Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: xjUFpcaNDopWYus8nDUX+wxpSkVEomagqDAqDM8fSTk=
Subject key identifier: C2:69:77:CA:39:67:C0:A5:FB:44:85:0E:73:01:FF:C7:75:25:5A:A4
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 019EF9831AC1D3FD049D3EC39F3F23227F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 0BBA
Signing time: Wed 24 Jun 2026 12:02:59 +0000
Manifest this update: Wed 24 Jun 2026 12:02:59 +0000
Manifest next update: Thu 25 Jun 2026 12:02:59 +0000
Files and hashes: 1: 0VMT834xpSH5P_uOhco5RR0cnoY.roa (hash: Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=)
2: 3QB4_WrWv1_f_4y7MeernB0lxRQ.roa (hash: zfF5AjAOtIAaIZLUIxCgwwAY3O+6F4xLShcmNVe/TXA=)
3: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: CExCGEc+pVkmXyBoTnp2i/xxy875eQWON+NAbayXwZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 12:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:83:1a:c1:d3:fd:04:9d:3e:c3:9f:3f:23:22:7f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Jun 24 12:02:59 2026 GMT
Not After : Jun 25 12:02:59 2026 GMT
Subject: CN=c26977ca3967c0a5fb44850e7301ffc775255aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:c4:2f:39:6b:65:dc:8d:fc:22:39:52:ae:
7e:26:db:18:46:fb:43:38:b2:da:d3:b4:f3:49:c1:
e7:f6:9e:cc:51:73:65:80:f2:c0:ac:c2:06:a7:2f:
68:aa:f2:8f:69:5f:55:36:4a:36:f4:01:38:55:cb:
61:70:61:21:52:b5:00:4a:6a:27:3d:f8:89:3c:16:
d2:d5:f1:76:16:68:dc:c7:73:cf:2a:ac:46:7a:51:
a2:75:b8:ef:f9:83:fb:84:df:59:6e:8a:38:cc:b8:
14:d3:a2:7d:6b:7f:22:9b:1a:81:af:ce:3d:6f:61:
1d:fa:fb:e3:2a:e0:93:dc:85:b3:05:74:09:6c:82:
63:b4:5d:41:ee:d7:b9:9b:df:8e:0e:30:c9:c2:74:
c6:d8:58:f6:8e:52:2a:28:c8:ea:31:45:b7:15:19:
c3:f5:11:26:c7:07:40:ec:e7:95:98:eb:ec:3d:21:
1f:62:77:c7:b0:83:f3:ff:c7:40:ba:4f:51:0a:81:
17:08:e4:45:c7:80:f3:99:5f:5e:87:f3:8c:58:7c:
3f:5c:74:5b:8b:e5:73:af:57:98:3c:56:9d:dd:49:
07:f0:98:d7:17:66:9f:48:47:9c:15:7e:7e:cb:5f:
2b:f4:60:bb:47:f9:a2:df:ef:6d:f3:62:f3:66:74:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:69:77:CA:39:67:C0:A5:FB:44:85:0E:73:01:FF:C7:75:25:5A:A4
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:57:37:b8:c8:59:63:7f:60:88:81:9d:50:ef:9d:a4:83:cd:
46:fd:ac:e0:84:f4:62:91:77:23:b9:b9:81:7a:98:b1:54:81:
31:64:da:d8:71:49:c9:08:5f:c1:01:84:90:e2:d9:57:c1:90:
7b:dd:ae:d3:c1:48:99:08:0f:aa:86:99:85:e3:e8:de:2c:a5:
dc:30:76:65:04:9e:6a:55:92:88:ab:4f:69:a9:68:55:2c:b1:
80:0a:95:9d:0a:50:86:72:54:d5:d1:29:5e:1f:6b:96:0a:f9:
ff:7a:a2:7e:4a:37:93:74:f9:27:ae:0f:f8:df:9e:6e:19:a4:
3a:71:99:b1:de:24:28:38:cc:d1:4a:52:bf:b7:ac:2b:52:54:
f4:48:db:65:1e:0e:8e:2a:b5:4c:ec:13:a9:d7:2b:e7:48:d3:
e5:8d:b9:29:36:5b:ae:77:5e:93:e1:5c:eb:ee:61:6b:22:38:
a9:48:08:65:f4:85:9c:5e:ce:32:05:f5:29:c0:0c:cb:86:a6:
cc:2a:57:d3:95:c0:b9:f9:5e:0e:43:51:f7:e7:f1:79:07:f3:
e3:ae:dc:b2:54:9e:fa:52:47:8f:57:42:6b:67:bb:95:b0:b2:
2b:aa:ae:43:fd:aa:6b:fd:d2:f3:f3:c7:a3:cb:bb:c8:3f:b3:
61:e6:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:18:28 2026 by rpki-client