Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: vb+zdp+JSJJkwHzUGP0lqrT8IoIZ3nL6FfyuCzen41Q=
Subject key identifier: D0:4A:DD:46:C4:89:27:06:B0:9B:0E:45:50:E6:06:06:22:72:B0:99
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 01A0CE916282163EE643045740A43E30A358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 0A5A
Signing time: Wed 23 Sep 2026 14:00:29 +0000
Manifest this update: Wed 23 Sep 2026 14:00:29 +0000
Manifest next update: Thu 24 Sep 2026 14:00:29 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: C+1dAb973bUscyPVK5R4ZLwpbiopqYXDiKOB3WnoPd4=)
2: szG4-iX-wy9Ea4Hl_ZxkAAsV2VI.roa (hash: KBtNUYEno10Fs+9SpyYwnipEOPhepmYstt4xaQRcuLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:62:82:16:3e:e6:43:04:57:40:a4:3e:30:a3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Sep 23 14:00:29 2026 GMT
Not After : Sep 24 14:00:29 2026 GMT
Subject: CN=d04add46c4892706b09b0e4550e606062272b099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:02:95:b9:8e:a5:c3:55:2b:fd:3d:9f:9d:
7f:af:ac:da:80:5f:53:ad:20:5e:63:a2:3a:fc:f8:
64:ba:ff:70:2e:88:15:5a:f7:43:1a:f4:f7:e2:01:
17:49:69:93:71:f7:c6:f2:a4:73:fc:f8:2a:79:29:
49:38:45:8b:3d:69:4a:b7:77:76:dc:f7:dd:c4:13:
96:6c:ce:2f:82:2e:56:43:34:a3:9a:ed:ee:af:ad:
f3:b0:4b:f3:ae:34:d0:ea:3f:e8:df:e9:64:b2:de:
ce:1d:9c:24:fa:a9:65:f8:d4:49:5f:cf:7b:03:26:
b3:87:d8:71:8f:d4:6e:20:71:73:ef:00:e7:4f:42:
63:b5:8b:1b:c9:89:c4:cc:26:93:9b:f2:20:74:08:
98:be:40:a2:45:d2:ec:80:eb:7c:d2:b2:da:dd:68:
18:02:6f:22:d7:05:34:c4:ce:25:fa:92:71:a8:2f:
23:3f:79:15:1e:27:8d:d4:91:10:22:88:76:3f:b7:
02:44:d3:0b:7d:1b:aa:64:4b:46:a1:ea:07:53:33:
c4:92:91:3e:3a:67:51:47:ad:74:9e:26:fd:6d:2f:
cd:ed:a8:48:02:3f:f6:c4:f5:bb:a3:55:bd:ee:16:
f7:77:ce:a0:89:a6:b1:29:ee:76:85:10:63:83:dd:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4A:DD:46:C4:89:27:06:B0:9B:0E:45:50:E6:06:06:22:72:B0:99
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9c:a6:a7:25:5f:b1:b5:28:2a:c2:31:dd:d2:56:25:32:28:
80:aa:9d:d9:fc:37:ff:86:c0:03:e7:02:1e:d0:d6:10:37:ed:
9d:14:2c:1b:23:4a:b4:96:6a:db:25:f7:a1:ae:cf:ab:6d:c4:
79:b8:29:a9:af:95:d7:dd:1f:62:72:7a:fe:db:5f:f4:98:5f:
01:cd:38:d7:79:b7:b6:f7:c0:e4:21:d3:03:0d:a5:cd:27:28:
3c:7a:cd:d8:a9:9f:56:83:3e:3c:8a:c7:a0:67:fa:66:62:0b:
d2:24:bc:b5:a9:4c:68:42:76:0b:88:8b:42:b9:a9:53:70:4a:
a3:57:9d:1d:60:65:e2:52:c3:e8:16:32:7d:88:ae:71:7c:33:
74:23:a7:0f:6f:ec:87:df:d0:57:96:de:86:50:1d:12:1f:f1:
b0:f4:b3:52:06:5c:17:5b:d5:e2:79:d1:e9:3d:cf:ab:13:af:
13:6c:dd:03:ed:53:08:6c:50:43:e2:3e:0f:c4:29:70:78:56:
2a:62:1a:5f:31:2b:59:a9:39:b9:b7:e8:03:0d:ff:91:cd:8d:
2c:70:1d:ed:85:b5:19:f5:24:84:3d:16:9d:75:d8:09:9a:a0:
fb:2c:4b:07:69:1d:27:04:5f:c7:bd:b4:ec:fb:3b:c3:7c:1b:
0a:de:39:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:50:02 2026 by rpki-client