Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier: LOjOPHwwjFHDFHR+k5JDhMtwEjKpM3+fAriq7krCDYE=
Subject key identifier: 9C:EF:DA:5F:90:22:D0:D9:4E:04:BE:47:F4:AC:C2:58:39:F7:2A:50
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial: 01A1231D0CFBB2927DB6E06ADDB39A67C79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number: 089B
Signing time: Sat 10 Oct 2026 00:01:08 +0000
Manifest this update: Sat 10 Oct 2026 00:01:08 +0000
Manifest next update: Sun 11 Oct 2026 00:01:08 +0000
Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: 7pZ9sZTkKHUnSxnLQ5W0zGvf0KAj0MgHG1FcT/p/BlI=)
2: WoN0CrYvueqPk1KqmXJffVK7ib4.roa (hash: 4FA6Dc/pCbAQFuPtL5vNxbuQK2/hlz7MGBa9RY6awaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1d:0c:fb:b2:92:7d:b6:e0:6a:dd:b3:9a:67:c7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Validity
Not Before: Oct 10 00:01:08 2026 GMT
Not After : Oct 11 00:01:08 2026 GMT
Subject: CN=9cefda5f9022d0d94e04be47f4acc25839f72a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8d:b5:0c:cd:01:a5:1d:fa:fd:5b:66:bd:7e:
60:3a:27:6f:77:a2:25:57:d6:89:45:7f:e1:90:bd:
e0:6f:b2:50:31:78:9d:f2:48:76:dd:27:92:80:5d:
ab:2d:b9:c1:b1:32:b8:f1:22:b7:66:e9:4f:6d:38:
a7:63:46:e5:1c:6b:3d:0d:8a:19:81:60:b7:cd:83:
b6:62:c5:21:74:08:b8:05:3c:59:0b:96:6f:56:0f:
88:c9:f5:70:37:ee:a1:34:cf:ea:5a:f5:70:8f:dc:
08:8d:3c:be:0a:db:b6:5e:7a:a2:d5:3e:57:d9:2f:
f8:1f:08:17:fb:e9:86:82:ef:ab:b3:c7:7a:e3:a4:
c6:de:f5:c2:d2:b5:83:ab:fa:69:a2:cd:4c:73:98:
7a:88:09:f9:df:be:1a:c9:96:b1:1a:a4:8a:ee:2b:
e3:e9:8d:e6:87:2d:af:81:2f:21:33:51:a5:6a:1d:
69:e0:f1:96:64:40:e3:6e:f2:30:99:3d:d8:b7:0a:
02:93:5a:12:de:ec:f9:dd:7d:4f:3d:ac:5b:8d:23:
31:4e:7a:63:99:15:ac:d8:56:20:78:d6:de:a8:db:
ab:53:93:32:ad:cf:3e:63:00:06:c9:e5:dd:23:df:
bd:9c:33:ea:a8:ce:72:52:aa:0d:61:87:1e:cf:4d:
41:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EF:DA:5F:90:22:D0:D9:4E:04:BE:47:F4:AC:C2:58:39:F7:2A:50
X509v3 Authority Key Identifier:
keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6d:0e:f4:3b:58:a9:e4:f5:1a:77:a2:62:a9:77:e3:3d:f2:
92:95:97:58:ba:dd:0a:f6:a5:cb:b8:5d:f5:e0:a0:fa:1f:45:
d3:8f:7d:ae:5f:3c:57:45:65:fe:c9:01:80:e6:36:cf:f5:b0:
9e:ab:ed:a2:c1:30:33:50:79:99:72:26:6b:24:63:80:a8:34:
2f:f4:98:3b:4f:6c:bb:e4:df:dc:29:8a:d4:fd:22:a5:f7:44:
82:21:77:91:85:5d:fb:1d:83:7e:90:4b:ba:35:f1:44:a4:10:
f8:4d:dc:8d:86:03:a4:af:33:77:77:a7:66:bb:9a:dd:50:a3:
cc:65:af:d9:46:fd:35:96:b2:eb:00:1e:4a:c2:d6:ff:13:bf:
3e:22:40:31:b2:d6:19:3d:17:8f:36:6a:21:9c:29:4e:15:a7:
08:06:5c:72:a2:7b:d0:6a:25:ce:36:d2:c5:21:7b:da:d6:53:
ac:b0:a4:9f:ee:48:ab:02:21:07:b1:5e:27:08:5b:ca:e4:5f:
d9:8f:2b:08:ff:d8:8f:55:34:37:ac:8c:0d:2b:b0:61:ca:2b:
52:16:5e:1f:65:81:99:22:bc:d6:d0:e9:e0:94:74:b3:1b:46:
8c:22:94:e8:8a:5d:47:8c:b1:79:15:fc:27:76:94:58:29:2f:
1f:84:bf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:07:54 2026 by rpki-client