Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
File: 3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json)
Hash identifier: I4+jOXlvNpb2Tl8jkztG+41cNjyTTPZpPs3AqwW68YE=
Subject key identifier: A4:8E:D6:5D:01:95:AF:81:76:6F:4B:6F:D5:7C:29:02:51:B3:A9:A4
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 019D25BAC52DD2C818864199344E8DE141E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
Manifest number: 0711
Signing time: Wed 25 Mar 2026 16:01:30 +0000
Manifest this update: Wed 25 Mar 2026 16:01:30 +0000
Manifest next update: Thu 26 Mar 2026 16:01:30 +0000
Files and hashes: 1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: /gSZyOREPIGkN5Wj7cfITZD/6vlD4Y/4mAFf8p9Jer4=)
2: NQ95q7_fBq4hFcM7C69i14yhMnM.roa (hash: ejJOBDnYVVoI5WWCPtoXZfJQheFohOE2AVvhuxDWrtI=)
3: pUGXrda-5CwDfT8dIuT70gU_mF0.roa (hash: erT2OQfqvKXCpo5RhfMrTrP52PKYM1WR0OlhH7BXo1s=)
4: zJpEN2ijfRgiPpGHtFsEVOdxvB4.roa (hash: q/PuTzWdeYcrIsP9D1aXyxve/lRb4cTeCB+ZsL9JRf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:c5:2d:d2:c8:18:86:41:99:34:4e:8d:e1:41:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Mar 25 16:01:30 2026 GMT
Not After : Mar 26 16:01:30 2026 GMT
Subject: CN=a48ed65d0195af81766f4b6fd57c290251b3a9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:f6:56:67:6e:8d:08:2e:9a:01:9d:4f:35:
14:15:67:35:c0:6d:1c:20:f1:65:79:a9:df:51:b7:
d2:f4:5a:2c:27:1f:7c:13:54:8a:3b:c0:f3:a7:25:
f5:ab:ca:da:87:40:7d:5b:45:a9:e3:e6:39:a0:bb:
14:eb:92:59:a7:e1:cd:6e:c2:2b:89:d9:cd:e5:1c:
48:7d:7a:da:a7:4b:95:a3:ca:62:3d:b0:2f:6b:61:
ec:e3:f3:98:34:0b:23:e5:48:17:5e:cb:5c:ec:bb:
20:0c:5b:c4:7c:32:79:47:d7:23:a8:9c:16:0c:e5:
93:06:7e:ec:c6:b9:f0:3e:cd:78:22:7b:22:5b:44:
99:73:9d:d2:11:ad:a3:93:4c:de:be:b3:9d:58:51:
ac:b7:27:2b:36:16:b6:3a:37:22:55:91:89:28:04:
90:14:47:6c:f8:5f:e9:ad:8e:8c:b1:b0:86:b1:72:
a3:d8:b2:5b:8c:95:86:88:b2:7e:f6:d1:0b:f1:7e:
8f:48:49:f7:1b:2f:97:bd:b9:15:b7:76:ec:dc:43:
68:15:03:a9:4e:e4:a7:fa:e8:64:40:57:b1:17:4e:
d4:56:42:db:29:f8:a5:25:4a:77:b4:be:51:7b:0e:
98:e7:70:b1:8e:e9:8c:9a:60:2b:61:5f:a6:2d:1a:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8E:D6:5D:01:95:AF:81:76:6F:4B:6F:D5:7C:29:02:51:B3:A9:A4
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:71:ac:5a:12:76:8b:e4:99:ec:7b:c3:3f:5e:a0:80:93:f5:
b2:6d:0e:83:d9:06:0c:61:5e:d3:4c:43:b7:3e:a7:06:f7:c7:
ff:9b:c6:54:e6:30:72:a5:cf:0f:9f:6f:96:62:a6:8c:43:e9:
3e:2c:51:81:c6:fe:93:9c:9a:53:99:95:e5:9c:dd:64:b2:e8:
d4:0e:47:5d:73:70:82:99:57:12:a6:a2:f5:52:74:05:08:24:
5c:9a:2a:17:ef:61:e2:61:27:67:c7:8a:9a:be:70:cd:32:e2:
3d:c2:0d:70:7e:16:88:70:3c:88:aa:c3:ce:ae:d4:2d:99:45:
51:23:f2:15:1f:4a:1e:78:3c:ab:b2:86:01:75:ae:c5:6f:07:
75:14:71:c7:7d:c7:3c:c0:a5:51:15:13:d1:94:50:37:c6:f0:
08:79:26:15:20:b5:b0:72:92:d1:c2:a4:c6:cd:00:4d:bb:c5:
99:a5:2e:a2:35:0d:95:7e:37:7b:7c:ce:2c:de:1a:34:c0:af:
ec:02:ba:a4:df:d2:e9:36:9e:2b:c6:d6:e4:13:d4:86:e1:71:
90:94:cd:92:60:2c:46:50:0e:43:e2:f8:6d:2b:ee:fd:b6:4f:
af:bd:10:da:f7:f1:5b:b2:09:9a:0e:36:ce:6e:b8:f3:d3:be:
2b:9f:dd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:55 2026 by rpki-client