Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier: yN7t2IuAwlqysftbVT24VB3M4GS6aURYpUrncJeTl+U=
Subject key identifier: 9B:91:76:44:4F:A1:BC:1F:41:E8:23:5F:65:1D:B7:2C:CC:32:D3:39
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial: 019D38D3CB49FC5E03748B6E8D0DDC303D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number: 0694
Signing time: Sun 29 Mar 2026 09:01:37 +0000
Manifest this update: Sun 29 Mar 2026 09:01:37 +0000
Manifest next update: Mon 30 Mar 2026 09:01:37 +0000
Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: BvJ5nmthg0ObmQFGY3LTdOJapBVe9HEQnpPeW9h3lr8=)
2: WoN0CrYvueqPk1KqmXJffVK7ib4.roa (hash: 4FA6Dc/pCbAQFuPtL5vNxbuQK2/hlz7MGBa9RY6awaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:cb:49:fc:5e:03:74:8b:6e:8d:0d:dc:30:3d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Validity
Not Before: Mar 29 09:01:37 2026 GMT
Not After : Mar 30 09:01:37 2026 GMT
Subject: CN=9b9176444fa1bc1f41e8235f651db72ccc32d339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:25:a7:0c:62:e1:7c:5e:b2:27:10:e4:a2:
9c:7e:b1:27:30:16:75:0c:e6:2a:6d:0f:b2:03:0f:
8f:de:1c:30:ed:dd:45:c4:41:b8:21:22:63:95:39:
c7:ec:2f:d1:1d:c3:63:36:cb:b2:25:8f:76:4a:e1:
24:f1:42:97:19:f5:d7:3a:69:a7:3c:2f:52:0d:e7:
b2:08:95:f0:0a:97:33:12:96:db:75:a6:47:18:1a:
b9:e3:85:5f:8d:85:39:0e:0c:23:b1:db:d9:1a:30:
f3:ff:07:17:cf:22:f2:1f:72:5d:1e:e2:93:49:b8:
07:9d:36:71:27:44:33:c9:42:36:82:cd:1e:28:7b:
22:f7:75:87:5c:56:66:51:b0:d6:9d:56:99:0c:6b:
56:45:76:e2:e2:7b:de:0e:b1:7a:87:b6:3a:11:68:
27:5a:82:20:a2:18:ad:a9:26:df:9a:26:16:c2:91:
e4:91:da:f7:9d:22:fc:04:08:45:38:2b:38:f0:9e:
38:c7:9a:72:7a:e1:64:7e:b2:5b:e9:20:c4:80:f2:
d8:75:e7:cb:54:c4:25:28:8f:21:01:0c:48:99:5e:
88:7b:1e:53:ba:4d:e8:e2:9f:16:a5:69:ad:7d:da:
32:bf:30:64:94:18:f1:c5:26:26:4a:cd:7f:e4:ce:
2b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:91:76:44:4F:A1:BC:1F:41:E8:23:5F:65:1D:B7:2C:CC:32:D3:39
X509v3 Authority Key Identifier:
keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cc:ce:9e:2e:56:b7:03:55:54:8e:93:05:8d:0c:0a:a3:77:
ca:33:25:3b:cb:62:79:4b:f2:a8:e7:96:e6:39:a2:3d:84:32:
5e:77:f7:db:6d:e1:97:07:b7:f4:0a:f4:19:36:e1:c9:fe:25:
23:6e:53:33:b3:b0:b5:3b:96:6d:31:dc:45:86:a0:37:2a:98:
5b:60:9a:a5:f0:00:e4:36:e8:2a:29:93:27:3b:a5:6a:8c:bc:
5f:6c:80:90:4b:d4:ec:88:8d:5b:2c:cf:a5:80:e7:a8:12:f2:
c4:41:1c:3b:d2:ab:74:d4:03:aa:e7:af:ec:4c:56:5a:c0:89:
36:92:50:ff:ef:81:46:d4:39:63:32:09:5d:37:5e:b3:cc:ee:
9e:78:7b:60:3b:e7:14:1d:0b:f7:70:93:a8:84:91:af:ad:00:
cf:c5:a1:76:c8:f1:c8:0b:1c:84:bf:63:20:43:99:41:c4:a9:
3b:89:16:43:5f:5e:82:c2:af:12:c2:3c:cb:af:ba:b7:3e:2c:
a6:6b:89:7a:d9:2a:65:c0:b3:22:bf:87:43:78:e1:22:cc:bc:
7e:7c:a7:ae:76:ef:52:cf:14:8f:63:c5:45:8c:51:df:f3:4e:
3b:7e:f7:43:9f:71:2a:a0:2a:af:e1:6d:23:47:c2:cb:59:93:
90:53:f1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:26 2026 by rpki-client