Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: 7tI9wS2BcqHErX6kdenGR3+o3GVV13o4WG94w0o3AIM=
Subject key identifier: 67:42:DD:7D:F8:25:77:D7:9C:EF:E2:99:58:63:52:33:70:33:32:0E
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 01A002139C0155337786E7E0ED32B8BF1BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 0C43
Signing time: Fri 14 Aug 2026 21:00:34 +0000
Manifest this update: Fri 14 Aug 2026 21:00:34 +0000
Manifest next update: Sat 15 Aug 2026 21:00:34 +0000
Files and hashes: 1: 0VMT834xpSH5P_uOhco5RR0cnoY.roa (hash: Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=)
2: 3QB4_WrWv1_f_4y7MeernB0lxRQ.roa (hash: zfF5AjAOtIAaIZLUIxCgwwAY3O+6F4xLShcmNVe/TXA=)
3: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: y5FZnLjUPwzMl3cB5pAV9O82wjf6z/mHRSSps63/bww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:9c:01:55:33:77:86:e7:e0:ed:32:b8:bf:1b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Aug 14 21:00:34 2026 GMT
Not After : Aug 15 21:00:34 2026 GMT
Subject: CN=6742dd7df82577d79cefe299586352337033320e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:21:48:27:94:75:0f:0d:d7:9e:1e:dd:0a:
29:10:a2:e2:f8:44:6e:97:9e:43:45:3c:a6:d7:08:
ac:62:e0:01:a9:ed:99:e7:26:75:07:95:67:39:1e:
bf:a1:5d:4e:b6:bd:40:ba:bb:64:10:77:aa:96:7a:
2e:87:31:f3:f7:8b:de:7d:7b:d4:7b:f7:62:89:dd:
11:2a:b3:0c:9c:79:ff:a6:66:d0:fc:b7:27:00:ab:
96:88:fd:9a:7f:55:a2:57:bb:d3:76:cf:79:12:15:
0f:65:ec:a7:a8:91:df:7b:ce:36:7e:67:47:a7:cd:
b4:4e:98:32:af:cc:5a:f6:5b:07:37:36:b6:87:89:
7a:85:9a:39:0c:e9:de:42:cc:82:3d:52:da:50:24:
26:9b:94:48:ea:0e:22:17:fa:9c:59:b9:70:86:84:
73:09:a5:2a:0c:c9:52:95:d3:59:cd:95:b5:04:c3:
10:d6:b0:b4:ba:ea:9d:51:ab:84:cb:df:0b:05:34:
59:13:1c:5d:19:00:f2:dd:09:f5:1f:7f:38:f6:62:
7b:31:fa:eb:9d:f3:db:99:bf:1e:a7:70:15:3c:3f:
d2:09:7a:95:9c:b8:87:1d:25:a9:c7:ad:29:28:7f:
6a:1c:cb:f5:18:40:f0:c7:49:34:21:2d:bf:1f:ef:
cc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:42:DD:7D:F8:25:77:D7:9C:EF:E2:99:58:63:52:33:70:33:32:0E
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:56:21:eb:2f:89:39:0b:cd:02:5f:5b:5c:7c:4f:21:d3:82:
ab:c5:ba:02:94:53:ca:c1:66:6f:3b:48:bd:86:3c:ad:3d:d9:
e8:d4:df:08:14:a8:3c:fc:dc:94:f8:db:a2:e1:20:3d:a8:6c:
9a:c2:11:45:02:37:be:af:cf:4c:9f:c6:3c:39:fd:ba:46:9e:
29:d0:ec:9c:8c:50:48:e0:41:bd:8d:35:84:16:94:d4:fa:94:
e2:bd:1d:85:d7:06:b6:8b:ab:f7:95:85:07:f1:5a:c8:50:26:
25:28:f7:f7:a2:c9:63:16:5e:b7:aa:c1:2f:5c:bf:ac:f0:37:
a6:ec:0f:4e:1e:5c:ee:91:e5:a8:f3:62:86:af:7d:81:9a:b3:
58:78:b8:9d:69:51:b2:59:22:81:e4:dc:ae:3c:09:58:7e:19:
45:81:3f:9b:a5:95:e7:e4:60:64:ce:03:a3:2d:bf:68:55:9f:
67:7e:f1:4d:9a:cf:70:68:8d:5b:94:09:f4:a4:7d:79:e6:7f:
eb:8c:57:d2:b8:23:56:6e:9d:89:81:b5:af:3d:6a:8f:40:10:
a3:8b:46:22:60:ca:db:19:5b:a9:f0:c4:a1:30:3f:0e:ee:82:
bb:6b:a8:31:ee:fe:a5:62:68:20:55:48:5f:80:e6:60:d5:98:
bd:a4:f5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:55 2026 by rpki-client