Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: tcOUBbFcUN6/16z/DY2ezHEDqMRGXf5oAE3if2FQfn0=
Subject key identifier: 35:95:F8:E8:BC:0E:05:A3:E7:DC:A8:4F:76:3F:80:B9:17:6C:3E:B7
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 019D26287BAD6C06F7E69218B1E95B5180E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 0AC8
Signing time: Wed 25 Mar 2026 18:01:20 +0000
Manifest this update: Wed 25 Mar 2026 18:01:20 +0000
Manifest next update: Thu 26 Mar 2026 18:01:20 +0000
Files and hashes: 1: 0VMT834xpSH5P_uOhco5RR0cnoY.roa (hash: Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=)
2: 3QB4_WrWv1_f_4y7MeernB0lxRQ.roa (hash: zfF5AjAOtIAaIZLUIxCgwwAY3O+6F4xLShcmNVe/TXA=)
3: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: yq4lGg1K5x9UTYbKLWz/IMKLxneT5nXDvHwG/ec/8ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:7b:ad:6c:06:f7:e6:92:18:b1:e9:5b:51:80:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Mar 25 18:01:20 2026 GMT
Not After : Mar 26 18:01:20 2026 GMT
Subject: CN=3595f8e8bc0e05a3e7dca84f763f80b9176c3eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:a9:b0:56:fa:e4:05:28:c1:75:64:dc:82:
9a:59:e6:d1:ba:fb:a1:83:f1:0b:15:80:6e:02:fe:
2b:79:f4:65:92:1b:b7:de:38:d6:c8:ea:34:7c:19:
31:8f:c3:c1:74:8f:64:3d:49:91:8a:e7:08:8d:15:
e4:62:80:f5:33:a5:39:56:3a:9d:2a:b6:e7:26:82:
51:23:a5:02:f6:78:13:51:f7:65:7e:cc:53:29:10:
08:34:b2:89:87:12:86:e0:e3:79:ee:e2:81:05:a3:
45:76:89:60:7b:b9:37:0f:87:ab:04:b5:e1:ac:21:
39:26:db:8e:5c:76:c4:ad:ce:e8:dd:e9:fc:47:29:
c1:cc:b7:c7:c6:a0:2a:d8:be:33:3e:6d:26:fb:d7:
b0:b7:d1:24:50:d3:6e:99:d5:07:6f:52:c4:ff:40:
02:b7:76:03:28:ca:f4:9b:45:b2:43:e3:45:01:39:
cc:30:9c:7a:c4:f9:d2:54:f1:40:c1:f6:a4:9b:ee:
cb:bf:29:67:08:09:d6:67:1e:b7:3c:5b:6f:10:68:
c1:ef:86:bf:6e:9b:ce:73:95:2b:da:dc:67:f8:c0:
ac:76:f1:b3:23:71:ac:bd:7f:25:8c:6c:cc:22:87:
d5:a7:9e:a5:59:c2:b9:11:6a:ab:a6:92:20:5c:22:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:95:F8:E8:BC:0E:05:A3:E7:DC:A8:4F:76:3F:80:B9:17:6C:3E:B7
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:36:44:e1:82:65:ef:0f:b9:29:76:6c:46:b6:61:7a:53:3c:
2b:ca:6c:69:b2:57:83:36:5a:3b:82:0f:1b:25:13:19:61:43:
e6:00:b8:20:ad:e4:7f:de:4e:ad:1d:30:66:f8:3a:44:b2:60:
a8:fc:e3:39:4f:5d:99:ca:54:0f:1e:fb:1b:61:88:da:af:1d:
75:89:5c:f3:e2:59:18:9c:26:a3:3a:1a:02:48:03:bf:3e:23:
c6:83:0c:59:3d:03:7e:2c:d3:ca:1c:22:2e:8b:e8:8f:10:7e:
4b:14:0d:05:df:c4:e2:86:45:e4:09:65:9a:e2:2a:93:ab:85:
eb:48:bf:03:f6:58:00:aa:02:0a:9a:0e:05:8d:a4:5d:f1:e8:
2f:13:b7:87:84:41:4f:b1:8e:c8:1a:54:d3:3a:ad:f1:6e:4b:
04:54:e1:bd:94:24:39:34:7b:30:1b:16:0b:fd:fe:ce:e9:c8:
15:ff:47:3d:cb:59:d3:b1:dd:09:67:e2:8b:13:46:0d:b9:8c:
4f:39:26:6e:11:3c:d6:12:5c:78:ca:6f:d7:38:54:be:19:50:
63:4c:61:ea:7b:3c:f1:dc:fa:cc:46:61:77:a3:78:ec:32:1b:
38:56:d6:6c:d0:bc:bb:f0:3f:c6:74:3f:45:d7:df:20:b5:3f:
ae:e6:cc:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKHutbAb35pIYselbUYDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMDEwOTM4ZDllZjcyMTU4ZmM5OGJkNDVkZTcxYjBiMWE5
ZmY3MjkwHhcNMjYwMzI1MTgwMTIwWhcNMjYwMzI2MTgwMTIwWjAzMTEwLwYDVQQD
EygzNTk1ZjhlOGJjMGUwNWEzZTdkY2E4NGY3NjNmODBiOTE3NmMzZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthmpsFb65AUowXVk3IKaWebRuvuh
g/ELFYBuAv4refRlkhu33jjWyOo0fBkxj8PBdI9kPUmRiucIjRXkYoD1M6U5Vjqd
KrbnJoJRI6UC9ngTUfdlfsxTKRAINLKJhxKG4ON57uKBBaNFdolge7k3D4erBLXh
rCE5JtuOXHbErc7o3en8RynBzLfHxqAq2L4zPm0m+9ewt9EkUNNumdUHb1LE/0AC
t3YDKMr0m0WyQ+NFATnMMJx6xPnSVPFAwfakm+7LvylnCAnWZx63PFtvEGjB74a/
bpvOc5Ur2txn+MCsdvGzI3GsvX8ljGzMIofVp56lWcK5EWqrppIgXCJ1YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWV+Oi8DgWj59yoT3Y/gLkXbD63MB8GA1UdIwQY
MBaAFN0BCTjZ73IVj8mL1F3nGwsan/cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYt
Y2VmZjU0NmM5MzNlLzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYtY2VmZjU0NmM5MzNl
LzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDZE4YJl
7w+5KXZsRrZhelM8K8psabJXgzZaO4IPGyUTGWFD5gC4IK3kf95OrR0wZvg6RLJg
qPzjOU9dmcpUDx77G2GI2q8ddYlc8+JZGJwmozoaAkgDvz4jxoMMWT0DfizTyhwi
LovojxB+SxQNBd/E4oZF5AllmuIqk6uF60i/A/ZYAKoCCpoOBY2kXfHoLxO3h4RB
T7GOyBpU0zqt8W5LBFThvZQkOTR7MBsWC/3+zunIFf9HPctZ07HdCWfiixNGDbmM
TzkmbhE81hJceMpv1zhUvhlQY0xh6ns88dz6zEZhd6N47DIbOFbWbNC8u/A/xnQ/
RdffILU/rubMOA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:31 2026 by rpki-client