Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
File: 3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json)
Hash identifier: fIhW5TzwDbfFZQxmOFKp+5KuYOdpfg6PhKRxle1yHAk=
Subject key identifier: 07:02:40:A6:1E:10:84:D3:49:BA:39:59:6F:F7:AA:DE:5E:E0:C0:80
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 019F8FB557EED2DB2930281E42998A3E0A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
Manifest number: 0851
Signing time: Thu 23 Jul 2026 16:00:54 +0000
Manifest this update: Thu 23 Jul 2026 16:00:54 +0000
Manifest next update: Fri 24 Jul 2026 16:00:54 +0000
Files and hashes: 1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: E+vpiBaUvy8u+tlGebodYyLjq081knwCm2xXCptxVJM=)
2: NQ95q7_fBq4hFcM7C69i14yhMnM.roa (hash: ejJOBDnYVVoI5WWCPtoXZfJQheFohOE2AVvhuxDWrtI=)
3: pUGXrda-5CwDfT8dIuT70gU_mF0.roa (hash: erT2OQfqvKXCpo5RhfMrTrP52PKYM1WR0OlhH7BXo1s=)
4: zJpEN2ijfRgiPpGHtFsEVOdxvB4.roa (hash: q/PuTzWdeYcrIsP9D1aXyxve/lRb4cTeCB+ZsL9JRf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:57:ee:d2:db:29:30:28:1e:42:99:8a:3e:0a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Jul 23 16:00:54 2026 GMT
Not After : Jul 24 16:00:54 2026 GMT
Subject: CN=070240a61e1084d349ba39596ff7aade5ee0c080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:71:01:a6:0a:b7:06:1d:f3:8d:af:e4:65:
98:dd:8f:92:09:cc:b6:96:b0:b6:c2:72:1c:9a:5d:
1b:bc:3f:bb:f9:fa:10:7d:64:b6:b1:21:39:2a:29:
ed:10:08:37:58:8c:ae:4e:ab:e2:b8:1e:78:aa:bb:
2e:5c:d1:3a:80:7e:2f:c9:e1:33:68:a2:c5:d4:69:
03:7f:15:26:5a:1f:85:64:17:cf:18:a4:de:ca:33:
1b:ce:78:5e:5a:1a:f4:20:bc:46:d9:ce:2d:99:a8:
ce:7f:1d:c0:66:dd:0d:5c:99:14:ee:d2:ec:ed:a7:
5b:cf:5b:a7:62:26:57:eb:3c:36:3c:8b:8d:8e:73:
19:94:f9:12:ae:1b:d2:4f:4e:41:c8:68:c6:c9:ae:
1e:cc:32:b0:4c:d8:ac:7b:97:3f:67:65:4c:1f:7f:
7b:79:60:4f:09:8f:3d:22:5d:4f:33:05:22:71:96:
bd:4e:fd:42:61:2f:d3:46:67:bc:1f:f5:83:dd:1c:
84:27:33:69:ee:a5:57:4c:75:2d:61:2e:d4:fd:6a:
fb:d0:26:c2:ad:8f:10:9b:da:5e:5d:21:c7:96:f8:
1d:1f:f7:30:d2:5c:7f:99:fa:4e:03:c4:7b:4b:0f:
9b:34:25:7a:6a:5d:bf:e4:a8:d8:5d:2a:95:f0:20:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:02:40:A6:1E:10:84:D3:49:BA:39:59:6F:F7:AA:DE:5E:E0:C0:80
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a8:fd:af:a8:9c:8b:36:63:89:99:4e:be:dc:f8:52:40:ea:
d1:30:ff:56:10:84:4b:6b:16:7f:c5:57:62:ae:6e:55:20:e6:
d1:b3:82:f7:91:3e:47:1b:6e:64:cf:ff:8e:6d:fe:a1:50:f2:
3d:1a:a8:af:71:23:6a:ef:e1:25:74:de:f6:a8:b3:47:4c:7e:
6d:d0:40:95:40:a7:e6:f2:8b:fc:ac:97:38:4f:5c:25:a5:c7:
15:17:2a:43:a9:5b:c5:96:2c:5e:c5:ad:a0:aa:4a:d4:05:02:
68:b9:37:8b:b3:8b:66:2c:27:83:3f:50:d7:7c:ad:84:97:3d:
6d:bc:ee:78:37:5e:e2:fb:bc:4e:1c:bf:1e:6f:61:84:65:3a:
6a:1c:33:26:30:74:65:e4:c0:ff:18:37:fa:3a:e3:a2:ac:59:
07:83:11:e5:83:c1:fc:74:f3:a0:20:45:2f:4f:81:3b:bc:60:
6d:92:42:2f:60:f2:a3:24:1b:18:6c:53:1b:be:04:e4:07:ca:
d8:c2:e5:65:22:e0:7c:a1:42:16:ac:2d:39:21:f2:6a:6a:42:
57:3c:02:45:1c:d5:82:0d:52:3e:82:9a:8b:7d:5f:28:d8:9e:
0d:20:8f:1b:35:39:52:66:6a:f5:10:9e:4f:a1:69:1b:74:d8:
9b:00:34:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:58 2026 by rpki-client