Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier: KAklbStlLlS9XTa0Y79v7ouVIaPIlb5HP7kVkdRcYPo=
Subject key identifier: F1:07:66:B2:E1:1E:1F:C4:58:24:1D:55:34:BA:C8:D5:9C:DF:34:F0
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial: 019CADC83B87FFB06372F198FAC9400E5A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number: 064C
Signing time: Mon 02 Mar 2026 09:01:46 +0000
Manifest this update: Mon 02 Mar 2026 09:01:46 +0000
Manifest next update: Tue 03 Mar 2026 09:01:46 +0000
Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: 8caQuuUIB7aY1xIO3+2Gc1+I0Z86SJO/nMfMp+bFUwk=)
2: WoN0CrYvueqPk1KqmXJffVK7ib4.roa (hash: 4FA6Dc/pCbAQFuPtL5vNxbuQK2/hlz7MGBa9RY6awaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:3b:87:ff:b0:63:72:f1:98:fa:c9:40:0e:5a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Validity
Not Before: Mar 2 09:01:46 2026 GMT
Not After : Mar 3 09:01:46 2026 GMT
Subject: CN=f10766b2e11e1fc458241d5534bac8d59cdf34f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3f:05:40:84:6d:b5:89:f0:df:8d:17:0f:44:
90:cd:cd:7b:e9:70:d5:48:82:ff:38:cd:68:6b:da:
85:8d:60:27:56:be:49:46:c5:8d:12:b9:e9:48:0b:
90:d2:1b:90:14:c9:84:4c:81:f4:81:d2:b2:13:6c:
d9:d0:08:27:c9:34:f2:70:b6:3e:72:d2:8b:2d:b0:
16:cc:da:ce:21:eb:8e:33:d8:47:a5:17:20:07:52:
a3:9a:73:a3:84:66:45:c1:60:2d:8f:5c:2a:7e:d9:
69:55:09:92:55:63:92:16:02:ea:98:35:77:be:f5:
84:de:31:8b:77:a8:29:c2:17:96:a3:af:d4:24:23:
8d:a9:7d:3d:de:31:89:1e:a8:b4:4a:ab:60:9e:f6:
20:b8:96:c8:8f:48:9f:4d:d9:14:9f:bd:63:c7:37:
54:85:a0:a5:09:2d:79:15:76:28:98:9e:25:02:49:
0f:64:6d:67:60:6c:ae:65:4d:8d:00:0d:cf:21:47:
48:fa:a2:3e:26:b5:c0:73:45:d8:45:06:df:ae:21:
9e:7c:ea:11:c0:6a:5a:52:17:fa:f7:1f:ee:a8:82:
35:24:48:e7:66:b3:a9:98:e5:04:98:df:e3:9b:bf:
d4:3b:fd:de:00:58:78:f5:7f:b3:38:67:08:d7:68:
2e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:07:66:B2:E1:1E:1F:C4:58:24:1D:55:34:BA:C8:D5:9C:DF:34:F0
X509v3 Authority Key Identifier:
keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2a:99:5d:ef:19:61:16:29:a1:92:d8:9c:d6:31:f1:4b:da:
9e:de:9c:31:b0:4c:21:51:a5:6d:72:f2:87:99:75:ce:44:a3:
f1:84:65:fd:f2:a8:06:48:97:a6:d7:82:76:f9:a2:ef:e3:9c:
46:f8:67:81:af:94:19:8c:40:67:b9:44:27:25:0d:13:cc:4e:
3d:e9:ea:f2:e2:8f:f2:4a:e7:80:ac:dd:7a:07:29:d3:bc:09:
de:9a:46:1a:c1:40:36:af:cf:a0:7f:ec:42:c4:3b:42:1c:eb:
4c:a6:8a:97:67:16:8e:e4:0e:96:8c:00:af:d8:8e:33:74:6a:
86:17:a8:e3:a7:b3:1e:cf:31:f4:0a:a3:43:b8:31:98:f9:9e:
30:c3:e4:db:90:c0:66:fc:cd:37:08:a3:1f:82:82:f3:a1:72:
01:c4:4b:fe:ed:f2:c6:8a:dc:42:db:c8:a0:42:80:53:d1:28:
c2:87:8f:37:6e:01:c9:42:4e:d3:d7:aa:c5:15:f7:93:34:5f:
08:bb:29:4d:c9:8e:23:60:94:e5:3c:d9:f5:d0:da:2e:ff:4c:
88:04:59:6a:8f:5b:52:70:f3:b9:bb:cf:31:5c:4f:e0:f9:fc:
2c:d5:31:dc:3b:35:1e:d9:e1:48:d4:82:76:4a:0b:f6:26:4d:
83:d3:8e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:25:42 2026 by rpki-client