Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier: 8B6Pjqs0KbCbuUcjAKVNOGnhp2k62MrMt49Zu3Usq3Y=
Subject key identifier: E3:C6:82:77:35:E4:FB:65:DC:97:CF:FC:91:9C:A4:0E:F0:37:B2:0D
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 019E1CB5084D7E9BE763BE2D938A3AD65867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number: 14B9
Signing time: Tue 12 May 2026 15:01:26 +0000
Manifest this update: Tue 12 May 2026 15:01:26 +0000
Manifest next update: Wed 13 May 2026 15:01:26 +0000
Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: WsNmiqWRgQ6uiXLTEOpTny65Rd2hPeRZT4N0PPvjrFM=)
2: VcgWyeq648Gc4ahE2H4P_5An-Vk.roa (hash: lpEbA2Oc/IvvrSvQYZYfTGRO3+SQWqSCIH6JyIv+3/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:08:4d:7e:9b:e7:63:be:2d:93:8a:3a:d6:58:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: May 12 15:01:26 2026 GMT
Not After : May 13 15:01:26 2026 GMT
Subject: CN=e3c6827735e4fb65dc97cffc919ca40ef037b20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e9:47:42:d5:08:5c:8a:4c:37:84:69:a8:31:
3d:e8:3f:d5:b9:50:f7:be:90:cd:cb:44:e0:d6:72:
62:59:9e:a0:36:39:2e:fc:4d:0d:b3:32:9e:4e:ba:
82:f2:3d:83:13:96:43:ab:9e:1c:06:6a:ab:b1:39:
a0:52:52:c9:68:86:da:fd:38:ad:5d:aa:c8:3e:af:
7e:f9:4a:77:06:9a:77:b8:e4:8d:1a:69:5b:16:f6:
e4:3d:5f:bc:11:5c:21:c0:bb:f0:72:c2:93:5a:d7:
4c:94:09:11:a8:a5:13:d4:3f:59:76:7a:9d:8e:38:
6c:48:31:69:56:47:47:92:6d:78:8f:13:41:5d:e0:
2a:3e:e8:61:3a:aa:cf:98:69:1b:88:4b:c6:a9:bf:
f8:92:f1:03:f7:d4:79:76:f5:17:1f:8c:66:03:02:
47:9a:e9:f6:54:98:a8:90:31:87:67:78:e4:e8:38:
d6:37:97:f5:18:5c:de:58:ac:92:1e:72:e3:e2:3f:
32:ac:07:05:30:d6:f5:dd:2a:36:d3:53:dd:23:7c:
ad:a4:f8:39:89:c7:91:31:b3:b7:3f:a8:91:4f:e3:
01:39:51:5d:47:0b:e9:35:b6:15:67:95:bf:0b:2f:
1d:ef:c6:9a:79:f2:2c:6c:5f:b0:08:6b:a0:6e:21:
2d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C6:82:77:35:E4:FB:65:DC:97:CF:FC:91:9C:A4:0E:F0:37:B2:0D
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:72:2b:85:45:3f:35:9c:e9:cb:8c:dd:a3:bd:82:a0:23:9d:
9a:e5:c3:c7:d1:b2:6d:ad:bc:ee:34:c0:e5:99:3b:ee:e0:db:
45:fc:03:37:58:72:f9:bf:5a:7c:9c:2a:37:a4:b0:2a:e8:fa:
ea:f4:c0:b9:ed:61:99:4e:55:e0:82:7f:9c:49:9f:31:49:87:
f1:67:b8:2f:20:ef:09:3b:dd:3f:fc:9c:51:30:a2:f8:9f:42:
62:19:d4:57:52:f7:58:9f:72:7f:a8:50:e1:f0:f4:7e:c7:d7:
04:d0:03:23:b6:29:7a:d1:c6:16:2e:8d:ff:43:c5:86:90:83:
8b:b6:a5:95:e1:33:77:e7:c4:3d:fc:95:d9:48:78:40:e7:4b:
39:2d:c8:58:a1:99:8b:78:b7:44:85:18:7d:21:ee:ad:f7:30:
8a:a5:79:fd:f4:40:66:a0:4c:ab:e0:c1:b9:d7:3b:fb:33:89:
b1:9d:8d:78:5b:23:7f:8a:1f:68:7c:4d:61:f0:f7:63:ee:c9:
58:c0:96:d6:64:8c:28:d1:00:d8:3f:28:5a:0f:f4:7e:b8:9b:
b5:5d:da:ea:a7:8a:52:d5:a4:f5:cc:18:ad:34:a4:d1:2d:64:
e7:d0:19:b1:1e:d4:f2:8e:de:bf:e2:08:0c:f9:b5:99:a6:e5:
89:f8:53:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:24 2026 by rpki-client