Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: fJAdlldMzJyHB305InrbI2lnY5vcoruAr7C50JqTbdE=
Subject key identifier: 59:61:4C:80:D9:CC:2D:A7:C0:DB:48:6B:C5:D0:61:49:9E:B7:9A:CB
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 019DED126246787F87E504E32586A0321B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 0B2F
Signing time: Sun 03 May 2026 09:01:38 +0000
Manifest this update: Sun 03 May 2026 09:01:38 +0000
Manifest next update: Mon 04 May 2026 09:01:38 +0000
Files and hashes: 1: 0VMT834xpSH5P_uOhco5RR0cnoY.roa (hash: Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=)
2: 3QB4_WrWv1_f_4y7MeernB0lxRQ.roa (hash: zfF5AjAOtIAaIZLUIxCgwwAY3O+6F4xLShcmNVe/TXA=)
3: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: 2g09XnTKCJDGL9Asps+Esr/tw124gNQwl0Dg0xE26Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:12:62:46:78:7f:87:e5:04:e3:25:86:a0:32:1b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: May 3 09:01:38 2026 GMT
Not After : May 4 09:01:38 2026 GMT
Subject: CN=59614c80d9cc2da7c0db486bc5d061499eb79acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:40:7c:87:9d:7a:19:f1:72:b0:3a:8d:32:
94:d7:81:e4:39:27:28:c8:72:68:8c:64:bc:02:77:
b2:45:49:34:9b:91:a5:9e:33:6a:2f:a4:fd:28:8f:
a3:48:cd:a4:e0:77:23:4d:f8:13:93:ba:9f:54:e6:
8b:46:5d:19:a3:0f:71:94:c7:a5:fb:83:30:d2:03:
eb:a6:b1:62:2f:a6:ed:ba:15:59:69:e3:1b:40:83:
37:81:b9:b3:d4:5a:02:89:08:64:56:43:85:d5:3f:
6d:fc:9d:11:01:fe:e8:ca:a1:4c:4e:aa:7a:08:63:
f3:3a:32:f7:28:c5:a9:10:06:4b:2f:49:dc:64:3f:
41:21:1e:78:3b:8c:62:93:94:6c:e7:a9:eb:a5:1e:
6c:ff:b7:4e:07:ad:85:3a:6e:42:97:35:1f:c3:c3:
00:cc:ef:36:c7:c3:ce:cd:49:bc:c2:0f:ab:df:70:
98:f4:96:d2:43:04:3e:d6:71:3d:0f:4f:20:4f:15:
e5:d8:d9:cb:94:5d:b0:13:6a:b0:18:25:8b:5a:b7:
0c:df:25:d3:c8:a0:58:c8:f2:f4:d5:3b:f9:67:e9:
8b:4b:7f:c1:7f:36:18:23:b7:94:cf:56:53:a1:46:
5b:b3:89:ca:c9:a2:f2:1d:8c:91:ce:60:7f:53:78:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:61:4C:80:D9:CC:2D:A7:C0:DB:48:6B:C5:D0:61:49:9E:B7:9A:CB
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:94:a6:7d:ef:ec:20:79:10:05:6e:62:6a:3c:ef:4d:75:67:
d9:d2:94:de:d9:f4:a2:a5:ec:30:98:8d:3b:98:fe:75:0c:94:
ac:5b:bf:b0:c7:2b:c1:4e:e9:b1:f5:4c:02:9c:4d:0c:73:dc:
14:b2:6e:40:a1:11:91:94:98:34:b1:e2:df:ef:df:e0:16:86:
d3:0c:7c:e3:69:dc:dd:c4:68:fd:d6:e9:4d:c5:0d:bd:f7:e2:
32:e4:0e:40:19:dd:0f:cb:8b:54:26:d2:19:b2:72:73:27:b1:
cf:f0:46:4d:3b:ba:14:e3:4f:d7:92:5e:be:63:54:28:d8:06:
0b:5b:0a:d6:ba:e5:38:16:d9:63:66:97:95:fb:68:fe:2f:28:
d7:47:a7:54:57:a8:a1:f5:92:94:f6:19:70:e3:d6:86:21:34:
07:9d:5d:ba:77:7e:3d:fa:33:34:1b:f2:6e:c8:85:a5:93:9a:
08:8e:c9:cc:b3:a7:7e:de:3b:c0:37:12:e2:07:cd:27:1b:6b:
a0:d4:e6:3b:a9:2e:3b:f8:08:7a:ad:74:57:69:b1:47:d4:4f:
9a:cf:df:d8:b2:c3:74:dc:66:18:7f:91:bc:12:f6:85:9f:65:
dc:41:a5:2f:95:3f:f7:b8:2f:ed:74:8b:1c:6f:db:71:50:42:
e4:5c:2e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:06:43 2026 by rpki-client