Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: T3awtYwjzfVB8O7ZBGyJhnz5PVPQ6U0UqLQLPUZtUY8=
Subject key identifier: 1B:31:0E:58:FA:27:20:AD:8A:33:C3:29:58:01:1C:0F:DB:5C:D0:17
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 01A0ED0AD1A5AADC58FE05FB4F992F1A4EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 049F
Signing time: Tue 29 Sep 2026 12:01:44 +0000
Manifest this update: Tue 29 Sep 2026 12:01:44 +0000
Manifest next update: Wed 30 Sep 2026 12:01:44 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: m76fULRJJfY3VSt2DwwHQ2+X4sWDi5Kde0AwO58VKsM=)
2: UcfLZ7L91GVWjLGWEYmlJV2c10o.roa (hash: uVZ/PpG6ROCuILZTxmMA8qXeD47uyabcF2INsekoGNc=)
3: n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa (hash: 2wd1XBjZMp+nPiV7QP5P7/6ushDvOEw3Nbs3DojVSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 12:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0a:d1:a5:aa:dc:58:fe:05:fb:4f:99:2f:1a:4e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Sep 29 12:01:44 2026 GMT
Not After : Sep 30 12:01:44 2026 GMT
Subject: CN=1b310e58fa2720ad8a33c32958011c0fdb5cd017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:2c:bf:d0:20:dd:c6:0b:80:e1:9d:aa:02:
22:3d:65:c2:2a:80:e3:b8:ab:3c:f8:20:0d:a6:92:
5a:0b:b8:6a:2e:e5:51:64:1e:fd:f8:eb:45:ee:4a:
13:93:3f:a1:b3:ad:33:f1:65:34:35:02:0e:e6:00:
19:9b:5c:34:18:3f:fd:f0:56:58:f5:b0:25:47:23:
ec:e3:89:b7:80:f3:50:1d:7d:a7:ae:8d:ca:ed:e0:
8e:4c:3b:bb:fc:ce:8c:d4:ae:37:9c:10:22:49:98:
b7:fb:f5:a2:78:ca:b8:ba:8f:79:69:12:15:ab:07:
4d:25:e1:42:ac:dd:51:1b:75:9a:c5:45:5e:b2:db:
7c:22:d9:30:0f:a1:4b:34:75:7e:77:85:e1:96:d9:
aa:e5:82:5b:be:d3:93:6a:36:72:a5:e2:33:6c:0c:
0e:a7:12:84:6b:49:de:4b:73:55:06:d8:a2:1d:18:
d9:5f:3b:cd:91:92:a5:2f:5b:5c:88:96:58:79:33:
fb:a5:52:52:15:d4:fe:21:b7:34:d6:c9:15:da:05:
29:55:f1:70:03:cf:59:c7:bf:61:14:33:2d:15:af:
2d:7d:8c:2a:75:f0:ad:70:fc:fe:bd:c0:80:16:13:
3d:16:0d:64:1c:da:0f:15:d3:7f:0c:c2:78:2b:47:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:31:0E:58:FA:27:20:AD:8A:33:C3:29:58:01:1C:0F:DB:5C:D0:17
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4f:5c:8d:0c:62:2e:9e:85:81:3b:95:2e:63:93:10:09:30:
b4:b5:66:65:3f:44:d8:e1:4b:df:0d:b7:51:60:15:3c:b0:1a:
c2:de:f8:1f:a8:9b:45:ad:18:b2:85:8e:88:19:d9:b4:65:a2:
23:de:0c:10:24:9b:a6:58:1f:72:89:97:37:46:7f:7e:74:b3:
94:29:ae:d7:47:93:dc:37:37:32:61:13:b1:a7:33:0f:4e:aa:
e7:7a:20:35:d2:cf:06:47:5c:0f:06:df:dd:26:51:53:c1:49:
f7:60:36:9b:59:e0:91:df:59:8c:7b:13:6a:f7:ed:5e:22:d2:
71:48:2a:0e:26:31:34:8f:c4:11:99:d6:0e:c8:ba:d9:a2:b8:
e3:e1:80:5f:6d:48:ee:96:45:f1:9d:d7:50:c4:5c:9e:ae:ee:
0f:91:d5:fa:00:e9:51:f3:5b:78:76:44:0a:0f:a1:29:4c:a7:
29:f7:fb:12:28:b2:52:a8:7a:fb:92:49:94:6e:e5:d3:a7:f0:
66:b1:4b:0a:70:20:1e:ed:96:04:17:08:77:bf:c6:9c:66:89:
66:62:af:e9:74:26:05:63:06:c0:e5:56:18:26:fe:76:5e:fb:
af:c3:e5:df:59:c8:dd:b1:9b:84:32:41:63:89:27:21:b5:4a:
0e:18:c8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:24:29 2026 by rpki-client