Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: tiyqHrGeAeH1d8l2BvHG3DSxiyR9wxlPMeZ5ZGTdcMo=
Subject key identifier: F9:24:1C:38:D5:AF:C8:67:69:4D:79:D7:BA:1B:CD:63:56:F0:F4:32
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 019CAA8F9FB9A514113A58D42C60FA965B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 0A88
Signing time: Sun 01 Mar 2026 18:01:04 +0000
Manifest this update: Sun 01 Mar 2026 18:01:04 +0000
Manifest next update: Mon 02 Mar 2026 18:01:04 +0000
Files and hashes: 1: 0VMT834xpSH5P_uOhco5RR0cnoY.roa (hash: Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=)
2: 3QB4_WrWv1_f_4y7MeernB0lxRQ.roa (hash: zfF5AjAOtIAaIZLUIxCgwwAY3O+6F4xLShcmNVe/TXA=)
3: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: nT7MWBC4xPrHD8z9OtYOYFjTiTrriZzcXpgI1kES72M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:9f:b9:a5:14:11:3a:58:d4:2c:60:fa:96:5b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Mar 1 18:01:04 2026 GMT
Not After : Mar 2 18:01:04 2026 GMT
Subject: CN=f9241c38d5afc867694d79d7ba1bcd6356f0f432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:95:6c:c7:84:4b:df:5d:d7:3e:78:44:fc:d4:
e4:c2:99:17:74:a2:24:a8:e9:03:b7:87:55:16:a6:
d0:45:f3:04:1a:d5:0f:fa:49:ca:9b:73:c5:d8:b3:
57:b0:9a:38:c2:03:b9:a6:39:fb:83:d5:81:35:c3:
d0:f9:a0:5f:0c:f0:cb:e0:2e:07:47:7f:6c:e5:94:
1a:29:31:6e:84:f4:51:d0:28:1a:91:ed:e0:35:b6:
99:07:2a:29:f7:11:e5:fe:90:ff:a5:5a:b8:3c:f8:
e4:d7:cf:b4:c5:b4:ce:47:28:a0:e6:03:df:ab:3f:
d6:9d:0c:3b:59:04:64:9d:a6:a8:c1:11:98:9f:4d:
fc:68:9a:a6:19:bc:04:e4:2c:d7:a6:d3:84:6f:97:
11:5c:a2:10:bd:d9:53:70:cd:38:76:ba:dc:83:b1:
06:49:0e:40:c5:d8:bb:b7:50:fe:69:71:99:3e:b5:
a3:19:22:fd:83:8e:fb:65:5a:ec:3d:32:83:6b:f4:
63:e9:77:df:7c:5a:84:30:d3:96:00:19:7b:be:99:
88:a8:84:eb:5f:29:e8:58:40:95:0f:e4:6a:f2:dd:
e3:c7:8b:3c:23:fc:7e:46:38:ec:83:d3:e2:4a:45:
ba:28:c8:6b:9e:a6:78:d5:e8:e7:84:8b:21:30:6d:
95:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:24:1C:38:D5:AF:C8:67:69:4D:79:D7:BA:1B:CD:63:56:F0:F4:32
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:98:63:e1:aa:b3:25:0e:0c:88:c6:34:8e:fc:e0:14:b7:20:
af:79:b3:68:96:4b:cd:2c:71:b7:3f:6a:31:9c:9e:b8:c7:48:
50:6b:ad:e0:89:fa:76:ca:1d:83:f5:80:51:08:36:72:b1:db:
08:fc:04:50:7c:71:64:58:9b:f2:33:99:2b:b0:fc:1f:5d:8d:
d7:ad:1b:ae:da:ab:6a:99:59:73:02:87:cd:7b:2b:70:7e:f4:
6f:2b:91:a7:80:85:dd:f2:3e:59:58:9e:62:7b:b3:ed:eb:dd:
93:34:ea:31:ca:94:42:79:86:06:34:d8:3c:cd:0f:2b:9a:78:
90:fc:14:c1:e9:2b:95:4c:f8:6a:b9:c9:68:88:c4:33:21:dd:
18:07:93:ed:0b:be:2b:6c:63:27:79:52:06:1c:15:e1:8a:dd:
0e:25:d5:5d:c5:55:4d:39:40:6b:51:a9:8e:21:ed:3b:2f:72:
e8:66:6f:5a:12:31:c3:a6:42:c6:0c:0e:dd:cd:02:13:d8:80:
f2:af:85:cc:e2:ea:e8:0c:ab:9f:4a:16:32:42:19:01:78:6a:
8e:d8:0b:8f:6a:68:8e:12:1b:2a:db:c2:d5:16:59:6b:75:89:
48:b6:fb:eb:0f:5a:d3:70:75:42:22:a3:25:7d:0c:1e:54:0d:
72:ca:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:18 2026 by rpki-client