Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier: yj4qOonUOEVgAFjV67u/fF/WK8FzpTvdAE9xg2gu0H0=
Subject key identifier: 45:BA:23:A4:DA:CE:E1:FE:01:91:44:4F:A1:F0:12:76:C8:B5:2D:B8
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 01A0C3D6DF5C1D15D1ACDB7C4E6F58851DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 12:00:34 +0000
Manifest this update: Mon 21 Sep 2026 12:00:34 +0000
Manifest next update: Tue 22 Sep 2026 12:00:34 +0000
Files and hashes: 1: 0zAvG8q_rQz542VLQHfI3pwn2hU.roa (hash: EpeZpmHs3b50RgbC9T7I86EOA85BMvieUCH/Qo6Mt6U=)
2: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: 5EHZPVxxeRy8NdpPp4iRuxAZBdw4K6MarXO1A9SI02A=)
3: gozTMRP9KybW0YQlfst5QWvJTAc.roa (hash: 1fB1QbWdo2Si+L9RD7xiEIKgMl1IQRY1BWEJBSr6TVA=)
4: nCAbVn_gsNs4x4asBKyazyvKXR0.roa (hash: Ir2ZDg7CX0Hx7nK6/8SSzS9hwNZYvwP7LhXhdGV2tlA=)
5: s5RTg8fa0nQHIcIumLzUhuAAt24.roa (hash: cqMD2IDYqFBpxsaJVxm5d2TxnTtqRKRBltHR4geFTsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:df:5c:1d:15:d1:ac:db:7c:4e:6f:58:85:1d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Sep 21 12:00:34 2026 GMT
Not After : Sep 22 12:00:34 2026 GMT
Subject: CN=45ba23a4dacee1fe0191444fa1f01276c8b52db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:21:e8:35:98:aa:66:de:4b:67:11:a5:af:
aa:57:4d:a8:34:cd:26:b7:34:4b:b6:f1:74:9f:97:
4b:00:b1:c5:e3:e5:b0:4a:5d:47:f7:8c:ab:37:13:
51:ff:75:a2:ab:21:ae:15:92:35:31:bd:12:dc:6e:
b8:2a:08:28:d3:66:8b:71:d9:5b:d4:12:4d:3c:91:
4e:3b:3e:0e:67:a0:25:d1:7f:a8:84:e0:8c:f5:4d:
78:72:67:23:3d:37:79:6c:83:12:d4:05:7d:6c:4b:
33:02:6b:d9:13:53:e6:c0:c8:51:d7:96:42:2c:fe:
be:2a:79:d0:33:84:df:d6:dd:4b:33:f9:ca:f2:c7:
26:30:76:da:a5:1c:cb:84:3f:57:1c:db:7b:a1:1c:
34:87:45:da:81:7e:12:cd:ed:56:1c:c4:37:8d:e4:
a9:13:e3:75:62:19:9b:b4:39:d9:61:6c:99:87:d5:
db:7e:b2:89:0f:59:08:0b:33:70:c4:a2:c9:3a:8f:
31:38:00:72:3a:f0:02:93:ec:bb:41:7a:94:d3:1c:
19:f3:cb:50:7a:31:45:47:cb:df:d6:6b:46:6f:bd:
67:4f:7d:0f:48:dc:44:40:36:8a:58:5c:99:62:29:
6b:11:13:ae:6d:9f:0a:b5:9b:38:1b:02:e1:05:46:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BA:23:A4:DA:CE:E1:FE:01:91:44:4F:A1:F0:12:76:C8:B5:2D:B8
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1c:bb:87:bd:a4:27:d1:f1:a3:77:e1:19:14:07:19:90:68:
cc:7e:7f:de:76:4e:7b:aa:e6:ae:fc:ce:2d:54:91:7d:c6:f8:
d6:e4:1e:8d:7d:37:18:ec:b5:7f:80:3f:ad:5b:6c:8c:1e:c5:
3c:b6:f9:55:19:9c:01:11:2e:2f:94:d5:a4:83:5a:3b:cc:0f:
9d:f3:96:4c:fa:e3:da:ef:29:29:ed:14:a6:10:ac:20:6b:72:
44:46:43:e4:30:61:3b:42:f5:9e:f5:a8:fe:77:bb:9a:ae:35:
f1:8e:2b:79:b7:f2:47:e8:e9:14:58:4f:4a:6a:cd:f1:26:ec:
dd:3d:d4:2f:22:74:60:2d:eb:db:a2:c8:54:23:61:1a:7e:5c:
3a:7d:8e:07:b5:74:4d:2b:d6:81:d2:e6:de:78:88:ac:1e:64:
a0:c1:b7:37:40:8a:08:b4:b5:ef:c3:31:0d:79:5d:ee:f1:6b:
9e:54:94:dd:7f:52:68:44:70:fd:66:74:0a:e5:66:83:78:1a:
90:15:0b:e2:af:4b:87:fd:1c:90:46:c4:1e:18:90:72:75:fa:
a8:19:a3:76:67:e2:8e:0a:c0:32:66:c9:3d:fe:14:9e:df:f8:
01:26:6b:8a:45:f9:ea:04:a5:23:da:fc:25:a0:26:19:21:18:
15:03:f3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:04:18 2026 by rpki-client