Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier: mHbe2puvljEJS4RGYGdTZyfrhIirIUcp4uMuGasuCu0=
Subject key identifier: 12:AA:9F:5C:D5:B9:11:EF:8D:8E:94:EA:28:88:B4:69:0E:FC:77:0F
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 01A000CA53BE27B0DDCF47F7170F7306D4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 15:00:54 +0000
Manifest this update: Fri 14 Aug 2026 15:00:54 +0000
Manifest next update: Sat 15 Aug 2026 15:00:54 +0000
Files and hashes: 1: 0zAvG8q_rQz542VLQHfI3pwn2hU.roa (hash: EpeZpmHs3b50RgbC9T7I86EOA85BMvieUCH/Qo6Mt6U=)
2: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: zkDIxWVrcG18H5jLCeGH7fQ/pT59WuAnyaoMGLxezy0=)
3: gozTMRP9KybW0YQlfst5QWvJTAc.roa (hash: 1fB1QbWdo2Si+L9RD7xiEIKgMl1IQRY1BWEJBSr6TVA=)
4: nCAbVn_gsNs4x4asBKyazyvKXR0.roa (hash: Ir2ZDg7CX0Hx7nK6/8SSzS9hwNZYvwP7LhXhdGV2tlA=)
5: s5RTg8fa0nQHIcIumLzUhuAAt24.roa (hash: cqMD2IDYqFBpxsaJVxm5d2TxnTtqRKRBltHR4geFTsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:53:be:27:b0:dd:cf:47:f7:17:0f:73:06:d4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Aug 14 15:00:54 2026 GMT
Not After : Aug 15 15:00:54 2026 GMT
Subject: CN=12aa9f5cd5b911ef8d8e94ea2888b4690efc770f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:5b:d9:aa:c1:1e:6f:29:c3:a6:e7:63:a4:
1c:86:02:00:cb:a4:bd:d4:18:36:f8:cc:c2:38:03:
54:a8:ee:b1:d6:80:cf:96:72:a9:af:84:a3:23:36:
5e:03:c4:de:73:ed:6f:fc:2b:16:e0:5e:bd:30:bc:
ab:d0:cb:19:59:b3:50:c2:33:04:0c:9b:50:c9:c0:
e4:55:54:98:0e:69:46:5c:b2:21:41:81:2f:1d:eb:
69:48:62:87:f6:56:08:31:3f:23:0a:7c:c8:62:e8:
b0:45:f1:83:da:2a:cc:11:68:c3:15:8a:48:cd:36:
ae:5b:d1:c2:93:03:a9:0e:03:9e:60:7e:f9:3e:10:
49:72:ca:fe:6e:f6:07:be:f5:9b:7c:c1:db:dc:cf:
83:ce:0b:de:cd:c1:3b:5b:bc:0a:b1:a1:2b:01:a6:
1a:14:ef:3b:d2:9f:ab:0f:a3:f1:99:33:65:92:d7:
25:5d:c1:65:d3:ba:9e:e8:de:9e:17:01:58:aa:44:
15:8c:b4:1b:fd:51:75:2b:fd:e2:f8:59:69:ea:3a:
2d:44:df:7e:a0:ff:b2:c6:e8:d7:ab:ea:0b:e7:2b:
7b:4e:11:3c:25:8c:3d:e9:62:df:f7:cd:59:d0:f7:
3f:27:5f:e4:a2:13:81:9e:e6:c7:07:b8:5c:79:25:
ab:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AA:9F:5C:D5:B9:11:EF:8D:8E:94:EA:28:88:B4:69:0E:FC:77:0F
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ac:eb:c8:00:be:be:a0:60:5a:d8:0f:ba:83:58:8b:3c:22:
c7:28:c7:02:3a:84:86:80:41:4d:bb:c6:44:a1:72:78:ff:4f:
ce:5f:44:59:b6:29:8a:23:54:8b:c7:b6:49:f3:6c:ee:41:64:
11:85:12:ec:6c:09:05:99:11:0e:04:e0:1b:8a:76:3a:b1:a5:
c6:c2:97:46:24:c8:11:eb:48:75:29:ef:72:4a:a1:fc:98:7e:
75:7e:0a:3f:e8:9d:a1:b0:61:8e:3a:d8:8c:c3:f7:ec:a4:ee:
d1:5c:86:9e:9d:14:e8:7a:0c:22:da:d8:42:27:d0:d3:e0:de:
52:95:00:3e:dd:8a:76:b3:22:9c:e5:60:6a:f2:21:63:40:79:
42:56:96:4e:aa:27:dd:77:ce:7c:cd:d4:0a:f4:93:10:36:34:
03:44:1c:ad:80:89:bb:d7:f1:3d:80:bb:b8:28:e6:4f:84:7d:
3a:e5:ba:08:a6:7e:b7:c7:94:7d:17:93:80:e1:7a:50:d2:c7:
3c:23:41:12:c8:05:57:3b:80:14:ca:9b:6d:6c:c5:1b:9f:0a:
f7:9e:ae:ed:ec:f4:8e:de:71:44:7e:84:2e:fd:1e:ff:94:93:
62:a8:91:f8:0b:3d:77:d9:ad:19:d0:01:49:40:51:e3:71:44:
ef:6e:84:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:48 2026 by rpki-client