Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: ouLqWAA0eQdByR+6UoxDm0SPIoboBK35mnRgqtqx+l4=
Subject key identifier: EC:6E:90:0A:EF:75:EB:EB:2B:5E:89:83:10:82:DF:EF:FB:5C:FE:64
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 01A0D9F1EB9F3513D6FCEB408EC8FD53CCDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 19:01:45 +0000
Manifest this update: Fri 25 Sep 2026 19:01:45 +0000
Manifest next update: Sat 26 Sep 2026 19:01:45 +0000
Files and hashes: 1: 0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa (hash: RzDAQWUlUC2j8WOaVbsFRmGBNqRpbLHgJHxSpxsXf7Q=)
2: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: G2N5gFYyFGBOyDDfNqN88ichbSitWNUgRUlHZwrnywk=)
3: lg-osn9EUdIDJV3HpKBV7GEVZBA.roa (hash: R0yIGLDbtgAEX53dIyQ8T0aPBUwbUP+tfVSTJU5okAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:eb:9f:35:13:d6:fc:eb:40:8e:c8:fd:53:cc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Sep 25 19:01:45 2026 GMT
Not After : Sep 26 19:01:45 2026 GMT
Subject: CN=ec6e900aef75ebeb2b5e89831082dfeffb5cfe64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d5:17:20:31:40:fe:f0:05:af:69:36:a7:62:
53:e0:2c:37:9e:20:90:04:56:fa:db:d5:3c:88:7e:
92:04:21:f5:cf:03:2f:d5:e0:ea:53:8b:bf:2e:c2:
e1:cf:6e:13:d0:11:2b:19:9d:73:d3:72:a1:61:5c:
e0:bc:c0:80:a9:15:e4:54:dc:0e:87:14:69:4f:45:
ed:e2:a5:2c:48:7a:d8:da:5e:4b:2d:53:6c:22:61:
4a:d9:13:da:9c:31:6a:74:b2:67:1d:3a:f6:40:2a:
34:c8:48:c5:d3:fe:3e:6b:fc:cd:eb:5d:ac:0b:a4:
54:4d:36:de:be:d2:4b:66:36:f2:6b:4f:90:30:a1:
d9:55:90:66:f6:fd:22:0f:51:b4:88:28:19:87:44:
11:44:07:ad:4c:98:d7:67:45:ce:e9:84:71:7f:ef:
5c:9a:9c:d6:47:0c:92:e3:63:fc:56:2b:c8:f4:ae:
60:93:74:d7:84:53:ff:89:40:38:9f:e2:e7:30:63:
26:f9:f6:5f:13:e2:0a:10:ed:ba:1d:f6:45:a1:12:
3f:27:c5:61:c8:e6:bc:15:44:71:e7:c3:c6:6a:62:
e8:56:82:52:27:1a:bc:89:21:1e:77:7d:50:60:41:
97:9d:72:e9:2a:5e:a3:db:9f:fc:4c:34:5a:e3:48:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6E:90:0A:EF:75:EB:EB:2B:5E:89:83:10:82:DF:EF:FB:5C:FE:64
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6a:66:d6:1a:50:e5:47:e1:8c:7c:58:cb:df:fd:0a:5b:a9:
03:d1:23:38:3c:6c:51:a2:02:69:fa:02:d3:19:c9:84:6b:05:
91:14:0d:85:0e:89:dd:fb:32:0f:d7:b7:94:a1:c3:08:73:b5:
c5:04:42:1c:b5:63:0e:3e:25:d8:8e:6e:12:db:c8:ae:17:41:
23:a9:af:06:b6:09:05:ed:db:cb:97:a8:74:4f:fd:39:71:43:
d0:02:b9:b9:5c:05:48:44:53:e5:a3:9e:3d:40:82:24:d1:ee:
78:66:61:57:3c:76:44:40:b3:90:de:ed:2f:50:62:4b:7b:d8:
70:ca:cd:84:3e:bf:ed:ed:44:46:72:4c:de:69:88:fd:ac:4a:
40:39:ea:2a:e2:13:80:d0:11:19:ea:c7:13:dc:5d:34:1c:71:
ff:01:1e:9e:69:88:d8:8f:88:2a:a4:79:06:cd:04:a9:b8:f3:
f9:7d:70:ef:c4:a9:ca:6a:63:d8:9a:65:e1:c0:9f:0e:60:54:
2a:19:d0:f5:31:cf:ec:90:ba:ad:eb:18:73:a1:9a:36:a3:ef:
d9:aa:59:7a:0e:4e:56:61:dc:90:d9:ab:bf:3b:95:f3:cb:05:
32:8d:37:01:63:77:dd:0c:9f:05:32:a7:12:e5:eb:75:23:9f:
da:c0:40:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:26:48 2026 by rpki-client