c:50:67:76:75:1d:d1:b4:a3:69:73:ca:
8e:cb:a6:a1:6b:56:7e:81:68:a8:62:9d:1c:d6:a0:89:ca:48:
59:1a:54:07:e0:a2:45:df:b4:7f:a8:2b:81:2c:48:52:c1:b4:
7b:d8:59:eb:68:00:8c:15:97:f4:92:4d:68:60:88:a8:81:95:
3d:45:61:59:84:dd:ab:28:c3:30:bf:13:0e:a6:fc:6b:4c:a0:
af:66:99:62:e6:49:d5:7f:07:31:f8:a3:86:c3:a9:fd:a0:66:
fb:79:d4:c8:e2:5a:2a:7a:1c:f2:b7:26:1a:0d:e2:ba:03:27:
23:6b:ce:be:63:4d:0e:40:30:08:35:0c:73:74:18:65:b8:0f:
69:90:3f:1d:1e:5b:db:19:da:54:cf:39:a4:52:6d:41:f6:85:
51:46:fb:05:20:1f:a4:0e:c9:54:f6:13:67:fa:91:5a:f0:df:
1a:aa:38:65:f7:a9:8b:e6:e9:8b:65:89:f1:f8:ae:85:51:0e:
d7:1c:47:10:96:27:41:52:8a:56:aa:d5:b1:c7:b4:6f:66:c0:
5f:31:03:48:92:39:88:56:57:99:63:ca:56:ed:ef:54:8a:bf:
17:f8:be:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:28:13 2026 by rpki-client