Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: 5BkClIV9AkEyG+S3X7mdf5P6k1pSLWYAHwb+WbAnGy8=
Subject key identifier: D5:45:50:DF:CB:5F:71:E4:12:49:6F:24:E1:73:AC:B5:DC:4A:18:47
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 01A1144EA3732968BC8AB7428919146EF39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 0CD1
Signing time: Wed 07 Oct 2026 03:01:00 +0000
Manifest this update: Wed 07 Oct 2026 03:01:00 +0000
Manifest next update: Thu 08 Oct 2026 03:01:00 +0000
Files and hashes: 1: 0VMT834xpSH5P_uOhco5RR0cnoY.roa (hash: Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=)
2: 3QB4_WrWv1_f_4y7MeernB0lxRQ.roa (hash: zfF5AjAOtIAaIZLUIxCgwwAY3O+6F4xLShcmNVe/TXA=)
3: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: 2H2KFuP5/m6EFMb5NYxNVtXCwlsmVI/fnjpYqSCnVSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:4e:a3:73:29:68:bc:8a:b7:42:89:19:14:6e:f3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Oct 7 03:01:00 2026 GMT
Not After : Oct 8 03:01:00 2026 GMT
Subject: CN=d54550dfcb5f71e412496f24e173acb5dc4a1847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:19:ed:6c:83:6a:da:91:aa:af:19:32:14:f1:
06:54:27:ce:27:a3:ce:36:43:a0:6d:03:1f:76:d2:
85:d2:7a:fc:88:ee:ea:e6:f4:de:3c:9e:19:c4:d1:
db:b5:df:bd:18:60:5a:ab:a8:c3:1d:fc:0b:78:b6:
30:12:5b:f9:ce:6f:8e:58:c7:c1:f9:e2:d3:bc:b6:
75:4e:64:8b:e3:8e:61:f8:31:60:e9:ec:a5:cd:7e:
45:c0:7b:95:f0:20:47:53:fb:fe:6f:63:cc:69:d5:
34:89:b4:b3:7f:ec:91:eb:1d:51:73:40:4b:df:e2:
9d:c0:6a:ce:7f:50:12:b5:e2:0c:13:0f:13:26:0e:
bf:24:f9:d4:91:bc:98:14:01:90:24:a1:8f:56:e9:
fd:26:6c:5c:03:cd:8d:2a:3b:0a:1a:73:f3:ca:86:
61:22:2f:fc:d7:fb:62:e1:93:c5:64:d5:93:dd:49:
f5:af:a9:0e:05:cd:4a:c2:cd:25:5c:3c:37:05:d1:
75:c4:a1:74:c6:a8:16:e4:9a:36:08:7b:69:53:28:
7e:f2:5b:55:aa:45:13:90:ba:4d:9d:ec:5b:be:b5:
ac:1a:3b:ee:60:41:eb:f0:61:37:ec:17:be:e7:ce:
b7:7a:9d:f9:30:05:0d:78:ae:a5:34:fd:09:49:82:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:45:50:DF:CB:5F:71:E4:12:49:6F:24:E1:73:AC:B5:DC:4A:18:47
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:be:40:40:97:be:56:05:57:47:0e:06:60:25:a7:bc:78:52:
69:17:0e:68:66:fd:1a:41:4a:cb:a4:64:de:e6:b6:12:09:2d:
19:d1:f8:d8:b8:b4:b6:07:dd:8c:81:30:df:19:0f:0d:54:47:
d5:47:1b:16:51:e7:74:12:5e:d0:3b:ae:c0:78:35:08:d2:7a:
e4:0e:2a:3f:d1:a8:b2:e2:ca:a8:f1:06:57:1b:c1:9e:a7:12:
62:aa:de:cc:89:2e:3e:78:90:01:69:0d:15:71:48:92:dc:7f:
50:e3:16:94:51:c5:02:4c:d3:5d:f9:87:65:7b:bc:e5:5b:9b:
8d:86:85:63:7e:34:84:91:24:45:7d:fe:44:1e:74:59:8b:6b:
50:ad:c9:46:27:d6:81:c6:d2:3d:2f:f0:f4:87:6c:79:a9:97:
3e:93:80:5d:74:b8:6a:45:1a:57:4e:f4:58:6c:6e:de:c6:57:
06:f5:1b:3d:a7:2b:0c:ed:4e:f8:bf:68:87:a7:b3:c4:7f:68:
d1:80:9a:57:73:c9:43:48:61:aa:af:41:0b:2b:66:65:86:d1:
aa:18:e8:87:02:8f:a2:96:f4:a0:47:16:30:00:48:89:47:f1:
9c:7d:7d:86:72:f1:95:94:66:d2:1d:95:d7:ee:f7:d1:3b:27:
dd:4d:88:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:22:50 2026 by rpki-client