Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: qkbYq5ddPcUSykyaErQF0B3XlCR5Mdo2u5mdCm8Ac+I=
Subject key identifier: 70:D5:75:52:C9:B9:25:AA:49:0B:DF:1F:2D:65:4C:CD:4C:1D:86:85
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 01A0CA471163A3110576F81DCA6C46032B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 048D
Signing time: Tue 22 Sep 2026 18:00:50 +0000
Manifest this update: Tue 22 Sep 2026 18:00:50 +0000
Manifest next update: Wed 23 Sep 2026 18:00:50 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: hlV8TtnOvwqpLXcufjcn3wgSySrPoPYUn2Xg4qkky6M=)
2: UcfLZ7L91GVWjLGWEYmlJV2c10o.roa (hash: uVZ/PpG6ROCuILZTxmMA8qXeD47uyabcF2INsekoGNc=)
3: n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa (hash: 2wd1XBjZMp+nPiV7QP5P7/6ushDvOEw3Nbs3DojVSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:11:63:a3:11:05:76:f8:1d:ca:6c:46:03:2b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Sep 22 18:00:50 2026 GMT
Not After : Sep 23 18:00:50 2026 GMT
Subject: CN=70d57552c9b925aa490bdf1f2d654ccd4c1d8685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:24:79:45:51:2e:09:fd:3a:01:80:7c:73:
1d:07:ed:0b:e6:78:b4:fc:aa:0b:bf:07:fa:36:99:
f5:b4:a8:29:c2:69:bc:d4:13:e1:57:9e:73:3d:85:
d0:15:e7:d8:ae:6c:47:ac:b3:f7:e7:79:a5:57:64:
c7:36:a6:07:84:5e:a9:eb:6a:48:dc:47:1d:90:3f:
1a:28:77:d5:e4:a7:9c:63:ce:97:18:04:db:10:82:
fe:bf:a4:09:35:96:77:d8:d3:2b:82:f6:12:6b:26:
df:b2:83:d9:ca:09:e5:86:f8:89:88:ac:82:b1:23:
92:1e:cb:3c:a8:23:0f:2f:2a:e7:41:6a:e2:28:9b:
ca:1a:f6:10:5d:74:54:d9:a8:1d:e7:ec:59:de:f6:
5f:e5:8d:ab:e6:d9:d4:a8:03:82:e4:0d:b2:75:00:
0e:2b:c0:3d:73:3e:68:80:ca:0f:dd:26:52:0d:dc:
f6:2d:a2:5a:24:ea:a1:1d:ac:f5:c4:b4:d2:fe:48:
47:a9:ee:55:3f:ea:53:74:82:7a:b9:5a:dc:6e:84:
08:72:53:f4:cd:2a:f5:aa:c8:d4:9e:dc:6b:6f:03:
38:46:2a:90:04:f8:ae:56:ca:13:79:8a:30:a1:62:
7a:e4:ad:5d:51:5e:9b:1a:59:55:7c:1b:06:af:7b:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D5:75:52:C9:B9:25:AA:49:0B:DF:1F:2D:65:4C:CD:4C:1D:86:85
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cc:65:c8:20:f5:a0:80:87:f8:cc:4e:66:22:b0:61:df:fc:
5b:1c:19:f2:86:98:29:a2:b1:c2:cc:59:fa:0b:99:38:0c:41:
f5:74:b4:c2:08:9e:d1:79:9e:96:63:e7:65:27:1b:b7:da:84:
db:dc:01:2b:67:3e:b3:0f:9e:77:a5:27:21:67:33:25:63:3e:
f4:cb:62:57:7f:ce:21:5e:b0:2a:5c:49:a4:f9:57:81:3c:bc:
89:8a:6d:65:09:df:d3:84:3d:6f:da:ed:57:f3:c5:a7:07:0d:
18:10:e1:72:2b:a0:28:5d:03:f6:c3:f2:bc:db:40:7a:80:fd:
a1:03:9c:9a:e4:e3:cf:15:66:e1:0b:27:53:5a:83:ca:66:21:
5e:f9:0b:e5:ba:33:fc:c7:1c:e9:7f:0b:fe:10:e0:f0:7c:64:
62:a1:a6:3b:d6:1c:a7:28:37:1b:17:0d:75:05:0f:68:16:b4:
34:20:1b:aa:fe:5e:21:1b:f5:4d:f8:c4:51:96:79:a8:6a:b4:
c4:4d:df:f7:a6:e5:98:a6:8a:27:72:e6:e3:1c:fa:30:9c:96:
7e:52:be:97:75:d4:2e:1a:36:7d:8b:f7:10:43:19:ed:a4:7a:
4d:5a:37:f9:9a:ea:b1:cc:cc:19:e4:bc:71:04:a3:36:8f:eb:
a0:7a:2e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:15:32 2026 by rpki-client