Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: 3+CF13ey4PSU2ucGqrJEM0rhKjd0wkdQeXTEgl/pgAU=
Subject key identifier: 58:34:0C:41:53:5C:ED:F7:85:F1:E5:2C:DB:76:D5:3F:6C:11:EF:15
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 01A13ECB74FB01C3DBAA3CEFEA324B478503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 087E
Signing time: Thu 15 Oct 2026 09:01:23 +0000
Manifest this update: Thu 15 Oct 2026 09:01:23 +0000
Manifest next update: Fri 16 Oct 2026 09:01:23 +0000
Files and hashes: 1: 2JL6QkmCoFqlhxQJNmWn1mF_TU4.roa (hash: QqXkH/YgS0MOCatOfHharCIV2omJWZGXYUHGmZTmvS0=)
2: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: qim9e1X/gBrj0hVSsOU7gAUXmkLrc4KwbzLQj/ffal0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:74:fb:01:c3:db:aa:3c:ef:ea:32:4b:47:85:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Oct 15 09:01:23 2026 GMT
Not After : Oct 16 09:01:23 2026 GMT
Subject: CN=58340c41535cedf785f1e52cdb76d53f6c11ef15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:cf:ff:c9:cc:a2:cd:fb:c0:45:8e:d6:37:
2e:f8:d0:21:d8:e3:7a:6b:4a:ab:1a:59:e4:b3:a1:
a3:dd:14:83:54:b8:0e:49:1d:e9:93:1b:94:f0:8b:
f0:d3:ee:bf:ea:b2:9c:29:07:df:df:8d:13:28:4a:
b6:2f:ed:cc:83:18:4e:42:62:ac:24:2e:03:53:c7:
61:17:4c:6b:3f:d2:5b:89:38:2d:0b:f1:c8:1d:b9:
15:8e:e5:01:d2:da:b0:0f:08:a2:29:cd:c6:2c:c6:
28:41:bb:ce:75:03:63:3a:b7:57:7e:44:5e:9f:3e:
48:68:ee:58:7a:5a:b5:23:41:5a:c0:11:37:b7:4a:
83:57:92:43:ef:e8:86:fd:8c:b5:3c:fe:f3:8d:50:
78:97:90:37:09:6a:f4:60:11:7a:61:15:bd:ab:2b:
f7:e5:13:d4:b8:fc:b3:35:d7:2b:14:a8:36:17:9f:
ce:ff:64:08:b1:43:eb:8d:00:3f:b9:78:f0:2a:bc:
fb:01:ba:32:7c:2e:4f:03:51:5a:ac:77:b3:1c:21:
af:64:9e:bd:54:23:73:6b:29:7e:45:3f:d1:c0:f5:
aa:3a:1a:59:54:dc:7a:64:5c:ca:01:6e:4e:98:2c:
5a:c2:0f:0d:90:6a:ff:21:69:35:4d:6e:34:38:82:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:34:0C:41:53:5C:ED:F7:85:F1:E5:2C:DB:76:D5:3F:6C:11:EF:15
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ee:ea:22:20:9a:df:5f:9d:66:6f:34:30:b2:7d:f7:46:c6:
bd:27:2f:5b:56:b0:d3:74:b3:ff:38:bd:d0:ea:e6:4c:e6:ac:
f7:dd:8b:d7:06:f0:d4:0d:06:a7:58:94:09:28:a9:da:29:52:
c5:ff:b9:a8:62:70:b6:cb:e4:29:7e:02:40:8a:92:b9:4c:a3:
ef:3a:c0:59:b9:20:fb:ff:26:4c:bd:27:86:8c:b6:45:26:73:
18:a1:63:f1:3c:a3:9c:97:f9:0a:5e:8c:62:3e:3a:c3:b4:1a:
9c:19:38:f2:fc:4e:f8:ef:e3:84:92:dd:7b:83:df:33:a6:ce:
48:21:35:94:d0:c2:04:7b:7d:5f:27:fa:e8:36:37:22:72:35:
06:0d:61:e7:ab:3a:16:e3:c9:bc:60:f8:d6:d5:ac:23:22:84:
82:b6:23:ad:af:ac:65:0e:fc:14:7d:d0:95:49:a1:30:04:13:
e2:1c:da:8f:7a:61:93:b4:88:53:f9:6a:23:4e:78:e8:8f:41:
31:e1:91:c1:d3:25:5d:61:1a:a6:d2:e7:43:52:f5:1a:83:af:
9f:ad:b0:16:b4:2a:cd:76:da:61:4b:2f:50:7e:d1:19:dd:b0:
e5:f6:ac:20:3d:29:24:1f:ae:2b:83:a2:51:e7:f3:ad:b6:f5:
6a:d3:56:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:23:51 2026 by rpki-client