Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: R2RxIgO6Hjs7yuqeRBUOttXh69Q1V1txbZKoA5vnYKM=
Subject key identifier: FE:EA:92:AF:F6:15:09:51:E4:80:45:DB:FC:C6:BB:B2:E5:CB:D9:54
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 019FA93DBD42DF5BB5E52AF06C355DF565E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 0C15
Signing time: Tue 28 Jul 2026 15:00:23 +0000
Manifest this update: Tue 28 Jul 2026 15:00:23 +0000
Manifest next update: Wed 29 Jul 2026 15:00:23 +0000
Files and hashes: 1: 0VMT834xpSH5P_uOhco5RR0cnoY.roa (hash: Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=)
2: 3QB4_WrWv1_f_4y7MeernB0lxRQ.roa (hash: zfF5AjAOtIAaIZLUIxCgwwAY3O+6F4xLShcmNVe/TXA=)
3: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: +bsyafaXnZr9NlNw7g9TtWzItv7rAS+iubErkhsMajE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:bd:42:df:5b:b5:e5:2a:f0:6c:35:5d:f5:65:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Jul 28 15:00:23 2026 GMT
Not After : Jul 29 15:00:23 2026 GMT
Subject: CN=feea92aff6150951e48045dbfcc6bbb2e5cbd954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1d:3d:3d:0d:91:bf:e8:2f:46:b4:3a:66:86:
d2:f4:f6:f3:bc:44:9b:13:ea:cd:ca:50:d0:41:1c:
9c:5c:e8:92:7a:93:50:63:d9:9d:55:40:b8:48:29:
06:c3:ce:7f:8c:39:af:96:3c:ed:bb:4f:08:b1:49:
0f:3f:98:bd:cd:40:f9:6b:5c:33:42:d5:0d:3f:1e:
f3:5c:03:f5:b7:fd:70:f7:60:1e:b4:bc:fa:43:69:
c0:16:4a:96:aa:fd:e7:5f:32:42:61:1d:00:d9:54:
5e:0d:e0:2f:91:ac:29:69:9d:34:c3:50:46:f8:6a:
42:c1:ce:c1:62:6c:09:57:4f:33:0a:86:ca:d3:85:
64:a3:3a:5d:a9:1a:67:99:a4:b2:00:87:f4:db:b5:
04:12:0b:08:94:22:93:e7:68:de:a5:e6:85:80:e7:
70:6d:72:5f:2c:e6:bf:3f:98:93:60:4e:7e:92:5e:
94:95:72:a1:a2:f7:f1:3c:46:9c:4c:15:17:7f:25:
30:e4:9a:0e:85:4b:64:da:a0:05:ac:54:51:07:22:
c8:cb:cc:86:f5:5e:3a:99:e5:53:81:fd:c6:35:c9:
35:af:28:6f:cf:b6:23:7f:35:0a:0c:35:94:9e:96:
16:67:93:7b:cc:33:17:fd:9f:e1:61:7d:04:63:74:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EA:92:AF:F6:15:09:51:E4:80:45:DB:FC:C6:BB:B2:E5:CB:D9:54
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:40:c9:35:1a:3d:ce:80:97:1c:4f:f5:6a:ba:54:ff:2b:0d:
23:24:51:18:6c:76:34:f2:bb:5f:f8:f6:36:2e:94:13:10:1e:
c2:2a:38:45:64:18:71:17:e5:50:4b:ea:97:1f:e8:ce:e0:d1:
25:91:f8:b0:d3:38:19:05:73:d3:92:9c:31:b3:d2:53:f1:46:
d4:05:c9:7c:14:a0:2a:44:07:3c:ab:1a:51:6a:bd:b2:05:11:
f3:66:36:17:af:76:d4:d4:2d:0e:bf:f7:95:80:9b:fe:a2:c9:
72:89:90:00:3b:cc:88:2c:3e:24:c4:ca:c7:6f:1b:d8:02:07:
13:1b:90:b2:7d:36:c8:ab:9f:a7:73:c0:e6:28:5b:e8:0f:52:
7d:8e:a6:0f:97:b9:7d:61:7e:98:c6:16:04:31:a4:54:a5:5b:
02:7e:19:f4:fe:d1:09:21:bb:18:36:e3:4f:d7:84:91:62:9a:
c3:86:1a:61:db:10:43:e1:f3:32:7d:f8:71:02:a9:45:74:f6:
6b:15:ca:46:c4:9f:bb:33:4b:c5:09:59:3a:f4:81:08:0b:c3:
ea:6e:9c:f7:5c:1b:45:12:b4:54:57:c4:6f:7d:f8:a6:40:50:
fc:03:2f:73:74:5e:35:b9:cf:3b:cf:51:46:56:51:2a:b8:a5:
96:32:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:50:09 2026 by rpki-client