Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: tkodXkkd39ISsXMgdfrfHdLMcGeiFEUWhQQf+vnTtz8=
Subject key identifier: F1:64:9B:51:91:29:E5:FA:4A:95:CD:09:E9:C6:36:E8:BB:93:83:69
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 01A0C14409F1EBF784A6037E0F282D6C6670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 0CA6
Signing time: Mon 21 Sep 2026 00:00:56 +0000
Manifest this update: Mon 21 Sep 2026 00:00:56 +0000
Manifest next update: Tue 22 Sep 2026 00:00:56 +0000
Files and hashes: 1: 0VMT834xpSH5P_uOhco5RR0cnoY.roa (hash: Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=)
2: 3QB4_WrWv1_f_4y7MeernB0lxRQ.roa (hash: zfF5AjAOtIAaIZLUIxCgwwAY3O+6F4xLShcmNVe/TXA=)
3: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: pm9agWjRo3n3A9EnzLrOlE1XyZYQ6RQt1gTyZuIB8ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:44:09:f1:eb:f7:84:a6:03:7e:0f:28:2d:6c:66:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Sep 21 00:00:56 2026 GMT
Not After : Sep 22 00:00:56 2026 GMT
Subject: CN=f1649b519129e5fa4a95cd09e9c636e8bb938369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:43:50:fa:e3:6d:a2:59:a6:80:88:6b:59:
7f:3a:b4:18:86:75:7d:9e:49:20:ad:1a:d1:63:ba:
49:95:b3:78:3d:88:28:da:d6:87:81:cb:47:be:d7:
51:01:8e:35:c2:f7:a1:c1:d6:4d:52:3b:aa:c2:e0:
c0:8f:44:61:1d:63:59:5d:79:53:e3:14:82:f2:f1:
64:01:03:08:68:ed:2a:82:00:45:75:aa:be:c2:6a:
69:8b:06:3e:ec:68:8b:48:c7:2a:85:7a:28:86:f9:
77:96:1b:0b:91:5c:59:85:84:5d:75:ee:c2:a7:32:
a7:03:be:84:9c:72:14:75:cd:e0:98:ee:5d:f4:9a:
09:ab:81:92:94:b0:56:0f:05:ae:4f:3f:71:91:34:
55:e7:ee:66:81:45:7d:fa:df:22:09:c9:fc:4d:92:
ee:d4:e1:43:27:10:74:ac:07:5d:dc:bb:0c:cf:6d:
38:52:15:7a:8d:c2:82:a4:fe:e5:b8:df:fa:89:e6:
1b:92:a0:8e:b1:c9:1e:77:cc:25:b4:62:c2:1e:29:
f1:94:6c:8a:de:b1:90:d0:6c:d8:23:3a:90:a2:c7:
89:6d:60:73:ca:82:80:a9:16:b6:d9:da:30:7a:13:
c0:f3:c9:6e:ab:b5:22:1f:50:a5:df:75:ae:17:37:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:64:9B:51:91:29:E5:FA:4A:95:CD:09:E9:C6:36:E8:BB:93:83:69
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:10:5e:7a:77:c3:39:ce:1e:ea:91:19:49:13:50:62:22:85:
65:8f:6f:b2:6b:d3:67:0b:ac:ce:85:62:84:89:90:51:fe:af:
29:d4:66:26:23:ca:76:9c:d8:45:55:44:d6:53:f1:5b:6e:eb:
3b:3f:0b:07:bc:43:f0:c5:80:ff:9d:46:0b:f7:47:26:91:a5:
5d:29:8f:13:4c:8f:79:16:0b:d3:dc:83:1d:aa:fa:0d:bb:00:
80:cb:30:24:32:2c:c1:f5:5b:92:f1:72:85:0f:03:a2:af:a9:
69:19:39:1e:92:67:fd:95:09:97:a1:a6:ed:7f:53:33:fa:e5:
4f:20:ad:08:37:b9:2c:9f:3e:50:6c:da:fc:c0:00:59:af:91:
65:86:fd:fe:28:30:5c:c2:74:1d:67:2f:d4:aa:30:f9:31:52:
f5:a9:43:81:9e:f8:c4:69:60:0e:61:10:f7:1d:23:cb:a9:e6:
8d:45:d1:6a:ef:ec:92:08:9a:db:b3:27:43:76:17:4c:e9:a4:
5a:60:68:5b:19:87:c3:59:17:cf:e5:ee:7e:7d:bd:7e:50:6e:
73:c0:e7:29:5e:ee:02:d4:28:1b:3b:3e:3c:77:4f:f1:71:3d:
33:c0:4b:f1:ee:e4:96:5e:ab:8a:69:f9:63:0b:d4:3f:b7:70:
d7:06:1f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:24:25 2026 by rpki-client