Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: a+Tjx49D5wPS9zQxh6MOIRfRed7foujAavtOkEtvNvE=
Subject key identifier: E9:A8:BA:2A:95:90:0B:F4:45:CE:9F:72:35:A5:2A:52:AD:2D:C1:E8
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 01A16AC81ED9B79FF5590AEDFA3E7A7868A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 1ABC
Signing time: Fri 23 Oct 2026 22:01:02 +0000
Manifest this update: Fri 23 Oct 2026 22:01:02 +0000
Manifest next update: Sat 24 Oct 2026 22:01:02 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: OXnLKWM8cea4BFuVZaIrdrQiYkRS7ur/jVJ+xdSKyUM=)
2: 4nH4XfhimtA2VpYePD6iIqgS8jg.roa (hash: WzWjp5sYk3618sDtkEiRYCtG2GQQ5fgZA4Df9TxbCmE=)
3: Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa (hash: t8YcGZN/KfNS1zoLXEsPr4LvXKVj1kisjNpdPg7jWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:c8:1e:d9:b7:9f:f5:59:0a:ed:fa:3e:7a:78:68:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Oct 23 22:01:02 2026 GMT
Not After : Oct 24 22:01:02 2026 GMT
Subject: CN=e9a8ba2a95900bf445ce9f7235a52a52ad2dc1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:bb:f8:f7:dd:84:a2:76:bf:99:25:82:40:
27:9d:2f:cb:60:61:1a:45:25:a4:29:ce:11:1d:86:
fb:a4:fa:28:d4:25:6f:59:cc:18:4f:a9:2a:45:94:
7e:2d:03:06:ac:e5:df:c7:62:bb:0d:88:80:a5:b5:
fb:7d:4a:a8:1a:20:b9:ae:c9:59:a7:39:98:67:8f:
0c:58:65:ad:75:c9:98:18:b6:bc:3d:2b:d0:5b:10:
56:cf:ef:f6:79:99:47:6a:d0:9f:be:c6:f5:a7:03:
62:a8:78:ba:64:22:c4:5f:24:c4:75:14:fd:b2:a4:
57:41:65:46:81:e0:49:67:37:b9:a6:95:79:03:75:
3a:c0:12:4f:bb:c0:f4:e7:5d:fe:d3:b5:b9:fe:38:
a7:fc:0f:13:8d:75:3f:89:c9:08:5c:56:eb:8b:92:
cc:a3:bb:f3:90:32:17:15:0b:4c:5d:d5:16:d7:5b:
67:6b:a6:ea:de:0c:d4:af:37:55:87:bd:fb:67:ac:
56:62:b5:0e:b1:c3:84:b0:99:a8:f3:44:99:4f:60:
87:2f:e8:2b:34:00:49:21:66:ab:58:33:05:94:ce:
86:ee:20:27:f1:fa:9e:1e:e6:66:2c:75:76:29:be:
4c:48:17:1a:39:d4:ca:d5:e4:35:59:7c:dc:ec:73:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A8:BA:2A:95:90:0B:F4:45:CE:9F:72:35:A5:2A:52:AD:2D:C1:E8
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8d:16:89:f4:ce:4f:00:96:e8:2c:2d:b5:84:b1:59:bb:1f:
d6:27:b0:17:31:29:f3:b1:8b:16:81:40:2f:72:61:e2:44:98:
08:e7:d7:d6:80:2c:21:62:ff:e6:6a:d2:9c:85:ad:e6:8b:4f:
29:c5:0b:b5:2b:41:c8:3f:44:9a:8b:df:4e:80:b8:86:f1:bb:
e3:2e:02:a5:bd:1e:10:bc:d4:eb:6b:b0:87:b2:96:cc:ee:4c:
c9:1d:33:86:c3:fd:8e:5f:9f:aa:c7:a1:b9:37:9a:79:32:8d:
e9:d8:fe:14:0f:e0:db:3a:45:b9:8c:be:75:f3:6d:74:66:ae:
e9:9a:75:04:65:ca:a3:e8:17:5f:fa:9f:07:31:62:5f:3d:fe:
a8:70:db:83:21:90:8f:75:53:1e:5f:8c:b1:9b:b7:e2:fd:02:
2a:b2:43:96:2c:34:84:b2:2e:3c:ca:d2:4f:a8:af:5c:5e:be:
fb:92:ea:22:c1:4b:ad:f7:d3:29:1c:4d:b7:10:d9:3f:99:fc:
d2:20:e2:95:b0:f4:77:ff:d9:9e:e2:db:28:c2:78:3b:8d:f8:
94:74:1a:e8:d9:55:fb:dc:f1:11:83:2b:d4:8a:d1:a3:f7:00:
89:2f:0c:a3:3a:73:6c:38:85:f3:a5:57:2b:33:2d:ce:1b:ad:
30:75:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:12:16 2026 by rpki-client