Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
File: qfNHED7zSa2C8basQ-dsD_o4wvg.mft (raw, json)
Hash identifier: xadKvZ7TdOy/Gvtd7gwAXkcA8t1Vzhiacan2xRPhW1I=
Subject key identifier: 74:38:0B:ED:8D:43:AD:A6:51:2C:BD:6D:26:8F:58:F0:D4:A8:C5:D3
Authority key identifier: A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
Certificate issuer: /CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Certificate serial: 01A06F837CD77962D7D50F50FFC24144EC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
Manifest number: B3
Signing time: Sat 05 Sep 2026 03:01:23 +0000
Manifest this update: Sat 05 Sep 2026 03:01:23 +0000
Manifest next update: Sun 06 Sep 2026 03:01:23 +0000
Files and hashes: 1: Cegt9gCk36CfyQoZLzS4cnrOmWA.roa (hash: yHvXAS+TMxPI4zuMGTC5jZ53ix1/BV7IdsaANR877aM=)
2: qfNHED7zSa2C8basQ-dsD_o4wvg.crl (hash: 6139jjR59Xef/5R/KMhTfbCygLA2szhKV+cybVyoueY=)
3: voGOvW0BRa27Yr9p1xeqy3udyvc.roa (hash: JKI8fmA0jDEWhuhuTal1D06exvXzvzQH3NDd7ekumtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:7c:d7:79:62:d7:d5:0f:50:ff:c2:41:44:ec:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Validity
Not Before: Sep 5 03:01:23 2026 GMT
Not After : Sep 6 03:01:23 2026 GMT
Subject: CN=74380bed8d43ada6512cbd6d268f58f0d4a8c5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:69:21:e4:61:0c:fb:65:e5:ee:90:2d:2b:
19:8a:cd:96:86:7e:08:b7:03:f2:2e:e5:ca:9a:32:
b0:65:6d:06:f2:0d:e4:e7:51:85:54:f3:7d:32:10:
0a:74:e5:9c:6d:d7:3d:43:f6:ab:b5:bf:91:d1:ee:
14:6b:28:0b:d6:b5:c4:63:c2:31:fe:f8:45:71:11:
c0:16:30:8a:7a:bb:2d:46:f1:98:d0:b4:a7:22:8e:
42:6b:55:1c:19:b9:04:ef:61:44:d9:62:30:e5:1d:
91:3e:70:dd:40:26:a3:6e:c7:79:86:cd:fd:f4:f2:
0e:7b:68:60:54:ce:c8:17:b1:31:d9:a7:17:4e:21:
2f:f6:f6:4c:59:6a:7b:6f:d1:af:88:78:74:d8:fb:
bc:fd:9a:3b:97:35:a3:92:5a:4b:9a:11:bc:aa:30:
84:d9:f5:2c:69:3e:15:c7:3c:10:27:7a:85:0a:a6:
fd:d2:ce:75:4b:ba:47:24:01:81:c2:ad:93:90:ee:
a4:76:87:da:62:f4:fe:b2:08:82:f2:1d:5a:83:c1:
4d:72:f8:d8:2c:0b:be:c5:d9:95:18:22:a6:9e:71:
57:76:89:8f:d8:d0:77:ae:cc:5f:df:b5:13:84:8d:
e3:88:7d:e7:69:16:a2:34:b7:7d:d4:be:af:c5:1f:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:38:0B:ED:8D:43:AD:A6:51:2C:BD:6D:26:8F:58:F0:D4:A8:C5:D3
X509v3 Authority Key Identifier:
keyid:A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e6:9b:b2:35:b9:51:fc:1e:69:bf:67:91:11:12:33:7c:de:
21:7c:42:2d:f1:f2:fc:f8:a0:f9:8c:2a:22:87:4a:3d:10:6f:
b2:76:ba:05:a8:a5:53:0c:3a:c7:08:7f:4d:a4:07:2a:04:2d:
85:5c:85:50:11:e4:c9:c7:9c:0a:02:3b:09:eb:9b:6e:50:41:
f3:21:22:3d:77:7a:64:fa:21:ca:4e:8c:27:5d:fe:7e:f4:4c:
32:75:6b:78:f7:4e:2d:40:93:65:9a:7d:78:fc:70:d5:3d:70:
a9:c9:8b:5c:4d:dc:de:eb:02:86:cc:a6:5e:0b:2e:bb:27:63:
fb:a6:0f:79:36:33:c6:36:e2:0f:4b:3e:2a:2d:5e:76:1a:fb:
03:0d:4c:67:57:b4:8e:e8:f6:93:0f:18:52:30:7d:db:9e:18:
ab:47:a1:53:ba:1c:0b:2c:e7:9f:7c:86:84:8f:5f:ce:ff:f3:
c6:38:52:97:af:b9:4b:49:d9:7b:ce:00:5c:f1:46:83:d1:0e:
84:23:b6:da:0a:12:e3:71:66:87:e7:3d:53:85:aa:94:67:61:
86:be:f6:25:94:33:1a:0e:0d:d6:11:8c:f6:bd:1b:f3:09:4e:
86:db:d0:dc:35:71:2d:25:54:82:a1:c4:bc:e2:d0:aa:9a:85:
dc:20:01:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:31:41 2026 by rpki-client