Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
File: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft (raw, json)
Hash identifier: V65OmFX1LcAFdnKgYlQM7lpk7TL2DAQwNmr/Hp0yHo4=
Subject key identifier: 25:3F:E2:F1:42:6E:90:A3:1D:06:62:00:69:EE:DA:CF:E3:F7:2F:DC
Authority key identifier: DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
Certificate issuer: /CN=dea85f21668a98d7e81a74183f0cce513086601b
Certificate serial: 01A0C520D13BB1CCFA7F026685A85E835BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
Manifest number: 09F9
Signing time: Mon 21 Sep 2026 18:00:57 +0000
Manifest this update: Mon 21 Sep 2026 18:00:57 +0000
Manifest next update: Tue 22 Sep 2026 18:00:57 +0000
Files and hashes: 1: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl (hash: 1PDfj9xhuPlChgEHp1nAJ5jIC79ZT9HzqHQxHVmvTN8=)
2: hBUefaIMV4VxrEK-fm1hTMzaWD8.roa (hash: ULTyVqCoLmJTp6EzOZiZ2uvQqGHDruUXv80DgFEK1ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:d1:3b:b1:cc:fa:7f:02:66:85:a8:5e:83:5b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea85f21668a98d7e81a74183f0cce513086601b
Validity
Not Before: Sep 21 18:00:57 2026 GMT
Not After : Sep 22 18:00:57 2026 GMT
Subject: CN=253fe2f1426e90a31d06620069eedacfe3f72fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:77:3a:75:2c:de:9e:7c:6d:19:58:e3:8f:
77:73:4b:7f:92:ff:33:de:4f:6d:14:87:90:29:c5:
1b:04:18:57:dc:97:ca:ba:e7:77:4f:d3:73:c7:c0:
47:ba:8d:fd:3f:d5:85:1d:bb:76:4f:11:95:3a:b7:
81:6c:b9:2f:3a:c0:21:b7:a5:7f:62:f7:95:b4:e5:
e1:ce:a0:9a:1c:8e:f8:c7:47:d1:66:df:2c:c8:a1:
18:22:82:a5:a8:cb:19:b3:2b:a0:0d:f5:f2:be:1a:
5c:db:1f:c9:72:b9:14:9f:e4:6a:08:a7:72:c3:91:
c0:9c:a3:35:e0:6e:de:25:6e:65:65:92:10:f1:6f:
f8:82:da:6c:14:92:31:48:6d:bd:24:0a:e4:b6:13:
52:5d:46:c8:0c:a5:fb:76:07:6c:ef:24:91:59:8d:
3b:31:f2:d9:41:02:58:79:da:b6:53:83:66:76:6d:
c2:92:85:12:ea:bb:df:a0:84:3d:18:ab:31:51:b4:
a1:aa:cf:e9:de:82:08:d0:56:68:bd:64:9e:fe:98:
fd:26:0f:f0:40:c1:26:e0:27:a1:73:51:a5:aa:ce:
c0:1b:56:44:b8:3b:aa:d0:65:8a:e2:11:41:ad:6d:
45:4c:cc:e8:63:42:75:c1:31:18:71:6d:9c:ae:4d:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3F:E2:F1:42:6E:90:A3:1D:06:62:00:69:EE:DA:CF:E3:F7:2F:DC
X509v3 Authority Key Identifier:
keyid:DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b1:a8:73:a7:9b:05:a8:ab:c3:26:22:f0:41:4b:59:a4:ad:
e3:90:d0:9b:f1:49:63:7b:43:ca:32:1c:33:92:53:95:6b:96:
9e:cd:61:48:d6:e1:63:8a:28:ca:b0:ec:e1:8b:f7:6f:f4:dc:
30:a4:e8:7c:3c:9c:2f:aa:4f:b6:97:57:0d:fd:7e:bc:6e:38:
db:18:bb:4d:53:77:fb:4c:1b:ff:05:95:72:06:ca:b9:db:18:
92:42:01:45:51:6d:d9:18:a1:01:a3:26:6f:19:e4:14:10:7b:
6e:63:7e:19:26:ab:c9:fe:25:c6:15:97:b7:7e:6d:d0:f5:15:
8f:a8:7b:aa:3d:9e:20:36:32:70:5f:30:41:ea:76:22:87:f1:
81:27:ca:80:da:f6:89:5f:f4:83:fc:56:6c:e7:19:10:58:81:
14:9e:18:57:fd:6b:72:dc:98:08:d0:cf:bc:98:2d:81:ca:81:
3e:7d:14:e3:79:e9:93:d5:d3:f8:47:97:fb:17:df:00:e2:07:
e6:a5:2d:34:2b:8f:b5:07:b0:81:f8:92:93:81:2d:fb:98:1f:
ea:49:41:ea:cc:1e:a0:11:25:5d:41:df:b7:35:9c:38:98:1f:
1a:1f:5c:18:bb:b1:c9:59:55:b8:7b:e1:af:a8:6f:b2:ca:3f:
c5:f0:29:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:13:32 2026 by rpki-client