Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: YSUKw9dqlNmTeItYjcNpTb85HNeKUoRNEmm2uKkdqrA=
Subject key identifier: 3B:64:C5:AB:34:BC:0E:D1:BC:BB:1D:23:15:EF:33:40:86:D8:95:05
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 01A0BCF8DAD4640B3F2DDCE8BE61420D9204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 1A62
Signing time: Sun 20 Sep 2026 04:00:20 +0000
Manifest this update: Sun 20 Sep 2026 04:00:20 +0000
Manifest next update: Mon 21 Sep 2026 04:00:20 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: PEeUDUG8y03a/GJD5vzaDanrvBTTYfxUUm2xOgcy8/U=)
2: 4nH4XfhimtA2VpYePD6iIqgS8jg.roa (hash: WzWjp5sYk3618sDtkEiRYCtG2GQQ5fgZA4Df9TxbCmE=)
3: Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa (hash: t8YcGZN/KfNS1zoLXEsPr4LvXKVj1kisjNpdPg7jWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:f8:da:d4:64:0b:3f:2d:dc:e8:be:61:42:0d:92:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Sep 20 04:00:20 2026 GMT
Not After : Sep 21 04:00:20 2026 GMT
Subject: CN=3b64c5ab34bc0ed1bcbb1d2315ef334086d89505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:a3:2a:54:b6:a6:47:f3:78:18:4e:ef:7e:
c7:1d:42:eb:de:55:7a:53:7b:2a:4b:2c:b4:02:2e:
e9:2b:8b:5c:4e:5d:45:4b:be:6b:23:8e:b7:b6:43:
e1:63:88:dd:13:3b:5e:8d:0c:0c:3e:f2:64:69:7b:
41:75:ca:b5:7d:a6:98:ae:bc:cd:dd:93:0d:e0:31:
60:5b:e3:f3:ca:d7:6e:5e:2e:97:2b:9b:7c:da:1c:
7b:6d:34:c9:90:d7:48:4b:88:bf:30:59:01:61:1f:
6e:b8:1c:41:e0:d1:47:94:5a:62:e0:e7:69:0c:11:
35:ef:ed:d4:a0:89:6b:46:9f:dd:67:ba:41:bf:ed:
11:19:40:4d:eb:49:e2:9f:39:11:65:b7:ba:45:66:
4a:3f:3b:a0:47:a3:fb:1e:2f:a5:b8:17:7d:71:2a:
43:1f:ac:26:af:be:a6:8f:44:e6:00:bd:8b:32:1d:
4a:96:70:a9:29:48:34:50:0a:be:fb:16:35:44:be:
51:08:96:77:28:10:e2:8c:a2:a5:c3:ca:ea:bb:ac:
56:01:22:aa:b8:6e:de:07:1a:09:72:55:c3:5d:b0:
45:a8:73:58:2f:c0:b2:ce:e9:e4:34:2e:e1:47:78:
b0:55:ae:d5:8a:b4:3e:5a:3f:a4:d6:b5:23:8a:27:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:64:C5:AB:34:BC:0E:D1:BC:BB:1D:23:15:EF:33:40:86:D8:95:05
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:56:17:07:78:1d:0f:1a:7b:4d:f8:51:8f:5e:75:6e:9a:d9:
61:a4:d0:37:9e:ae:43:e0:cf:45:b0:5d:86:1b:80:b4:79:d4:
43:83:c7:d9:04:c2:38:2f:dc:2c:b3:7c:2b:ef:87:05:85:09:
d4:9c:d3:58:8b:2c:34:c3:0d:49:be:e9:9d:4d:5a:7b:19:4b:
0b:c3:f3:1b:c1:93:ab:d4:2d:de:3c:aa:80:62:f7:38:52:9b:
63:3f:15:93:9a:56:3d:eb:a2:ad:22:19:b8:2d:3a:cb:fe:27:
75:97:54:ae:c5:ce:d8:3e:e9:4c:46:5e:06:a2:94:62:41:4e:
a1:9b:92:b2:fe:5d:ae:ba:8d:b8:00:ce:d8:58:c2:7c:e9:bb:
ec:6b:5f:d5:3e:42:31:ba:6f:b5:b9:dd:55:1f:9b:23:29:b1:
ac:1f:38:bf:c7:2d:a6:c3:b3:dd:31:4f:95:29:4d:59:17:61:
bd:7d:f3:71:83:26:00:1f:df:8c:77:19:19:60:cf:dd:d2:5a:
b7:1e:03:57:eb:8b:70:52:41:2b:4d:c5:cc:ef:ca:4b:46:a6:
19:5d:94:36:78:f9:66:e9:a0:c3:26:8d:1c:75:7e:fa:b1:ac:
2a:51:07:c0:9d:7e:4c:9e:d7:39:ac:ab:8a:2f:34:95:c9:09:
4c:3f:28:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:38:08 2026 by rpki-client