Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier: uxf2PkEyDSGP86uge7P6NpCBP9G42tMVymbu600BEAU=
Subject key identifier: 46:96:74:D0:19:0D:B5:B7:37:A6:53:58:D3:61:D0:15:B5:C5:ED:25
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial: 019D9B51119308775D5BCCE2E88E2379CDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number: 06C7
Signing time: Fri 17 Apr 2026 12:01:14 +0000
Manifest this update: Fri 17 Apr 2026 12:01:14 +0000
Manifest next update: Sat 18 Apr 2026 12:01:14 +0000
Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: a20yzl5x23Q8hQmvrAXXMn5DKD37pMXKAXSLIwe5guo=)
2: WoN0CrYvueqPk1KqmXJffVK7ib4.roa (hash: 4FA6Dc/pCbAQFuPtL5vNxbuQK2/hlz7MGBa9RY6awaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:11:93:08:77:5d:5b:cc:e2:e8:8e:23:79:cd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Validity
Not Before: Apr 17 12:01:14 2026 GMT
Not After : Apr 18 12:01:14 2026 GMT
Subject: CN=469674d0190db5b737a65358d361d015b5c5ed25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:bb:54:dc:93:77:e3:56:49:72:48:9d:3e:
6a:5d:6a:f1:6b:09:7a:96:bf:c6:c9:e1:3b:12:3f:
a6:c2:66:23:37:c8:52:19:b2:30:af:07:91:e9:6d:
2e:52:d5:d1:5a:2b:8e:d1:60:a1:c6:c8:40:3c:84:
68:e0:78:b3:69:78:66:9f:4c:c7:62:46:40:2e:4e:
7a:d2:52:0b:bf:03:9f:91:6f:f4:35:a2:bf:2e:e3:
e8:4f:a6:56:a9:c7:ca:c6:02:55:f6:e6:47:58:31:
19:c4:f0:88:89:b8:d8:21:2d:be:44:51:49:97:5f:
9a:de:fe:9c:e9:f8:1c:ba:a3:d8:73:1d:4c:06:80:
f0:dd:12:56:08:41:11:6e:70:64:b6:7c:0d:b7:f2:
d3:04:15:c8:58:2b:a4:b1:c6:47:22:0f:34:2b:4f:
a9:3e:8b:9e:6d:4f:5e:af:7d:92:7c:48:c1:fe:36:
15:49:5b:5d:2b:ab:4d:90:39:3a:c2:9b:e7:df:92:
35:8d:a6:72:d8:34:4e:07:f0:5a:44:75:a8:b1:00:
b7:b0:73:60:17:cd:0e:97:f3:42:00:99:50:c6:ac:
22:03:23:3d:b6:4d:c0:34:a9:19:99:e3:73:39:bc:
6a:f3:40:35:17:97:7f:ff:62:e4:a2:8f:da:f4:20:
cf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:96:74:D0:19:0D:B5:B7:37:A6:53:58:D3:61:D0:15:B5:C5:ED:25
X509v3 Authority Key Identifier:
keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bd:ce:0d:3a:f6:e0:3d:53:2f:fe:a8:e9:61:2f:6b:a7:af:
06:bc:58:76:b9:e4:ea:f9:ef:53:78:ec:78:13:3a:cb:61:3b:
35:2a:82:85:03:65:dc:ad:c7:32:d5:3d:11:4d:07:fd:7d:62:
0e:ed:f6:14:3a:02:a3:2c:5b:f7:0b:26:b4:aa:f7:c1:cc:50:
38:9d:3a:83:3d:6f:21:1d:e5:ae:88:63:8b:ac:ac:8b:88:ab:
7c:f5:0b:a2:5d:b0:0e:80:7a:ad:14:ea:b0:b2:92:5a:cc:5e:
7c:b8:0a:09:da:f6:81:51:f8:15:21:4b:7a:21:9a:7e:39:ae:
2c:4e:c5:3d:16:b1:20:c5:cf:92:2b:49:7a:ae:08:81:92:62:
4c:39:bd:05:20:5e:32:3a:35:df:49:6b:12:cd:df:a6:0b:28:
cc:0f:a6:31:9a:75:ed:36:5f:61:05:24:52:6f:ee:fa:e5:31:
94:d6:ca:98:04:9b:2b:1e:f5:30:eb:4b:2d:07:53:f5:08:e1:
34:4f:cd:2e:11:f8:63:31:16:e8:b8:65:82:79:f8:36:b5:e9:
7d:db:f0:30:7f:48:dc:ee:51:32:3d:20:b6:61:69:fe:17:60:
9a:85:bc:97:66:76:5d:1d:0d:34:6d:a0:d7:b4:36:f1:42:5f:
d1:0f:0d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:17 2026 by rpki-client