Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: FJjDxdRqeunRhJ1tyYDMuBNDL5wPl255ColLbtVNGeI=
Subject key identifier: 96:D3:28:45:A9:54:03:A7:D0:B0:CB:80:79:37:D1:D7:C1:DF:03:2B
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 01A0C70E9AB2C82618C61C4644A3FD677CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 0840
Signing time: Tue 22 Sep 2026 03:00:18 +0000
Manifest this update: Tue 22 Sep 2026 03:00:18 +0000
Manifest next update: Wed 23 Sep 2026 03:00:18 +0000
Files and hashes: 1: 2JL6QkmCoFqlhxQJNmWn1mF_TU4.roa (hash: QqXkH/YgS0MOCatOfHharCIV2omJWZGXYUHGmZTmvS0=)
2: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: Rb+m6n1IMolFXnAhSUPuVWu2Eyvb4qD0sM36ykqb1/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:9a:b2:c8:26:18:c6:1c:46:44:a3:fd:67:7c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Sep 22 03:00:18 2026 GMT
Not After : Sep 23 03:00:18 2026 GMT
Subject: CN=96d32845a95403a7d0b0cb807937d1d7c1df032b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:1c:d4:5e:5b:a2:43:36:16:3b:49:65:93:
da:60:36:0c:52:dc:50:52:fc:69:a0:6d:ea:94:76:
d3:7d:e0:38:95:c7:96:79:48:87:88:33:1c:30:3f:
3f:7f:fb:52:1d:1a:86:56:e1:26:6d:34:ff:7f:37:
4e:66:83:a0:0d:a6:80:b6:61:c6:3f:01:33:54:89:
14:3b:28:a9:c5:5e:30:fb:d7:cc:cc:b3:94:fd:a6:
65:f2:e7:f4:33:63:33:02:e1:cc:09:c9:1e:01:4f:
82:93:98:90:c5:9a:7a:7d:57:82:36:cf:ee:d7:2c:
c6:8b:07:77:80:42:70:95:99:fb:30:84:f0:7a:77:
8c:0c:52:c1:7d:4b:fe:49:c6:fd:c0:f0:38:d7:d4:
fb:f1:1e:03:2a:f2:65:74:b3:b2:01:0e:af:c0:fa:
c4:92:bb:a6:66:eb:bc:5e:14:26:dd:f9:d9:55:b0:
d0:46:fc:18:85:37:cc:d3:82:d4:f5:43:e5:3a:9c:
3f:77:4f:cc:1c:a8:a7:0a:a8:f6:2f:d7:f8:01:ed:
6c:7c:98:f8:dc:ba:b9:5f:95:cf:7e:d7:22:41:c4:
1d:68:d8:70:e9:29:1f:d0:ef:a6:c1:ea:fd:d5:82:
e2:7f:1b:95:fd:0b:3f:80:fe:23:42:c4:38:60:7c:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D3:28:45:A9:54:03:A7:D0:B0:CB:80:79:37:D1:D7:C1:DF:03:2B
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9b:4f:c4:09:9f:8a:0c:f0:77:d2:42:4d:3f:c2:80:b9:e7:
ca:f9:ce:3b:05:da:b0:6f:97:81:6c:3b:5e:fd:1e:d3:fc:b7:
b4:29:e5:60:db:30:6c:53:71:49:9e:f2:33:ec:9a:d3:19:5d:
12:97:9f:98:7e:6f:72:74:05:7c:a5:1b:3a:4a:c8:b1:a6:f6:
50:03:f0:07:e9:b9:ba:2f:92:de:63:5e:4b:3a:d5:0b:99:29:
2c:7f:fe:0c:9b:17:23:53:0b:13:43:70:d5:0c:65:61:58:3f:
e2:ef:b2:6e:5b:0e:9d:21:0b:51:32:42:ae:dc:02:b1:5a:27:
f4:f9:ab:73:ff:90:53:4a:a8:eb:28:f0:94:c0:f7:1d:a4:80:
f3:ca:9a:f9:97:3d:49:94:ba:7f:e6:36:5d:ec:60:77:42:fa:
9d:10:46:fe:26:bd:c7:3d:a5:4d:8b:27:15:39:18:2a:de:1f:
89:a0:d8:dd:1c:3b:e0:33:cf:e2:95:9d:1a:1b:38:5f:fc:9d:
7d:35:6c:70:50:ef:f4:4e:1f:07:bb:3f:8c:d9:af:f9:74:66:
1b:31:c5:3c:da:11:6a:99:73:20:a9:e9:58:09:23:07:45:c3:
3e:65:00:3c:34:ab:95:fc:b0:8c:fb:35:e8:bc:c1:b2:68:42:
0f:29:76:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:56:06 2026 by rpki-client