Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: /mPtwipODWhPm/zFM/gWPsVB8ZUbXaL4ht0j24SOzg0=
Subject key identifier: CF:27:62:86:75:0A:05:EB:6C:1C:C9:80:1D:24:47:34:7D:74:12:61
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 01A06DCC4B7BB2C5D70B734D348C0D8A8A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 1A39
Signing time: Fri 04 Sep 2026 19:01:40 +0000
Manifest this update: Fri 04 Sep 2026 19:01:40 +0000
Manifest next update: Sat 05 Sep 2026 19:01:40 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: rNgPp59PfMHp4CQcf+W5x7K7rKPAusPhGz+SGjiBJuk=)
2: 4nH4XfhimtA2VpYePD6iIqgS8jg.roa (hash: WzWjp5sYk3618sDtkEiRYCtG2GQQ5fgZA4Df9TxbCmE=)
3: Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa (hash: t8YcGZN/KfNS1zoLXEsPr4LvXKVj1kisjNpdPg7jWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cc:4b:7b:b2:c5:d7:0b:73:4d:34:8c:0d:8a:8a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Sep 4 19:01:40 2026 GMT
Not After : Sep 5 19:01:40 2026 GMT
Subject: CN=cf276286750a05eb6c1cc9801d2447347d741261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:20:af:ee:23:4d:55:7f:1d:cb:5b:52:0e:
f1:87:ba:f7:e6:72:57:3d:f1:b2:ae:ed:f0:38:c9:
ff:72:0b:c2:36:60:e0:37:32:e0:b7:e6:f6:f4:c2:
b6:e6:99:d6:0e:34:dc:1a:c3:86:6c:2c:56:0c:80:
0a:35:da:8f:0b:6a:42:69:7d:14:2e:50:f6:fa:fe:
2b:5e:c0:24:5f:17:69:55:f8:58:33:a3:48:ab:bb:
9c:87:58:7c:83:7d:d5:ae:e7:5d:2a:5f:a3:03:b3:
be:dc:2b:7f:4e:fc:63:7a:42:7d:3f:90:35:c0:0f:
05:77:b7:d9:e2:68:0f:42:de:de:bf:47:bc:a4:17:
51:79:4b:01:53:36:81:47:3e:db:46:df:61:ee:cf:
2e:af:f4:d4:13:e4:97:9a:5d:9c:45:94:34:b2:24:
4a:b8:bf:6a:dd:86:a0:35:43:4a:0b:23:cd:fe:97:
1e:c4:4b:3d:76:c5:b8:b3:bd:52:b6:a1:21:b9:34:
af:8c:1d:46:02:3e:0a:7c:65:f2:3a:4c:24:49:81:
c8:56:2c:72:3c:4a:fb:14:69:cf:df:c5:1b:96:a3:
0c:be:88:14:ae:09:e8:f8:34:49:fe:ec:c7:47:29:
41:a5:09:86:e5:2c:c7:80:42:0e:79:6e:5f:bb:4a:
36:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:27:62:86:75:0A:05:EB:6C:1C:C9:80:1D:24:47:34:7D:74:12:61
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:86:30:a4:36:fe:de:88:9b:f9:7f:d9:be:8e:d8:c2:f4:d9:
fc:38:a2:37:61:b0:20:4c:67:72:b2:67:40:42:64:ea:7d:e5:
a5:fb:c1:23:10:b1:d2:64:53:77:eb:1e:23:ed:3c:47:5f:1f:
1d:4b:ca:c7:0b:5e:54:25:b3:d9:2d:fb:5a:d4:2d:6a:f6:f8:
9a:c6:01:b1:93:8e:0d:9c:a5:e2:23:b5:bf:92:6e:55:41:8b:
77:ab:20:33:a2:5b:52:57:09:9c:f9:f7:4a:90:0d:6e:cd:5d:
a8:0d:b6:6e:75:a6:8a:63:5e:ac:be:3f:ca:71:85:a6:c0:3d:
a9:b9:55:3a:63:00:53:08:bc:e2:c0:89:41:67:42:c8:78:d9:
e9:b6:58:0e:4c:f3:01:d3:c3:2a:74:92:2d:17:7a:5c:0d:79:
ac:00:95:53:8b:06:29:d7:7b:87:ab:80:61:22:fe:11:56:8d:
e3:4f:67:58:c4:d7:15:6a:10:4a:32:77:6d:42:c6:66:57:35:
ca:b9:d1:13:01:ec:69:89:c6:cd:d9:20:a1:71:5f:12:df:72:
b8:0e:eb:24:54:25:e3:d8:cb:58:fc:da:f8:cb:a5:2a:39:fc:
33:7c:f4:7e:18:46:56:68:c2:f3:09:90:4c:51:79:f0:b7:5d:
36:e1:9a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:11:59 2026 by rpki-client