Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: NhgV7MbGbHs6bZ7czk+frnWcUm9HgTlyOHINWLDVMU8=
Subject key identifier: 04:BB:28:8F:3B:71:56:28:D4:F3:A1:3B:AD:8E:31:DA:DE:F2:D0:72
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 01A0BEE7DABF146D194CF15F8C7EC1753078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 1A63
Signing time: Sun 20 Sep 2026 13:01:00 +0000
Manifest this update: Sun 20 Sep 2026 13:01:00 +0000
Manifest next update: Mon 21 Sep 2026 13:01:00 +0000
Files and hashes: 1: 0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa (hash: RzDAQWUlUC2j8WOaVbsFRmGBNqRpbLHgJHxSpxsXf7Q=)
2: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: c5MyTy7v4cM3gNLlzXTQOPd5aRdzmekIDE7Iswa+W+o=)
3: lg-osn9EUdIDJV3HpKBV7GEVZBA.roa (hash: R0yIGLDbtgAEX53dIyQ8T0aPBUwbUP+tfVSTJU5okAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:da:bf:14:6d:19:4c:f1:5f:8c:7e:c1:75:30:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Sep 20 13:01:00 2026 GMT
Not After : Sep 21 13:01:00 2026 GMT
Subject: CN=04bb288f3b715628d4f3a13bad8e31dadef2d072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:7c:1e:b3:26:fd:11:c8:6a:96:c1:fb:1b:
cf:90:e7:f8:c1:bc:17:4d:60:77:14:2c:62:13:6b:
19:f4:6a:b6:40:f4:d1:ad:c5:d6:26:e0:2c:80:bd:
5d:4b:f8:de:fc:82:a1:82:3e:58:14:d8:99:3b:16:
b4:1a:ab:3c:98:2e:20:c7:9c:dd:13:87:1d:ae:53:
3f:6d:d6:5c:bc:42:2a:ec:84:49:f3:bc:b1:8f:ea:
69:1f:9f:f4:01:0a:a6:0c:77:0a:55:52:93:7a:7b:
b6:9f:90:3a:eb:4c:2d:88:34:2b:30:ae:d9:6e:e7:
8a:8c:f1:1f:8e:26:6d:7e:b8:9b:fa:17:db:17:b4:
db:65:bf:93:ae:b2:85:17:84:29:b3:fd:a4:72:f3:
94:bc:33:fa:86:05:49:23:34:22:8f:ae:1a:fd:51:
33:52:36:8c:ab:08:07:b2:f6:42:6b:36:82:15:11:
a2:f4:ca:08:fb:11:1d:63:93:44:c4:29:c0:16:8d:
1d:da:d2:29:cd:88:e3:1d:fb:c7:a7:90:4e:1c:9a:
05:15:f1:55:e1:54:0a:16:22:92:4e:b6:ec:f9:d9:
71:2c:57:c5:e8:17:2c:ae:30:80:43:b5:38:63:2e:
ce:00:10:ca:eb:1a:5a:c7:de:02:4b:a3:f6:df:5f:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BB:28:8F:3B:71:56:28:D4:F3:A1:3B:AD:8E:31:DA:DE:F2:D0:72
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:07:ab:ee:07:12:f4:be:9d:a2:c6:23:71:a3:da:6a:09:fb:
61:6a:17:e2:c9:ff:48:29:6e:5f:7b:74:8f:a2:67:70:08:c5:
30:22:00:f5:fe:a2:8b:72:6d:7a:86:37:d5:ac:66:35:04:7f:
f6:35:0f:fb:cd:4a:fb:7e:89:c1:e6:5f:2f:75:f6:8d:43:0b:
6c:7f:bd:af:aa:d8:a3:5e:cc:ae:d1:52:87:b7:eb:a3:ba:aa:
97:1c:be:78:41:6a:29:de:33:7c:fb:2d:97:0a:b5:74:2f:66:
b0:00:96:fe:92:e0:43:8f:67:29:4b:a9:4b:ab:03:31:37:bf:
3e:9b:7b:3c:2a:50:f3:af:ec:96:e9:2f:4d:39:d0:3c:e0:8e:
fe:d8:92:c5:f4:db:a1:3f:3e:cd:c2:2e:74:26:b2:a1:1e:78:
21:fc:67:d7:03:c8:5a:b6:c0:a4:b6:f5:70:bb:30:6b:60:24:
06:09:c7:59:3f:3a:bd:44:55:13:ae:51:af:10:48:08:7a:62:
39:8b:f6:92:a5:63:c6:de:8d:32:df:42:0e:15:da:29:a2:6e:
ac:e2:88:5c:12:2d:65:a5:dd:2b:b3:16:6a:91:04:0d:dc:1b:
95:97:90:66:50:70:6b:80:e5:d2:fd:43:ed:07:f9:41:d9:85:
59:56:cc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:08 2026 by rpki-client