Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
File: 3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft (raw, json)
Hash identifier: cWAj1FSik8mSLzTZvajcUrF1ar+C9f1dLV4f14zZSSI=
Subject key identifier: 91:F2:80:D3:92:31:93:BB:2A:7F:05:B4:E8:D4:5F:29:4F:47:52:14
Authority key identifier: DC:C4:3A:47:09:76:F3:74:7F:68:2E:32:D2:7C:3E:CA:CE:E0:CC:59
Certificate issuer: /CN=dcc43a470976f3747f682e32d27c3ecacee0cc59
Certificate serial: 019F91DA859CCA575CEE46D84DA5CCF18AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
Manifest number: 0468
Signing time: Fri 24 Jul 2026 02:00:44 +0000
Manifest this update: Fri 24 Jul 2026 02:00:44 +0000
Manifest next update: Sat 25 Jul 2026 02:00:44 +0000
Files and hashes: 1: 2PRZ6lFW5Ytchf9MmZf7GwlA3vA.roa (hash: vawlKSVHyKRBL2/hA/FnCEfDpygXxAirjAN/iyp8egI=)
2: 3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl (hash: f8WXmaghYT8m9bgOemhXSWji9sg1PFFz2zc09vr3/hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:85:9c:ca:57:5c:ee:46:d8:4d:a5:cc:f1:8a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc43a470976f3747f682e32d27c3ecacee0cc59
Validity
Not Before: Jul 24 02:00:44 2026 GMT
Not After : Jul 25 02:00:44 2026 GMT
Subject: CN=91f280d3923193bb2a7f05b4e8d45f294f475214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:d2:8f:55:d4:d3:24:82:21:67:4d:0f:5f:
89:d0:e4:82:e9:29:fa:25:56:e1:2e:40:ca:09:f3:
66:86:f5:79:d9:43:61:45:4c:97:54:68:57:cb:20:
7e:67:78:12:e5:d0:cf:b5:f6:93:57:dd:d6:06:54:
be:d5:73:85:c5:f7:4c:9b:83:bc:db:2c:5a:95:92:
5b:78:19:4a:b6:22:2a:2e:e5:88:7c:d9:6b:e9:32:
28:cc:f3:1f:22:15:05:70:2e:d8:70:ca:f3:77:f8:
6d:2d:e7:9a:f8:22:f8:8f:7a:c6:cb:5b:7f:8e:da:
7d:4b:8e:a2:0d:df:df:fd:38:e4:eb:20:d1:ea:8c:
86:d8:ed:a0:72:e7:52:29:6b:80:71:c2:98:b2:7f:
7e:15:14:25:4e:13:f9:17:9e:92:22:f9:dd:fb:35:
49:41:c4:1f:76:91:52:f2:c5:06:b0:cc:dc:59:02:
fe:4e:06:46:2f:bf:5e:d1:17:a4:78:fc:34:44:63:
23:d4:96:c8:f1:6a:a2:6c:76:2e:c8:c0:35:4f:5f:
b4:a5:9b:f3:52:74:22:9d:4a:d2:79:0d:ce:0b:c2:
c9:84:a2:e1:03:6d:e5:ee:bc:8f:cb:93:45:14:28:
d8:39:78:dc:b7:62:27:03:a2:b3:06:e1:5e:32:85:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F2:80:D3:92:31:93:BB:2A:7F:05:B4:E8:D4:5F:29:4F:47:52:14
X509v3 Authority Key Identifier:
keyid:DC:C4:3A:47:09:76:F3:74:7F:68:2E:32:D2:7C:3E:CA:CE:E0:CC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ac:68:7c:c9:4e:89:82:3b:78:b6:db:65:27:87:96:d3:ed:
50:eb:c0:d7:18:b5:50:76:99:7f:0b:3d:a1:48:37:bd:91:50:
34:b1:58:fd:3a:f9:80:13:1b:d4:85:5c:60:8b:f1:ee:80:d5:
f2:bd:2c:55:68:e4:60:29:5d:06:ef:3f:87:41:11:bd:61:96:
46:e3:54:95:da:75:a3:50:1b:36:ba:fb:73:67:f5:f3:2a:21:
65:3d:3a:4e:f8:52:cd:ff:e4:9a:c4:4d:ee:e7:ff:9b:32:ca:
7f:63:1a:8a:f9:7d:d4:ab:a0:f1:9e:01:0c:6a:5a:8f:6d:0c:
f3:49:d7:c1:98:e7:c1:42:25:df:b9:8d:1c:92:cc:73:29:f9:
e0:a8:41:1a:4d:92:eb:a5:c8:e4:56:b9:80:a1:ff:4f:5c:02:
d0:60:f0:f8:78:da:04:6a:5c:82:43:c6:37:b4:87:e6:eb:93:
d5:6f:4b:23:44:d6:b7:cc:f2:13:8a:c3:fe:c2:40:4b:a5:eb:
e8:a8:16:be:9d:fd:ae:a5:31:67:9b:c2:b0:14:f4:b6:89:b3:
19:28:13:4d:d4:62:e9:65:54:2b:49:ba:55:2a:13:05:8f:22:
5b:d8:77:f1:99:66:fb:f1:2e:58:af:03:da:c8:2a:56:f7:37:
43:1d:5d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:27 2026 by rpki-client