Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
File: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft (raw, json)
Hash identifier: CfVpcdx3jGskEY5P7mRxtYd8eKu7FkY2VHPR6Pb9aO4=
Subject key identifier: F4:D1:4A:1F:6D:06:D2:9D:3B:B1:58:A2:77:C5:46:42:1D:19:D2:EA
Authority key identifier: DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
Certificate issuer: /CN=dea85f21668a98d7e81a74183f0cce513086601b
Certificate serial: 019FA93E2C878EDB196AD813CC5B2AE70201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
Manifest number: 0966
Signing time: Tue 28 Jul 2026 15:00:51 +0000
Manifest this update: Tue 28 Jul 2026 15:00:51 +0000
Manifest next update: Wed 29 Jul 2026 15:00:51 +0000
Files and hashes: 1: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl (hash: PAQgaRhXPc3pvF9Ct/0QDnJjTfNrL2E84NEmOHSDyew=)
2: hBUefaIMV4VxrEK-fm1hTMzaWD8.roa (hash: ULTyVqCoLmJTp6EzOZiZ2uvQqGHDruUXv80DgFEK1ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:2c:87:8e:db:19:6a:d8:13:cc:5b:2a:e7:02:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea85f21668a98d7e81a74183f0cce513086601b
Validity
Not Before: Jul 28 15:00:51 2026 GMT
Not After : Jul 29 15:00:51 2026 GMT
Subject: CN=f4d14a1f6d06d29d3bb158a277c546421d19d2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:18:3f:d6:b3:bd:76:e4:52:2f:19:fd:d4:
1b:a8:06:e8:84:d3:c6:d6:c5:32:49:f9:e6:67:68:
e7:5b:45:22:dc:86:da:33:5d:fc:6c:c0:b1:7d:2f:
06:b2:34:c8:2c:02:30:40:94:86:dc:35:c4:3d:ea:
cc:44:ac:98:a8:8e:01:c8:10:96:25:28:9b:1e:cf:
fd:97:67:3c:17:ac:8c:85:c0:17:94:74:67:da:9d:
b7:e7:d1:2b:e7:99:fb:33:9d:38:e8:26:17:46:7e:
e0:e3:e0:20:83:85:05:65:4d:06:6b:9c:16:87:82:
8d:a7:55:77:f2:30:3b:83:b9:84:da:c8:dc:f6:09:
ae:28:ec:5d:86:74:af:55:fd:5a:e7:60:86:0b:f2:
fa:8e:4f:eb:3d:1b:f4:c7:0c:e2:2a:a7:38:cb:77:
ae:a9:37:5e:1e:f7:ff:2d:a1:4f:2c:44:75:47:de:
02:a1:01:54:19:87:ee:72:e6:d6:bd:39:d5:0b:4e:
6b:0e:71:85:93:b3:e2:e2:c1:ef:e4:c2:ea:79:ba:
f7:a8:b8:36:f7:39:5b:4f:6e:15:96:0e:ce:d9:45:
43:8d:8e:52:9e:cc:73:94:d9:30:b1:91:e0:7c:a1:
38:c3:c1:e8:28:c3:5b:b0:bb:56:f5:4f:6f:23:51:
75:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D1:4A:1F:6D:06:D2:9D:3B:B1:58:A2:77:C5:46:42:1D:19:D2:EA
X509v3 Authority Key Identifier:
keyid:DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4d:e9:0b:88:15:68:09:5d:78:71:73:58:34:32:b8:93:20:
39:97:ad:dc:8a:70:04:26:f1:f6:e2:c9:2a:b2:4b:85:c5:0b:
8c:4c:54:30:c5:c6:c9:e9:1f:36:9c:83:76:4a:e4:d6:ce:61:
c6:04:1c:ee:35:78:bc:5c:38:22:ae:f7:ac:61:f8:49:67:39:
99:3d:59:8f:11:5b:13:70:93:b3:cb:f9:5a:a2:eb:69:7d:c6:
13:63:81:69:d5:bd:4e:09:a7:11:02:40:e8:cd:70:dd:53:da:
54:58:95:2a:f0:16:40:2b:a6:5c:0e:81:4b:c1:25:96:87:90:
6e:72:91:db:25:3b:e2:b0:29:63:dc:2a:71:f6:6b:12:01:5c:
87:7a:f3:38:58:f2:c8:81:fc:65:a0:8f:7c:aa:73:df:29:59:
7b:61:1e:bf:58:ce:b0:f1:b4:2d:a3:98:24:79:7c:0f:a2:a2:
71:65:97:20:52:74:2d:1c:f9:b4:09:6c:a7:be:08:d3:5f:91:
50:72:0f:20:49:ab:ed:f5:00:e8:4c:cd:56:4c:4d:fd:f6:c0:
0f:a0:2f:1a:a2:48:14:38:ed:f5:14:4b:a1:e4:7f:df:27:b9:
60:53:f4:5d:53:fe:ec:c2:7f:cf:1c:f9:21:c4:11:97:aa:6e:
f8:d7:52:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:07 2026 by rpki-client