Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: pmM2sRcuwTW91lFskZEMwncHeKovc4iwfeO+X+QsjHA=
Subject key identifier: 37:A5:3A:60:D7:11:E0:A3:F3:CD:54:CC:B6:29:CE:82:1C:BD:7E:3B
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 01A0CA7D9DDEB6C0C21BD62734FB317CEDF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 19:00:25 +0000
Manifest this update: Tue 22 Sep 2026 19:00:25 +0000
Manifest next update: Wed 23 Sep 2026 19:00:25 +0000
Files and hashes: 1: 0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa (hash: RzDAQWUlUC2j8WOaVbsFRmGBNqRpbLHgJHxSpxsXf7Q=)
2: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: 24wav6N1mYM1SFgGz9NMGSXCpStVP9OCV2naeX4Tsqs=)
3: lg-osn9EUdIDJV3HpKBV7GEVZBA.roa (hash: R0yIGLDbtgAEX53dIyQ8T0aPBUwbUP+tfVSTJU5okAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:9d:de:b6:c0:c2:1b:d6:27:34:fb:31:7c:ed:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Sep 22 19:00:25 2026 GMT
Not After : Sep 23 19:00:25 2026 GMT
Subject: CN=37a53a60d711e0a3f3cd54ccb629ce821cbd7e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d8:aa:fa:f4:70:e1:a5:8f:25:14:79:0b:8d:
36:09:db:6e:49:6e:f9:26:ef:0e:a4:40:fb:9d:17:
c6:4f:6c:cd:d9:ab:48:15:55:c7:8f:2f:6f:76:a6:
2e:b3:16:e1:cd:26:58:e2:ab:6f:34:9b:05:f3:40:
4f:aa:4f:74:e7:e1:e9:9a:d1:70:e9:d9:97:e3:8a:
dc:7e:06:80:e0:9e:13:c9:35:1b:c7:99:5e:09:cf:
c6:d3:bc:51:8d:a4:8c:6c:68:2b:24:02:19:4f:25:
b6:c3:9d:d2:15:76:a3:04:bb:8a:0c:c0:03:1a:d7:
da:a5:a6:98:b0:a6:0e:bd:46:a9:29:4e:c1:7a:48:
4e:40:7c:10:94:70:56:23:45:51:86:78:13:f0:a6:
2f:9a:66:e7:81:9d:5e:97:2e:de:93:a0:43:3f:30:
15:ae:b8:b4:3b:20:a1:7e:1c:e7:36:05:c9:4a:1a:
22:3d:7e:c6:95:6f:f6:17:3f:5e:32:86:d5:e5:2e:
be:eb:45:8e:7a:70:ae:ff:01:53:5a:94:ba:d3:1c:
1f:11:c4:fb:75:09:83:74:7f:93:0d:b8:d4:8b:ce:
b9:a6:07:57:da:e8:cc:62:e4:0f:c3:bf:19:c9:30:
57:75:cd:46:82:4e:c0:71:72:b6:4f:d1:88:21:5c:
b1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A5:3A:60:D7:11:E0:A3:F3:CD:54:CC:B6:29:CE:82:1C:BD:7E:3B
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b2:5a:77:16:d2:7a:55:62:9e:9e:1e:f3:19:ae:be:1d:85:
b3:1a:25:69:17:e4:3e:73:97:1a:54:59:01:1a:96:ee:5f:af:
2e:d4:a3:37:b3:a4:c5:91:cd:af:26:73:8e:f3:66:2b:96:e8:
ed:d8:1e:2f:80:72:a3:78:bb:a9:af:4d:c3:51:cd:93:ea:02:
f4:69:9a:48:0a:01:0e:f8:93:7b:eb:e5:c0:55:c7:41:de:64:
5a:c0:4b:ce:39:cd:3c:52:d3:df:ec:a6:5b:8e:fc:bd:d0:3f:
e8:a5:14:57:f5:16:87:a0:ed:13:b6:a3:28:f0:d0:8b:7a:e0:
30:c6:6f:1d:44:07:e0:0b:a4:1a:28:21:3b:d1:26:0f:41:46:
49:7a:2a:91:ba:be:7e:15:9e:b7:16:d5:6a:22:85:e9:d3:0a:
a1:85:70:fb:2b:1d:c2:3c:7d:fe:c6:e2:15:27:9f:3d:32:ea:
3c:d5:b5:17:2a:6a:7c:73:c1:e9:ad:67:ba:33:6a:96:c3:21:
a9:d5:ed:27:9e:a5:3c:70:49:33:d3:3d:b9:df:4e:f9:56:81:
98:6c:24:3d:67:b3:0a:cb:c2:77:8d:01:3a:98:d9:1a:38:44:
a5:1c:d8:98:de:e2:22:5c:b2:ec:42:63:45:40:45:d5:af:3c:
d8:e7:0e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:37:03 2026 by rpki-client