Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
File: 3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json)
Hash identifier: d8+9PcX4QHFj4pGh2EWKElHPN9LbapEzTukyGQWkhPE=
Subject key identifier: 4C:E2:5E:24:ED:52:29:88:0D:F3:FD:BF:A7:E7:F6:9C:F2:22:CB:D9
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 019E1EDA1BF40AEC777A9707E7A01CE60F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
Manifest number: 0792
Signing time: Wed 13 May 2026 01:01:10 +0000
Manifest this update: Wed 13 May 2026 01:01:10 +0000
Manifest next update: Thu 14 May 2026 01:01:10 +0000
Files and hashes: 1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: 38N+hVXIduUVNbW7+tGQpJ9St8h4Mad2Nfqi7tN/V+w=)
2: NQ95q7_fBq4hFcM7C69i14yhMnM.roa (hash: ejJOBDnYVVoI5WWCPtoXZfJQheFohOE2AVvhuxDWrtI=)
3: pUGXrda-5CwDfT8dIuT70gU_mF0.roa (hash: erT2OQfqvKXCpo5RhfMrTrP52PKYM1WR0OlhH7BXo1s=)
4: zJpEN2ijfRgiPpGHtFsEVOdxvB4.roa (hash: q/PuTzWdeYcrIsP9D1aXyxve/lRb4cTeCB+ZsL9JRf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:1b:f4:0a:ec:77:7a:97:07:e7:a0:1c:e6:0f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: May 13 01:01:10 2026 GMT
Not After : May 14 01:01:10 2026 GMT
Subject: CN=4ce25e24ed5229880df3fdbfa7e7f69cf222cbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:98:09:8c:f8:39:04:f2:04:61:ab:26:b4:
f7:75:d3:b1:a0:3b:ce:71:03:41:6e:80:e4:4e:2c:
05:3f:7d:ab:d5:55:12:b0:9f:7c:db:a7:e3:d1:d3:
ce:a4:45:c5:f1:3d:51:98:8b:df:f9:70:81:9f:c2:
e5:bf:5e:38:76:a8:c6:c4:2a:bf:35:3c:d0:54:8a:
19:6f:c2:1e:da:02:af:73:3b:15:24:2b:c9:a0:2e:
b6:e7:1b:b2:3e:c7:16:4d:02:31:c5:ea:57:f2:e3:
8a:e7:ca:e8:e1:20:27:79:19:f5:20:ea:9a:fe:2c:
e9:26:c6:ad:d4:22:cc:20:46:5b:7a:b2:0d:4e:bd:
95:e4:7b:e7:a3:89:a3:15:d3:90:54:f2:b2:2d:4e:
b0:f7:59:8c:74:5c:3f:0f:10:f7:1d:8a:af:02:7d:
d0:d1:3c:ae:ea:af:22:33:25:ae:f6:35:00:35:bc:
8f:fb:df:ab:3a:4d:9d:18:6c:bd:5c:a9:23:9e:c1:
f1:70:48:cf:a6:eb:70:d5:74:74:87:9c:2c:72:42:
4f:91:9b:58:8b:04:fb:78:56:df:15:6f:e5:b9:1d:
03:bf:45:9a:d8:89:6c:8f:61:86:14:6e:6e:6b:5d:
13:dd:9c:0d:ef:12:f3:8f:c8:6c:6a:82:3c:da:0f:
30:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E2:5E:24:ED:52:29:88:0D:F3:FD:BF:A7:E7:F6:9C:F2:22:CB:D9
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5a:e1:1f:70:75:bd:c1:1b:71:87:a8:3f:56:da:6a:4b:a0:
05:91:a2:21:f8:4c:89:73:45:c0:bb:a2:79:39:91:b7:49:20:
78:d8:02:2a:6d:de:dd:84:d4:dc:d4:4a:b2:ad:4f:40:97:bf:
36:dd:d4:67:f3:1c:0a:a0:75:37:97:73:f6:65:2c:33:93:ca:
8a:6e:fe:96:32:fb:a5:d8:16:ec:bf:b2:63:f8:7b:7b:d3:a2:
94:13:e9:e0:50:ab:2a:35:33:55:3a:87:98:23:f2:a3:1d:33:
39:68:dd:6a:cc:6e:98:44:dd:6f:c9:82:f7:de:49:bd:73:97:
0f:20:43:36:f7:a8:58:c0:c8:46:fd:bf:a0:e5:a1:ca:85:f0:
a8:47:c2:80:ff:06:d9:b3:ca:33:fc:68:f1:13:ed:6e:8b:c6:
4c:b9:3f:bc:be:45:49:3e:89:79:1a:68:8a:ef:6f:b4:38:70:
b0:d5:68:1a:3f:05:19:1a:ae:47:47:87:e5:83:98:0c:76:88:
da:0a:34:16:e1:78:17:53:bb:51:be:e6:7a:65:7c:06:ee:5b:
f9:22:62:1a:47:0f:a2:ed:a5:bc:f1:df:b2:04:2b:d7:fd:0c:
7c:ef:66:5f:bc:0b:ed:20:45:8b:b1:09:cf:23:09:df:25:cb:
9f:c8:d4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:32 2026 by rpki-client