Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
File: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft (raw, json)
Hash identifier: dfiyFVAOknTxsURV/cbwPLitpGvZpLPsLMSF8HD1bfY=
Subject key identifier: 6E:9D:E0:58:D5:CD:F9:F2:E4:4C:EB:6A:8B:AA:5C:FD:FF:20:43:0F
Authority key identifier: DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
Certificate issuer: /CN=dea85f21668a98d7e81a74183f0cce513086601b
Certificate serial: 01A0CEC8319E1BB175E9A1067168CDA315D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
Manifest number: 09FE
Signing time: Wed 23 Sep 2026 15:00:21 +0000
Manifest this update: Wed 23 Sep 2026 15:00:21 +0000
Manifest next update: Thu 24 Sep 2026 15:00:21 +0000
Files and hashes: 1: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl (hash: 3I3qkbpYGOkwdPCgEwYRJA56t77pYD2M6QcJzo3Wq90=)
2: hBUefaIMV4VxrEK-fm1hTMzaWD8.roa (hash: ULTyVqCoLmJTp6EzOZiZ2uvQqGHDruUXv80DgFEK1ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:31:9e:1b:b1:75:e9:a1:06:71:68:cd:a3:15:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea85f21668a98d7e81a74183f0cce513086601b
Validity
Not Before: Sep 23 15:00:21 2026 GMT
Not After : Sep 24 15:00:21 2026 GMT
Subject: CN=6e9de058d5cdf9f2e44ceb6a8baa5cfdff20430f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:c5:51:27:6c:13:80:08:7a:e3:18:bb:af:
bb:65:91:c0:32:06:98:da:8c:ce:39:5b:bf:8e:18:
33:d6:56:a6:c5:1e:a4:fe:8f:c5:ab:8a:f8:71:73:
68:9f:e3:07:78:10:97:39:48:ac:82:41:9b:02:fe:
fe:bd:b6:9f:3a:e1:c8:e2:75:9b:df:6c:fc:90:4f:
31:7d:f4:11:38:bb:4a:23:27:a2:47:0d:f0:ef:fc:
b5:07:eb:db:1d:9b:88:20:17:44:14:a8:da:91:b1:
8e:ec:62:db:dc:af:af:92:dd:c4:3d:97:a9:92:06:
a0:02:31:49:5d:cd:74:20:2e:10:82:1c:ab:27:bf:
ec:6e:f2:d1:ff:70:a8:9f:6e:54:16:97:ac:47:20:
da:43:82:aa:63:c5:ce:ee:ea:51:68:20:95:75:8a:
3e:bd:f4:59:0a:fa:5b:61:f3:f7:3f:9b:bb:c9:0b:
4c:08:c5:50:07:35:f8:f4:a8:01:23:20:32:d0:74:
c4:fe:2c:01:f4:fc:09:c7:dd:a0:66:71:b5:c0:6f:
e5:36:75:8d:f0:d9:72:4b:69:67:5c:8e:b2:25:7c:
6d:c8:e1:60:09:aa:5f:2c:9c:6a:e1:9b:37:fa:1c:
a9:2e:e9:da:c3:27:59:9f:63:72:19:d9:5d:6b:e5:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9D:E0:58:D5:CD:F9:F2:E4:4C:EB:6A:8B:AA:5C:FD:FF:20:43:0F
X509v3 Authority Key Identifier:
keyid:DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6e:5b:d1:0e:82:3c:c1:83:29:2e:ee:98:60:c5:6e:41:c1:
56:31:ab:3e:6e:70:3e:fc:e1:04:d4:d8:63:d3:99:a2:46:f5:
c9:3a:18:e4:10:4d:c2:24:3b:a4:e1:77:42:25:10:1d:77:02:
f6:6d:ae:45:64:3e:e0:63:02:be:e1:d5:ca:3e:ce:ae:ff:99:
4a:da:cf:87:4e:d2:e9:81:32:4a:58:3c:97:a6:ab:3d:71:28:
dc:c8:dd:31:c2:49:27:14:99:0b:62:2c:c6:60:d1:1b:b0:54:
64:8a:59:a4:72:8c:10:05:c5:a0:59:43:50:cd:3b:9d:28:f4:
28:07:4d:bb:5a:20:1d:1a:1e:12:3b:44:94:66:8e:78:d9:04:
3c:c8:fe:03:b1:c0:32:81:93:e0:ca:98:7f:58:0e:40:fe:3c:
29:f4:8f:8a:6d:79:3f:21:f4:de:8b:05:df:eb:fa:8e:72:4f:
ba:ea:11:04:74:fe:bb:2b:35:e3:9a:88:5f:19:b0:ab:10:8e:
ff:74:6c:3f:09:65:fb:cb:07:64:c7:8b:50:28:6d:75:21:a9:
ae:86:8d:54:0e:5e:9d:c1:60:8a:29:ab:12:e5:93:a8:a7:82:
54:7a:bd:4b:a0:4f:52:e5:b2:70:9b:1a:73:75:6a:61:20:9f:
96:40:aa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:35:40 2026 by rpki-client