Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
File: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft (raw, json)
Hash identifier: 8sLa0jwFnYurrYJdZv5msDdq7Abl5ce5MsPXjA876gk=
Subject key identifier: C2:C2:17:82:01:70:87:11:7D:C3:85:4F:94:B4:52:8C:87:F1:4E:EB
Authority key identifier: DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
Certificate issuer: /CN=dea85f21668a98d7e81a74183f0cce513086601b
Certificate serial: 01A11A198430F67B6C3E5B5D909073A1433A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
Manifest number: 0A25
Signing time: Thu 08 Oct 2026 06:00:42 +0000
Manifest this update: Thu 08 Oct 2026 06:00:42 +0000
Manifest next update: Fri 09 Oct 2026 06:00:42 +0000
Files and hashes: 1: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl (hash: MYwcbldDwauszT7mNCvr+RQ+he4skJ1WRhcwRzLXDm8=)
2: hBUefaIMV4VxrEK-fm1hTMzaWD8.roa (hash: ULTyVqCoLmJTp6EzOZiZ2uvQqGHDruUXv80DgFEK1ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:19:84:30:f6:7b:6c:3e:5b:5d:90:90:73:a1:43:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea85f21668a98d7e81a74183f0cce513086601b
Validity
Not Before: Oct 8 06:00:42 2026 GMT
Not After : Oct 9 06:00:42 2026 GMT
Subject: CN=c2c21782017087117dc3854f94b4528c87f14eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:75:2b:50:80:74:64:b9:96:36:b4:38:f4:
70:30:9b:5b:1f:29:1b:cf:f0:ec:16:a1:44:45:02:
ca:63:fd:d9:e5:7a:26:5c:64:aa:ce:dc:f0:41:ed:
28:46:71:77:17:77:7a:e1:d6:09:93:68:27:af:6b:
c1:2c:cb:7c:72:d2:1c:be:6c:37:c8:f4:4c:92:42:
e2:80:3f:cc:68:eb:64:b4:2a:bb:64:42:1d:68:f7:
ca:da:78:81:85:04:60:a6:f0:d1:e2:bd:e1:c7:c1:
31:50:4d:83:57:0b:5f:24:90:1d:67:b5:72:35:ed:
da:e1:90:5a:34:e2:fd:42:1f:18:52:58:66:93:55:
16:da:f1:95:3a:c3:5a:c6:58:e9:48:07:37:bb:f6:
b0:a1:ba:b1:a3:5c:d5:73:6b:93:90:1e:10:63:e4:
7a:62:ff:b2:34:3c:24:67:80:e1:c3:67:85:cc:ed:
30:24:71:d0:27:d8:b9:7c:8e:d4:0c:71:cc:47:dd:
81:de:02:14:a9:c9:b7:cc:89:3d:17:5a:2a:ac:44:
cc:15:d7:fc:76:0c:75:c7:53:e2:16:8a:61:61:92:
1c:63:fd:5a:25:b5:17:03:81:b9:0a:f0:42:9d:3b:
e1:4d:c4:9d:09:ca:57:5c:27:43:d8:d5:d8:c9:e1:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C2:17:82:01:70:87:11:7D:C3:85:4F:94:B4:52:8C:87:F1:4E:EB
X509v3 Authority Key Identifier:
keyid:DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:31:a5:1d:fa:0f:9b:53:bc:17:e0:4a:4c:e2:6a:0d:96:03:
32:92:ae:47:ba:02:8c:e8:eb:29:49:1f:67:b7:5d:21:91:7e:
96:dd:d8:91:02:94:40:48:12:50:3a:e3:c8:97:b2:63:70:99:
27:ca:a9:99:28:f3:08:45:22:61:a0:e2:33:be:95:d8:e7:33:
d2:1f:2e:c6:d5:63:c9:c4:f6:35:2f:bb:6e:31:2b:fd:de:f3:
08:84:79:b6:46:6b:b4:5e:b5:16:d2:3f:fc:e0:a8:a1:75:ca:
11:d7:77:c1:4c:96:1f:0b:3e:61:51:18:be:32:6e:0f:1c:36:
78:c0:e9:c6:05:63:ff:01:41:1b:20:65:05:dc:de:be:71:09:
49:8f:a1:3b:b3:17:65:85:82:e4:d5:4a:3b:db:3e:2e:d2:bd:
67:6c:96:bf:77:fc:8a:00:17:8d:c8:6c:5e:0f:bd:f4:e7:7c:
a4:88:d4:56:33:58:be:bf:15:f6:11:89:06:4e:3e:63:38:08:
fe:d8:d4:43:db:dc:8c:90:df:9a:4f:d8:b7:54:bf:b6:97:9f:
28:cd:db:e3:3c:f0:08:33:d8:99:27:2c:9c:54:5f:93:e4:9a:
74:dd:53:97:18:5c:f2:99:de:2e:a9:87:b8:d6:22:db:7c:9b:
d4:03:36:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:59:58 2026 by rpki-client