Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: mZV/zFrCyHoqXweVOXPzkuNkAact79TA+6YfJXws2U0=
Subject key identifier: 17:67:48:98:F4:65:9A:D9:A8:B2:93:D2:7C:97:1E:D2:AC:A5:F8:96
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 01A0CEC84D3D7C6AF29FCE105753E0EC44A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 0CAD
Signing time: Wed 23 Sep 2026 15:00:28 +0000
Manifest this update: Wed 23 Sep 2026 15:00:28 +0000
Manifest next update: Thu 24 Sep 2026 15:00:28 +0000
Files and hashes: 1: 0VMT834xpSH5P_uOhco5RR0cnoY.roa (hash: Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=)
2: 3QB4_WrWv1_f_4y7MeernB0lxRQ.roa (hash: zfF5AjAOtIAaIZLUIxCgwwAY3O+6F4xLShcmNVe/TXA=)
3: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: XByMhZqywrXO9fnVsTQNHSZsavSguNEt8KYdOtHMwlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:4d:3d:7c:6a:f2:9f:ce:10:57:53:e0:ec:44:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Sep 23 15:00:28 2026 GMT
Not After : Sep 24 15:00:28 2026 GMT
Subject: CN=17674898f4659ad9a8b293d27c971ed2aca5f896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:82:18:5e:b3:d9:04:a2:30:67:f7:ca:18:
60:da:7c:bc:eb:13:ff:36:7c:f6:2e:80:52:27:f5:
d8:93:2d:95:7b:85:b4:d1:8a:49:6f:93:aa:13:c6:
b7:ed:b4:99:ea:d3:a2:c0:6f:ec:9d:62:eb:7c:39:
1b:86:96:65:4e:a4:8c:be:c7:93:f0:be:18:5d:15:
41:fe:db:69:7f:21:2d:59:2a:ad:42:bc:d0:62:4e:
2f:ac:6d:9a:2b:17:17:d3:d3:ce:ec:20:65:59:71:
07:6a:13:f6:0e:3f:d4:41:5d:c6:fc:b8:d4:fd:dc:
53:59:ca:cd:4a:6c:bd:50:9f:7b:68:1e:e1:45:70:
c6:8e:ab:d4:a6:f7:e8:2a:b4:d0:9c:e0:0f:ea:ec:
3d:fc:41:7f:61:31:13:3c:95:51:e8:7e:f4:e3:b6:
d9:10:0b:a5:6e:eb:1b:a4:af:4c:10:bf:15:9c:0a:
60:6b:5b:c7:84:95:f2:42:55:56:c8:ce:8e:17:c1:
ed:11:79:34:b0:44:0a:c7:e1:6a:78:12:40:f7:ad:
b3:a6:73:73:2a:02:6b:59:2d:27:e2:8c:53:3e:c6:
c9:18:f0:13:e3:42:c2:31:71:5a:bc:47:98:91:b0:
7f:2b:5b:41:a7:a4:d5:3b:e8:b1:df:6e:82:0a:89:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:67:48:98:F4:65:9A:D9:A8:B2:93:D2:7C:97:1E:D2:AC:A5:F8:96
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1e:2f:77:3f:7c:30:c4:a4:32:4a:58:f3:76:9d:aa:ae:d1:
b6:2d:e2:51:37:d7:e1:ea:f2:37:b8:91:38:df:20:bf:02:a5:
88:83:f2:17:26:93:c2:2c:b6:f9:76:55:2d:18:a2:4c:6a:f4:
b8:84:31:01:8a:7b:4d:c4:10:35:fe:ec:9d:cd:31:c1:d5:e9:
e9:5b:f9:5a:47:0c:40:63:eb:ae:9b:9b:18:c6:23:95:f7:df:
09:3a:38:73:03:54:2f:a9:43:b1:40:20:89:d0:0e:ac:23:53:
87:6d:28:22:ac:18:ae:b5:3b:03:4a:22:f6:a1:a1:66:4c:19:
3c:56:65:ff:c5:df:dc:45:49:90:f0:a6:80:ec:58:d3:3d:d0:
83:35:88:55:08:d7:ef:41:62:76:41:7a:a6:57:9a:37:61:6d:
0b:8b:39:0a:8b:79:71:ac:77:f4:aa:fa:9f:ce:10:50:f2:ee:
5d:06:4a:96:ef:b6:c3:a6:b8:67:7e:e4:8f:2c:cf:65:10:f5:
b5:b6:ba:98:b4:06:09:25:0a:47:cc:69:84:68:81:28:76:7e:
53:58:a8:0a:df:78:6f:6c:13:40:db:26:8e:52:18:7b:9f:3b:
b4:2d:a4:8a:00:e2:2a:5b:78:60:2d:d2:8d:58:37:ad:b0:12:
e7:62:16:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyE09fGryn84QV1Pg7ESjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMDEwOTM4ZDllZjcyMTU4ZmM5OGJkNDVkZTcxYjBiMWE5
ZmY3MjkwHhcNMjYwOTIzMTUwMDI4WhcNMjYwOTI0MTUwMDI4WjAzMTEwLwYDVQQD
EygxNzY3NDg5OGY0NjU5YWQ5YThiMjkzZDI3Yzk3MWVkMmFjYTVmODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL6CGF6z2QSiMGf3yhhg2ny86xP/
Nnz2LoBSJ/XYky2Ve4W00YpJb5OqE8a37bSZ6tOiwG/snWLrfDkbhpZlTqSMvseT
8L4YXRVB/ttpfyEtWSqtQrzQYk4vrG2aKxcX09PO7CBlWXEHahP2Dj/UQV3G/LjU
/dxTWcrNSmy9UJ97aB7hRXDGjqvUpvfoKrTQnOAP6uw9/EF/YTETPJVR6H7047bZ
EAulbusbpK9MEL8VnApga1vHhJXyQlVWyM6OF8HtEXk0sEQKx+FqeBJA962zpnNz
KgJrWS0n4oxTPsbJGPAT40LCMXFavEeYkbB/K1tBp6TVO+ix326CColidwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdnSJj0ZZrZqLKT0nyXHtKspfiWMB8GA1UdIwQY
MBaAFN0BCTjZ73IVj8mL1F3nGwsan/cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYt
Y2VmZjU0NmM5MzNlLzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYtY2VmZjU0NmM5MzNl
LzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgh4vdz98
MMSkMkpY83adqq7Rti3iUTfX4eryN7iRON8gvwKliIPyFyaTwiy2+XZVLRiiTGr0
uIQxAYp7TcQQNf7snc0xwdXp6Vv5WkcMQGPrrpubGMYjlfffCTo4cwNUL6lDsUAg
idAOrCNTh20oIqwYrrU7A0oi9qGhZkwZPFZl/8Xf3EVJkPCmgOxY0z3QgzWIVQjX
70FidkF6pleaN2FtC4s5Cot5cax39Kr6n84QUPLuXQZKlu+2w6a4Z37kjyzPZRD1
tba6mLQGCSUKR8xphGiBKHZ+U1ioCt94b2wTQNsmjlIYe587tC2kigDiKlt4YC3S
jVg3rbAS52IW6Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:30:19 2026 by rpki-client