Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
File: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft (raw, json)
Hash identifier: ZEx1OoTlHQ46EMLNLs45/4bbzUf0HVNvDsbjmaY/T/I=
Subject key identifier: 92:AB:BF:45:AC:14:5A:1F:30:62:DB:6B:A4:A4:16:A5:BF:E5:6A:9E
Authority key identifier: DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
Certificate issuer: /CN=dea85f21668a98d7e81a74183f0cce513086601b
Certificate serial: 019E1D599ECF301BF1494F218AEEF2AD73A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
Manifest number: 0899
Signing time: Tue 12 May 2026 18:01:12 +0000
Manifest this update: Tue 12 May 2026 18:01:12 +0000
Manifest next update: Wed 13 May 2026 18:01:12 +0000
Files and hashes: 1: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl (hash: nIKc+ldfwkB/K8yYA5+Hymuu9Rw4NHntQ8CCILys3u8=)
2: hBUefaIMV4VxrEK-fm1hTMzaWD8.roa (hash: ULTyVqCoLmJTp6EzOZiZ2uvQqGHDruUXv80DgFEK1ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:9e:cf:30:1b:f1:49:4f:21:8a:ee:f2:ad:73:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea85f21668a98d7e81a74183f0cce513086601b
Validity
Not Before: May 12 18:01:12 2026 GMT
Not After : May 13 18:01:12 2026 GMT
Subject: CN=92abbf45ac145a1f3062db6ba4a416a5bfe56a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:77:ef:4f:cf:eb:a0:c8:ed:2f:3a:8f:68:
80:7c:04:97:c3:a5:61:ac:f9:fb:84:4c:0e:c6:e3:
ee:11:61:91:aa:5c:33:c7:d7:27:4a:07:17:06:3b:
85:ba:6e:07:24:b3:a6:3a:35:3b:fe:98:d4:94:a0:
96:cd:96:a1:21:d0:1b:7f:df:a6:6e:4c:a6:8c:40:
c1:ad:72:77:4b:3d:06:c2:e8:43:0a:7a:eb:3b:90:
31:41:8a:fa:7d:8b:b8:85:f4:1d:89:40:ac:9d:f8:
f8:31:5c:7f:bd:74:0b:32:05:85:58:ac:71:2c:2c:
04:f5:65:ad:d1:52:2d:7d:52:4d:4d:76:8f:02:d0:
59:9b:e1:b7:fd:3d:6b:02:7a:a2:0c:08:a9:62:8e:
0e:dc:3d:d7:a3:8b:d8:50:33:fb:d0:85:9e:db:74:
63:41:47:da:b2:4b:dc:eb:08:99:f0:b3:53:d0:f9:
9b:e6:b5:11:88:99:05:da:8a:66:c1:60:ce:fd:1f:
fd:e0:7e:db:ae:a9:2a:6d:e4:95:b1:04:3c:24:ca:
7e:6c:ce:f2:b5:b0:b9:fc:ce:36:a3:27:23:bb:6a:
9f:07:99:8e:01:91:06:a5:df:9f:81:18:f9:b7:09:
79:c2:9e:5e:02:74:89:28:9b:72:d3:cc:8d:0c:73:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AB:BF:45:AC:14:5A:1F:30:62:DB:6B:A4:A4:16:A5:BF:E5:6A:9E
X509v3 Authority Key Identifier:
keyid:DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d7:e3:79:ac:af:e9:e7:ad:4d:62:68:6f:e8:e3:ec:13:82:
d7:40:03:03:0b:57:dc:38:6b:f4:fb:75:85:c9:64:e5:b8:23:
90:c9:4b:00:db:bd:de:0c:40:f1:8c:24:c4:92:51:01:1c:d1:
b7:a4:27:fd:90:f5:51:37:5f:92:ba:25:35:2d:d9:d2:99:ad:
73:79:97:b1:e3:a4:49:c8:b5:bb:99:24:1c:2b:81:00:8f:37:
49:9b:be:9f:a1:bb:33:fd:d9:5e:84:8d:19:a0:1f:e5:3a:a5:
3c:c4:a0:db:8c:54:22:8f:07:25:e3:3b:a5:fd:55:e9:f8:31:
ed:88:7a:d3:74:d4:b6:f6:e1:37:11:93:e9:a4:01:9e:77:9f:
6b:31:02:6b:bc:c6:df:be:03:a3:32:84:4e:28:b0:e7:78:c2:
e6:af:f8:c3:06:54:78:1c:83:f4:2a:23:95:85:e5:3a:3e:38:
57:07:93:4c:6f:4c:6c:b7:a6:fc:e8:6f:04:7d:89:8e:85:ef:
fc:b0:3c:13:1e:15:35:ed:71:a6:c6:44:3a:48:23:69:06:15:
f4:8a:b3:e0:de:eb:40:d2:1d:5e:72:c6:13:ea:19:17:67:31:
5a:d6:c3:fc:34:de:69:31:15:a0:97:d8:c8:7f:a1:9c:61:bf:
17:8f:8b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:32:46 2026 by rpki-client