Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: Bz/OXl8USUtcLZnJOCVhxcBi8tovA7wUPoZtNHCuVIM=
Subject key identifier: 05:47:E6:6E:E7:B3:06:89:74:0C:6C:EE:34:24:6B:13:AF:E5:8F:7C
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 01A0D048D5F92919AB86B7C652A8FF2F868F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 22:00:29 +0000
Manifest this update: Wed 23 Sep 2026 22:00:29 +0000
Manifest next update: Thu 24 Sep 2026 22:00:29 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: dRXY/kZANiSQ7BDyl4nBGAWqjjxL40sGmTIHrmNjXdk=)
2: 4nH4XfhimtA2VpYePD6iIqgS8jg.roa (hash: WzWjp5sYk3618sDtkEiRYCtG2GQQ5fgZA4Df9TxbCmE=)
3: Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa (hash: t8YcGZN/KfNS1zoLXEsPr4LvXKVj1kisjNpdPg7jWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:d5:f9:29:19:ab:86:b7:c6:52:a8:ff:2f:86:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Sep 23 22:00:29 2026 GMT
Not After : Sep 24 22:00:29 2026 GMT
Subject: CN=0547e66ee7b30689740c6cee34246b13afe58f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:26:f2:4c:d2:4b:bc:2b:99:c5:e3:26:27:38:
af:0e:1e:e9:7c:96:5a:22:72:33:7f:18:3b:b5:e1:
15:b3:1f:5d:18:33:b3:0f:3f:07:f1:e4:7c:34:22:
77:e8:fc:03:c0:3f:3f:97:b7:50:90:c4:63:1d:4f:
40:86:b4:31:82:cd:56:52:f7:85:82:5e:b6:f2:35:
a3:5e:aa:8d:3c:6f:80:81:ba:79:f2:15:15:85:86:
2e:fd:ee:cc:71:58:bc:42:46:b3:ed:b1:e8:27:27:
a0:f9:34:5e:48:64:d2:ff:7b:26:85:c4:55:1e:69:
72:a3:0e:0f:2c:6e:a4:ed:cf:4d:d2:24:3c:59:5c:
52:cd:a5:38:e7:b1:c4:ff:9c:af:0f:8f:b3:9b:48:
1a:9c:bb:5b:4a:4a:d8:37:54:d2:b0:9f:b1:64:f8:
3b:f6:86:7f:dd:2d:65:10:08:ce:0c:7a:4a:1d:b9:
76:14:52:d1:67:11:c9:ef:e7:cd:4e:77:aa:ea:0b:
ea:4b:60:e2:0e:a8:70:90:5b:6f:9c:6a:d3:2a:55:
d0:cc:ac:96:99:5a:0d:7f:6a:f1:18:eb:50:2f:69:
4b:de:3f:f0:e2:78:ab:4d:7a:48:d6:52:1b:96:ea:
71:d8:23:43:0b:28:c0:9d:84:61:50:4a:32:86:5f:
80:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:47:E6:6E:E7:B3:06:89:74:0C:6C:EE:34:24:6B:13:AF:E5:8F:7C
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:11:fa:dc:bb:d7:6d:45:f5:cb:f9:af:da:75:46:21:69:ec:
02:70:9b:91:6b:37:e4:45:f1:33:eb:9e:9e:1c:52:72:16:9f:
69:10:fc:01:19:f4:85:50:08:87:ef:b8:ce:ae:8f:fd:95:21:
49:fb:e3:57:59:37:44:8c:b1:65:7f:2c:c9:62:af:f9:cb:b2:
bd:1e:83:66:e3:51:2e:04:3c:ab:97:9e:97:da:47:50:e7:32:
7a:aa:a2:e3:24:f0:5b:29:8c:71:b0:70:5c:38:e1:16:de:cf:
d4:70:d1:57:c4:e5:fc:88:2b:22:4d:05:c6:25:f1:4d:6f:a0:
d7:82:5a:fd:dc:b0:7a:9b:4b:4c:83:48:ff:91:d3:ec:68:c9:
44:7e:81:40:fd:4f:6f:9d:39:9c:02:cc:9f:2a:70:25:51:70:
75:64:ed:fc:70:97:e6:be:62:49:22:20:fe:eb:e1:b8:c2:d9:
27:6b:1e:57:8c:85:ce:5c:3d:92:be:84:19:51:bb:3d:85:5b:
19:fe:4e:02:09:5f:a9:36:9d:08:18:84:ef:fd:f6:10:98:02:
51:ea:90:9e:44:e8:0f:15:a6:c8:88:c6:27:81:5a:18:03:07:
e8:83:16:ea:2e:5b:cf:ee:b2:b8:f2:51:94:fa:1d:d9:12:6c:
f1:eb:3e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:33:54 2026 by rpki-client