Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: iHTev/gzqSvC6SmsS7yc0+n4tw1jEYttA427ra3aTDI=
Subject key identifier: 9C:70:FA:35:FF:21:79:88:D4:43:7A:BC:DA:50:4B:AF:D5:40:61:D9
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 019D055356B977A372E59F243C4F048F98D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 0AB7
Signing time: Thu 19 Mar 2026 09:00:40 +0000
Manifest this update: Thu 19 Mar 2026 09:00:40 +0000
Manifest next update: Fri 20 Mar 2026 09:00:40 +0000
Files and hashes: 1: 0VMT834xpSH5P_uOhco5RR0cnoY.roa (hash: Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=)
2: 3QB4_WrWv1_f_4y7MeernB0lxRQ.roa (hash: zfF5AjAOtIAaIZLUIxCgwwAY3O+6F4xLShcmNVe/TXA=)
3: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: C4zFGM0hMQgH4t9Ku2kmGo9SqsftR4QD4V9LlXCRTDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:53:56:b9:77:a3:72:e5:9f:24:3c:4f:04:8f:98:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Mar 19 09:00:40 2026 GMT
Not After : Mar 20 09:00:40 2026 GMT
Subject: CN=9c70fa35ff217988d4437abcda504bafd54061d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:13:cd:28:59:f5:75:d6:96:fb:9e:28:47:
31:98:5b:89:7c:1b:0e:f1:c7:7b:ba:2a:72:27:f5:
02:aa:4d:eb:34:ee:95:d0:62:2d:0a:69:ba:b7:22:
c4:a6:15:b3:df:ff:2d:be:9a:17:9f:11:86:10:34:
77:45:a9:22:fc:81:f2:cc:25:1a:94:a7:d4:7a:40:
31:49:a2:37:8c:ad:bd:bc:0a:ed:3e:3d:e7:da:29:
73:d6:7f:26:92:e2:73:c5:0d:fc:70:c3:71:59:1a:
25:8e:8d:32:0f:31:c7:53:9f:c2:35:52:82:6f:83:
24:a7:e9:06:bc:c3:3e:08:0b:c2:24:97:ff:3d:d5:
c1:7e:cd:e3:57:86:2b:3a:63:2d:19:d2:80:c6:2d:
ba:01:fc:b1:1a:c7:52:fa:10:ca:56:c6:f8:a4:f8:
42:3b:e0:f7:d9:ed:71:2f:22:9a:98:57:09:05:30:
93:17:9d:c0:ba:92:3c:ee:2a:f4:eb:0a:97:0b:53:
ca:17:dd:fd:28:d0:b7:54:89:b7:f4:ee:c4:b2:58:
50:26:6f:40:50:3b:83:23:92:11:09:bc:70:22:e2:
6c:21:95:86:f5:c3:c9:20:53:de:f2:1f:ab:62:0b:
5b:c2:dd:0c:cd:08:6d:c7:f1:40:53:89:59:48:f4:
8e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:70:FA:35:FF:21:79:88:D4:43:7A:BC:DA:50:4B:AF:D5:40:61:D9
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2a:77:75:88:16:d3:88:f0:0f:0a:cd:07:08:97:6d:7c:56:
fc:23:c7:b7:32:2f:1d:9d:e0:38:65:0f:8c:b3:8d:1f:23:82:
dc:c7:af:c2:b4:3d:5c:fa:08:a7:95:d0:09:a7:35:50:38:cf:
63:08:8b:87:d3:7a:27:eb:06:2c:44:ff:fc:4a:7d:45:b0:b1:
3a:a8:a4:39:88:48:d1:ca:93:dd:a6:ee:03:83:e3:15:46:f0:
05:c3:eb:f4:56:d7:f6:11:6a:1d:69:8c:e3:45:01:ac:ff:7b:
eb:4d:59:2d:f1:00:3b:8a:e7:98:5a:e7:d2:6f:4a:d2:28:ab:
af:b4:e9:53:36:b0:8b:b5:24:0b:99:ed:ea:d2:e2:16:1c:a8:
fd:5d:3f:90:42:49:b7:af:7a:f6:3c:55:f5:53:4c:d1:9f:69:
ae:86:a1:1c:83:f3:60:a0:d1:20:07:04:ac:a8:fa:99:67:5a:
30:38:0c:2e:a1:f9:4e:bd:5f:48:63:a0:4f:4e:e1:96:a8:d1:
8a:e9:a2:d1:c2:18:0b:75:95:c6:42:28:e4:a7:24:35:83:31:
89:da:fa:69:86:08:f1:a6:a8:cd:f7:48:04:11:ee:7d:33:48:
d9:43:d4:c4:7f:19:61:27:c8:de:c5:f8:45:4c:4d:48:6b:01:
25:9e:a4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:01:25 2026 by rpki-client