Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: Dn9Deww3eZQL1XQF0AsWHwLfH+6pu1pERxRsMULO7c8=
Subject key identifier: 4A:6A:24:0D:FC:6E:8D:02:ED:45:20:67:9F:F6:2C:B4:F7:CE:8A:E8
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 01A1182AE94FCABBB2FD0BFA0B8583D2193E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 0CD3
Signing time: Wed 07 Oct 2026 21:00:27 +0000
Manifest this update: Wed 07 Oct 2026 21:00:27 +0000
Manifest next update: Thu 08 Oct 2026 21:00:27 +0000
Files and hashes: 1: 0VMT834xpSH5P_uOhco5RR0cnoY.roa (hash: Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=)
2: 3QB4_WrWv1_f_4y7MeernB0lxRQ.roa (hash: zfF5AjAOtIAaIZLUIxCgwwAY3O+6F4xLShcmNVe/TXA=)
3: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: uHYJpdK39oqC3wjG/AYk9+VrihOPVOs8UeeGRP1PRKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:2a:e9:4f:ca:bb:b2:fd:0b:fa:0b:85:83:d2:19:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Oct 7 21:00:27 2026 GMT
Not After : Oct 8 21:00:27 2026 GMT
Subject: CN=4a6a240dfc6e8d02ed4520679ff62cb4f7ce8ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:9a:58:10:4c:3f:9c:58:27:af:30:0b:1f:
8c:e9:89:50:e3:7a:bd:fc:d5:35:4f:1d:3f:3c:e6:
94:60:0d:41:c0:73:48:a2:70:43:2b:68:c3:ac:ab:
1b:30:d5:b2:e8:a6:cd:58:37:55:55:50:af:27:ca:
d1:c3:0d:8a:c0:b6:85:e7:dc:19:06:af:fc:6a:18:
6e:0d:b1:b3:c7:66:fa:ae:3d:71:47:d9:5b:4a:6d:
af:26:ac:20:88:bb:d8:79:3c:b8:cd:09:99:19:3c:
bc:62:21:d9:03:75:30:dc:fc:fb:9c:ef:f4:5a:de:
dd:b9:f4:d2:b9:67:05:45:9e:26:05:91:55:54:7b:
95:2d:a4:f8:8e:03:ef:3e:cb:33:47:b3:22:27:52:
6b:f1:01:16:1f:47:63:0c:f4:d5:61:7a:b9:84:6c:
cc:1a:76:9a:19:2d:b4:23:b7:48:82:8d:b3:c9:ac:
63:7a:6c:11:fb:6e:49:0c:01:a9:0a:70:08:04:c3:
a6:b5:22:90:59:1b:14:29:80:f7:0f:6d:09:ac:27:
03:83:07:de:c1:a2:e3:98:0c:fe:35:72:2b:54:7c:
3d:84:5e:2f:f2:c0:e1:bf:22:5e:46:14:f5:ae:c2:
f3:fb:09:0b:6f:0a:a6:93:1e:6b:94:60:d8:a5:3b:
e2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:24:0D:FC:6E:8D:02:ED:45:20:67:9F:F6:2C:B4:F7:CE:8A:E8
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8b:ff:96:46:98:9d:46:ea:dd:29:b2:8d:01:61:a9:3c:27:
e2:b3:db:e5:9f:c5:e0:cd:5a:54:fe:33:e5:54:e7:2d:8f:1f:
6c:2b:eb:73:d9:f4:53:5a:d2:13:f3:89:7c:78:08:c3:1e:89:
0a:80:94:3c:04:3f:77:89:37:82:4a:f5:83:d0:7c:89:c9:5f:
d8:c7:74:2b:3a:08:d5:ff:de:1e:82:57:70:14:74:e4:76:8f:
f9:f5:a8:c2:7b:cd:a2:38:3b:71:26:4b:3a:11:0f:1b:2d:57:
16:40:04:82:e6:2e:a5:6b:58:a5:48:6d:a3:88:d4:ba:33:af:
b1:56:ad:0e:c0:07:0e:87:8f:51:fd:9c:f7:14:64:e6:72:9c:
81:18:44:be:b1:d4:a0:ee:16:82:86:bb:c9:ba:8b:7e:20:64:
f7:13:26:8e:a3:74:28:ad:a1:4e:6b:28:f2:7c:67:50:e7:1d:
cc:53:2f:72:7a:2c:48:f9:94:f2:36:2b:41:6a:8c:e9:dd:56:
f8:b5:7a:a3:e0:16:66:44:fe:fb:d4:cb:e3:4e:c2:88:6e:1c:
d7:e5:de:04:14:cf:e4:99:aa:07:8b:50:91:bb:b9:c4:60:9d:
b1:49:17:f7:70:80:4f:5d:1d:a7:b7:f7:6d:8e:f3:1f:06:95:
aa:96:fb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:24:08 2026 by rpki-client