Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: uJ5YkjonqDgrRMx08IXtZyf3bS24EX6SyIzZxeTAM2g=
Subject key identifier: 66:E2:AA:51:E7:1C:DE:9C:A6:FD:A4:45:09:CA:A2:F6:90:18:56:5B
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 019E1D2268E8C3B40B0A0A3075037E06B747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 08F5
Signing time: Tue 12 May 2026 17:00:54 +0000
Manifest this update: Tue 12 May 2026 17:00:54 +0000
Manifest next update: Wed 13 May 2026 17:00:54 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: C38PDPWGShU5GE7+19ViLM97L8CZyGm9bjeGmjapyDA=)
2: szG4-iX-wy9Ea4Hl_ZxkAAsV2VI.roa (hash: KBtNUYEno10Fs+9SpyYwnipEOPhepmYstt4xaQRcuLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:68:e8:c3:b4:0b:0a:0a:30:75:03:7e:06:b7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: May 12 17:00:54 2026 GMT
Not After : May 13 17:00:54 2026 GMT
Subject: CN=66e2aa51e71cde9ca6fda44509caa2f69018565b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:f0:64:ee:bb:c6:09:1e:c2:5c:5d:d2:63:
01:5f:38:97:e3:87:bd:ba:c7:87:e4:3a:a7:df:1e:
02:21:eb:df:49:de:8d:9f:1c:9f:02:57:91:0d:bb:
3d:fa:4c:93:d8:72:85:fe:d8:08:2a:07:83:9b:73:
7f:5d:db:17:2c:e4:62:ce:98:31:73:8b:e1:ea:02:
1f:18:cc:8b:2d:81:01:48:d4:29:9d:7c:4a:f2:96:
cd:f8:63:7f:d0:d5:27:78:ff:90:f8:39:01:d7:65:
a4:53:52:f7:6d:b3:97:dc:12:fa:98:ff:2b:f5:8a:
81:24:65:57:3e:84:09:55:86:b2:f7:d6:7f:f4:0d:
74:a8:8d:cb:64:aa:9b:c5:0f:bc:ae:d5:aa:fc:ea:
6a:ba:82:4f:b5:aa:95:59:68:7d:fb:76:d8:27:eb:
b0:d5:85:10:e1:bc:d3:91:34:bc:41:4f:11:1f:b6:
c4:69:7d:80:da:4c:d4:89:4c:9f:92:62:6a:98:a2:
64:c1:f9:8a:78:58:6a:c7:a2:6f:fc:50:d6:da:72:
9b:6f:a8:ff:a1:29:f4:9a:e2:ac:6a:a0:b8:43:3b:
af:5d:32:d0:26:4b:9b:da:74:bf:76:89:d3:30:dd:
9a:7b:83:1a:b9:41:83:80:86:27:24:91:fc:95:b1:
a1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E2:AA:51:E7:1C:DE:9C:A6:FD:A4:45:09:CA:A2:F6:90:18:56:5B
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:45:69:82:fc:e7:b2:34:e0:a7:1a:8a:6f:2f:43:28:a3:06:
46:5f:15:2f:93:05:f8:2f:0e:a7:c0:97:da:8a:94:24:0b:0d:
1c:6b:c4:ba:c7:13:e1:d1:78:48:a4:c3:b4:01:af:04:8d:17:
05:2b:f4:7f:d9:16:8a:19:ed:f4:17:cd:bc:0b:0f:43:26:7d:
3d:a1:32:93:ff:af:8d:bd:4d:ef:36:26:26:d7:64:82:12:3f:
c5:f3:21:e3:8a:4c:d3:f6:0a:b6:3a:fd:b4:12:70:a8:8c:c1:
76:9c:2f:2d:e2:e9:95:69:64:52:e8:81:c5:af:00:ef:b4:3e:
23:bc:0a:04:94:af:36:ec:44:22:57:df:2f:89:d9:df:32:75:
b4:d2:cf:b6:80:4b:f6:88:52:9d:7f:80:fd:06:1e:c0:a3:ff:
a6:27:f2:a7:5a:27:90:7e:4a:1a:54:0c:51:7a:7d:67:d2:60:
26:1d:e3:63:5c:5a:d0:12:bc:73:e1:9b:26:8d:1c:e5:26:c5:
21:cd:c0:fc:bf:93:57:d6:ac:97:d4:49:72:64:f1:9e:0c:7b:
dc:56:4b:6a:8e:54:7e:65:a4:5f:5c:77:a2:54:57:d9:e2:eb:
ca:58:14:65:83:ce:75:31:f5:67:95:17:4d:68:e4:d2:61:bb:
15:1b:46:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:00 2026 by rpki-client