Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
File: 3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft (raw, json)
Hash identifier: qQHOmfv4Fv9VtuFlcvL+Njlz01DScDgy2rvTRYclyLg=
Subject key identifier: 4D:E8:E7:FC:40:43:4F:B8:3E:18:54:C7:66:D2:64:97:10:A9:D6:D3
Authority key identifier: DD:0B:83:6F:D7:00:3F:83:16:04:A0:3F:23:44:7A:7F:2F:49:07:B3
Certificate issuer: /CN=dd0b836fd7003f831604a03f23447a7f2f4907b3
Certificate serial: 019FAA1A0C2325078B4393DB675E38E92A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
Manifest number: 0AF9
Signing time: Tue 28 Jul 2026 19:01:01 +0000
Manifest this update: Tue 28 Jul 2026 19:01:01 +0000
Manifest next update: Wed 29 Jul 2026 19:01:01 +0000
Files and hashes: 1: 3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl (hash: ryKuSVXT3PebR72I8lle9diexveU65gYBqIsYTgWcD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:0c:23:25:07:8b:43:93:db:67:5e:38:e9:2a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b836fd7003f831604a03f23447a7f2f4907b3
Validity
Not Before: Jul 28 19:01:01 2026 GMT
Not After : Jul 29 19:01:01 2026 GMT
Subject: CN=4de8e7fc40434fb83e1854c766d2649710a9d6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:e3:d1:12:1c:27:b0:14:97:9b:b5:c6:55:
39:a9:d7:09:0d:34:93:c0:63:27:b5:2c:25:6b:ef:
68:ac:70:cc:e3:c8:02:eb:1e:95:47:d8:b0:34:86:
af:a7:5b:12:52:2f:34:ba:1d:d3:89:1a:df:46:65:
90:26:ca:b7:35:dc:88:02:d1:88:d3:1c:e5:27:f4:
15:7a:61:6c:62:75:da:67:53:f2:69:c9:06:b1:0d:
49:d3:4a:9d:6b:ce:33:05:7e:6a:c0:6c:85:c7:00:
84:ab:48:46:13:93:f4:58:ca:71:6b:04:86:70:57:
d7:06:4d:22:f8:f0:30:e7:62:1f:61:10:e0:d1:5c:
d2:c2:db:59:c0:57:c0:a2:d6:4f:d8:dc:9b:74:8e:
73:5b:c2:7d:3f:92:df:8b:81:08:05:70:ca:1c:e2:
57:f7:b2:fa:45:72:d8:10:b4:d1:d9:03:85:36:9e:
02:a0:4b:6c:1c:53:f4:3f:c4:9f:da:32:36:f0:2e:
3e:55:74:8e:3d:1c:a2:47:bb:ae:ed:31:2c:c2:bd:
f2:2b:84:21:65:3f:44:6f:50:3e:36:a2:11:53:7e:
87:64:f7:f7:87:53:16:de:cd:a6:91:d3:e3:c6:cf:
cc:a7:65:64:52:d1:15:cb:2f:75:3e:1f:f7:84:c9:
10:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E8:E7:FC:40:43:4F:B8:3E:18:54:C7:66:D2:64:97:10:A9:D6:D3
X509v3 Authority Key Identifier:
keyid:DD:0B:83:6F:D7:00:3F:83:16:04:A0:3F:23:44:7A:7F:2F:49:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:70:bf:05:97:e2:d4:b2:61:a9:24:fe:d0:36:ea:83:e0:a6:
55:dc:13:c3:8e:a7:19:0f:c8:4e:ac:ae:2e:34:bf:46:92:c1:
27:c1:6f:7f:79:5f:5a:bd:56:9f:69:82:26:2a:30:13:05:7c:
d4:6f:0f:03:5a:fa:14:64:bc:6b:3f:e6:cb:df:40:09:90:fc:
d1:aa:96:9e:14:73:92:eb:8c:36:7f:95:f3:e9:d6:ec:dc:0a:
4c:eb:de:fa:b3:0c:67:18:15:3e:a3:b5:c9:3f:4c:e2:c6:a9:
9d:1b:d4:b4:8d:db:9b:6d:d6:14:64:31:c5:54:85:ff:5c:4c:
90:3d:0e:4a:3a:cb:23:c4:af:33:00:27:82:22:e0:93:f8:54:
94:fe:e2:87:ae:08:6d:34:57:c4:23:25:cc:7d:22:10:ec:31:
6f:90:3e:51:0e:59:36:27:64:84:77:b8:5b:96:12:93:82:11:
a6:d9:38:49:85:7f:ba:03:1e:1f:9f:36:af:4a:86:10:73:25:
e2:c4:df:0d:ba:66:53:99:b9:e6:89:3b:05:fe:ce:a2:5b:0f:
6d:f7:a4:18:8c:61:e6:6e:65:5e:41:ee:82:5d:c9:dd:c6:d0:
2e:90:8d:15:f1:cd:14:b9:82:12:da:b9:da:ea:a1:24:d8:b3:
bf:0f:a9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:05:08 2026 by rpki-client