Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: VpCxuNpAeQrpZiv1ze/xtw20nPmWIzNmQQr2L87PGkU=
Subject key identifier: 84:35:71:7E:2C:AF:D7:2B:CD:92:86:7A:85:BC:B3:7B:57:C9:77:34
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 019F8FEC9FE1ECF31EC05092C598DAA8910F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 09B5
Signing time: Thu 23 Jul 2026 17:01:16 +0000
Manifest this update: Thu 23 Jul 2026 17:01:16 +0000
Manifest next update: Fri 24 Jul 2026 17:01:16 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: kaHm5lU8IZmTzToiXLVCkrjv3OOLPd2p+TGlkW5/Ctw=)
2: szG4-iX-wy9Ea4Hl_ZxkAAsV2VI.roa (hash: KBtNUYEno10Fs+9SpyYwnipEOPhepmYstt4xaQRcuLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:9f:e1:ec:f3:1e:c0:50:92:c5:98:da:a8:91:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Jul 23 17:01:16 2026 GMT
Not After : Jul 24 17:01:16 2026 GMT
Subject: CN=8435717e2cafd72bcd92867a85bcb37b57c97734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:bb:f4:2d:bb:e6:fe:23:7f:19:ee:7b:c7:
96:a8:ee:f2:86:7b:ef:e7:14:52:49:f1:a3:e9:69:
73:a0:7f:f6:8e:4e:42:a4:f3:65:0b:88:ad:dd:26:
b9:f8:91:40:1f:23:8f:5b:af:7a:6b:dd:d0:00:e1:
d2:c8:d1:99:db:ca:d9:96:00:f5:35:3f:2b:42:74:
12:62:86:89:78:1c:23:32:27:52:16:cf:50:43:e7:
b7:80:0c:40:00:c4:39:97:46:30:f6:17:01:ba:e4:
b5:17:64:0f:f6:4d:2c:0f:3f:c0:85:e9:86:a2:09:
19:13:17:9e:c2:db:6d:ac:ca:43:81:91:c4:d6:d0:
f7:e1:9e:15:5e:22:4d:14:68:54:95:4f:7a:38:af:
0a:15:24:b7:b0:d5:79:21:fa:59:00:ed:74:1e:80:
5a:d6:2e:f6:04:6e:68:e0:bd:10:57:de:19:7b:28:
3f:3c:d1:74:09:d0:7b:71:27:cd:1a:0f:a8:98:b8:
14:b2:0f:4e:a9:79:21:86:e2:50:a9:dd:c0:bf:3b:
2c:fa:7b:2f:01:da:58:86:32:b4:ee:5e:16:0f:e0:
6a:a1:6a:32:fa:00:c7:46:c4:4c:ba:d8:0b:e6:86:
a1:6d:9a:35:f9:9b:ee:b2:ad:29:23:a8:b4:03:13:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:35:71:7E:2C:AF:D7:2B:CD:92:86:7A:85:BC:B3:7B:57:C9:77:34
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cc:2d:07:4e:2e:97:68:4a:4d:4f:b8:9e:f1:d8:c8:61:72:
0b:f9:ff:8e:81:72:99:f5:8a:f4:61:55:f6:94:e2:3a:10:e0:
c6:0a:da:94:05:4e:34:54:ca:bc:95:68:24:74:a3:c0:e5:7d:
a1:7a:2d:2f:87:fa:81:e6:4d:4a:28:47:fd:2d:45:9e:53:11:
e3:ed:b1:7f:0b:04:98:80:8f:79:01:e2:d6:7d:26:16:f3:44:
06:59:40:4d:07:ec:de:7e:77:20:4e:59:40:ca:be:de:6b:fa:
df:23:9c:aa:35:15:74:66:3b:d4:42:e0:fd:9e:c1:85:ac:14:
ce:b7:ac:24:6c:b9:55:99:08:61:0e:7e:59:6e:63:6a:b3:f6:
68:81:6b:8a:10:1f:80:a8:cf:b6:eb:17:1a:d2:7b:69:9c:4f:
87:bb:07:b1:9c:1a:ae:b9:0c:66:59:f9:4b:b5:01:b1:f1:23:
bf:db:e1:47:71:b3:09:a9:f1:31:21:e2:0f:78:93:1a:c4:f6:
9d:4f:a9:80:16:a2:81:d2:e7:9c:3e:4b:bc:41:e2:9c:ca:0a:
5c:c0:f0:72:23:f1:5c:6f:06:41:8c:c1:92:e7:43:7a:57:2c:
54:bf:86:7f:4b:31:9b:ea:11:0d:32:64:8e:df:00:da:f0:2e:
16:40:12:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7J/h7PMewFCSxZjaqJEPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjN2ZiZDY3NzQ0MWNiYjVjMGJkNDdiY2QyZjM4YmExOTJh
MzM2YTYwHhcNMjYwNzIzMTcwMTE2WhcNMjYwNzI0MTcwMTE2WjAzMTEwLwYDVQQD
Eyg4NDM1NzE3ZTJjYWZkNzJiY2Q5Mjg2N2E4NWJjYjM3YjU3Yzk3NzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooa79C275v4jfxnue8eWqO7yhnvv
5xRSSfGj6WlzoH/2jk5CpPNlC4it3Sa5+JFAHyOPW696a93QAOHSyNGZ28rZlgD1
NT8rQnQSYoaJeBwjMidSFs9QQ+e3gAxAAMQ5l0Yw9hcBuuS1F2QP9k0sDz/AhemG
ogkZExeewtttrMpDgZHE1tD34Z4VXiJNFGhUlU96OK8KFSS3sNV5IfpZAO10HoBa
1i72BG5o4L0QV94Zeyg/PNF0CdB7cSfNGg+omLgUsg9OqXkhhuJQqd3Avzss+nsv
AdpYhjK07l4WD+BqoWoy+gDHRsRMutgL5oahbZo1+Zvusq0pI6i0AxPsiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQ1cX4sr9crzZKGeoW8s3tXyXc0MB8GA1UdIwQY
MBaAFNx/vWd0Qcu1wL1HvNLzi6GSozamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMt
NzZkM2Q0ODBmYTY4LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMtNzZkM2Q0ODBmYTY4
LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMwtB04u
l2hKTU+4nvHYyGFyC/n/joFymfWK9GFV9pTiOhDgxgralAVONFTKvJVoJHSjwOV9
oXotL4f6geZNSihH/S1FnlMR4+2xfwsEmICPeQHi1n0mFvNEBllATQfs3n53IE5Z
QMq+3mv63yOcqjUVdGY71ELg/Z7BhawUzresJGy5VZkIYQ5+WW5jarP2aIFrihAf
gKjPtusXGtJ7aZxPh7sHsZwarrkMZln5S7UBsfEjv9vhR3GzCanxMSHiD3iTGsT2
nU+pgBaigdLnnD5LvEHinMoKXMDwciPxXG8GQYzBkudDelcsVL+Gf0sxm+oRDTJk
jt8A2vAuFkASTQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:42 2026 by rpki-client