Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: /G0Xgc/e3m/tNvqKG+N1Lqabu609tSWcQdifpCufVco=
Subject key identifier: 1C:9B:15:CE:E9:93:EA:A1:30:ED:BE:52:34:04:AC:12:D7:39:DD:0E
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 019D2BF349D34924FE17078F3A3F694C58FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 0ACB
Signing time: Thu 26 Mar 2026 21:00:57 +0000
Manifest this update: Thu 26 Mar 2026 21:00:57 +0000
Manifest next update: Fri 27 Mar 2026 21:00:57 +0000
Files and hashes: 1: 0VMT834xpSH5P_uOhco5RR0cnoY.roa (hash: Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=)
2: 3QB4_WrWv1_f_4y7MeernB0lxRQ.roa (hash: zfF5AjAOtIAaIZLUIxCgwwAY3O+6F4xLShcmNVe/TXA=)
3: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: 6NZCAr67eIr3ndHO5wGb6P5+caDOyzLg67zdCkgMurE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:49:d3:49:24:fe:17:07:8f:3a:3f:69:4c:58:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Mar 26 21:00:57 2026 GMT
Not After : Mar 27 21:00:57 2026 GMT
Subject: CN=1c9b15cee993eaa130edbe523404ac12d739dd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:66:00:ae:8d:d3:ad:a9:dd:3c:31:65:6c:
86:30:7d:1d:68:a3:cb:78:ee:83:ec:29:0a:12:40:
23:a1:91:c9:1a:f4:4d:05:c8:55:27:c2:4d:52:dc:
e6:aa:05:95:28:a6:08:a2:eb:11:02:b9:dc:2e:24:
ad:40:d8:5f:58:59:5b:f7:10:e8:f4:24:48:90:f8:
a2:b9:e0:c9:87:e0:d5:ff:92:bd:37:e0:7b:be:85:
f0:89:31:f2:49:b7:c8:67:f3:24:03:0c:68:f0:ae:
cb:a3:63:c6:93:fa:75:b0:52:28:f1:69:4e:1b:4c:
c7:55:c7:29:1f:49:63:55:86:85:21:18:93:7b:56:
ed:90:a5:e3:7c:57:51:0a:de:57:54:73:62:a4:eb:
ba:ae:ba:8b:d3:88:55:16:6f:d4:e1:ef:93:92:d3:
06:6f:f8:2b:0c:31:6d:5c:58:79:89:5d:57:d5:e6:
38:e1:5c:12:35:30:bf:ee:aa:5a:09:af:0e:e5:9e:
be:ce:50:18:91:4e:54:bb:43:c1:a3:fb:e0:e7:e1:
1c:1f:a2:07:87:6c:54:c9:f8:b5:3e:c7:25:c8:50:
e9:bc:a9:81:9c:e2:30:07:f5:2f:e0:e6:ca:57:f8:
2f:40:a7:40:d1:5c:09:8d:ce:03:28:ad:a7:60:91:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9B:15:CE:E9:93:EA:A1:30:ED:BE:52:34:04:AC:12:D7:39:DD:0E
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d3:e3:a4:83:62:f8:91:35:c5:b0:9b:b4:2b:ef:0c:96:2c:
d2:de:eb:0c:ec:1e:44:70:19:7c:d8:c9:41:a2:d7:e2:81:95:
54:50:62:b0:80:f3:a3:a6:e0:f5:2b:23:3f:87:c3:d4:ee:66:
52:e9:70:95:76:90:9e:ae:89:44:c1:c9:d3:b9:a1:64:6b:7f:
b2:40:21:85:ac:21:c7:79:bd:9e:11:f9:0a:8d:0c:17:d6:65:
1a:c7:a6:8b:7a:d4:da:1c:5c:24:07:0f:23:63:cf:ab:32:6d:
77:94:3d:a5:71:50:f2:42:69:dc:7a:d1:1e:23:e7:b5:a8:72:
9b:95:0b:64:2a:11:b5:79:83:4b:39:cb:ec:dc:c9:1b:04:e0:
3b:59:45:e5:18:cb:b3:19:ba:95:a1:61:cc:99:c3:94:dd:44:
cf:ef:a8:8a:38:b8:5e:d2:12:10:5c:a4:49:a2:59:a5:1a:59:
1a:04:2e:65:ae:8c:eb:ef:00:18:c8:25:df:fe:1b:5a:f7:bb:
c3:d6:39:f2:a8:08:4b:d8:71:e5:d4:1a:9f:66:37:97:13:41:
75:80:3e:53:d6:ba:67:9c:78:4a:9c:9a:7d:17:eb:46:58:27:
fb:97:d1:4d:dc:f1:cb:7b:ae:e0:d5:f4:72:b3:30:72:bd:91:
42:b6:8b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:32:04 2026 by rpki-client