Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/3kQm9Aw8glD2z8QeHuCfTxHwmmU.mft
File: 3kQm9Aw8glD2z8QeHuCfTxHwmmU.mft (raw, json)
Hash identifier: +4Cx7CmPEj2/W1uoaQo9wUGItSVg0e+ZYuA8IV/jBew=
Subject key identifier: 68:F7:A5:06:F9:C8:89:A0:7C:CB:1F:FC:2A:BC:1F:04:2D:27:D7:30
Authority key identifier: DE:44:26:F4:0C:3C:82:50:F6:CF:C4:1E:1E:E0:9F:4F:11:F0:9A:65
Certificate issuer: /CN=de4426f40c3c8250f6cfc41e1ee09f4f11f09a65
Certificate serial: 01A0CE2459F0469AE8FE40ECDCA79E28DFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kQm9Aw8glD2z8QeHuCfTxHwmmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/3kQm9Aw8glD2z8QeHuCfTxHwmmU.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:01:23 +0000
Manifest this update: Wed 23 Sep 2026 12:01:23 +0000
Manifest next update: Thu 24 Sep 2026 12:01:23 +0000
Files and hashes: 1: 2xBsiBaML_prQgrfILUaFOXDCC8.roa (hash: mcBwRAYJwP60OWfO2Vpf/nJ1l9kJ5Z50goum/596W9s=)
2: 3kQm9Aw8glD2z8QeHuCfTxHwmmU.crl (hash: ZEZZFVUvfFzjGrP3sGqD9IFN1lsNKdPxHer5TC/1ydY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/3kQm9Aw8glD2z8QeHuCfTxHwmmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/3kQm9Aw8glD2z8QeHuCfTxHwmmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kQm9Aw8glD2z8QeHuCfTxHwmmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:59:f0:46:9a:e8:fe:40:ec:dc:a7:9e:28:df:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4426f40c3c8250f6cfc41e1ee09f4f11f09a65
Validity
Not Before: Sep 23 12:01:23 2026 GMT
Not After : Sep 24 12:01:23 2026 GMT
Subject: CN=68f7a506f9c889a07ccb1ffc2abc1f042d27d730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0e:4c:e9:83:91:f7:e1:18:c1:e5:44:f7:de:
d7:a5:1b:99:5c:ee:fe:99:8b:e1:14:61:08:5c:8b:
0e:14:86:87:19:e6:1e:6a:80:13:31:73:8c:92:6c:
67:37:b7:42:62:23:20:07:56:cb:cd:d2:90:f6:48:
44:be:02:2a:2b:92:88:82:91:e4:51:67:76:8a:11:
33:f6:20:22:20:d9:27:17:8f:e3:82:a2:85:c9:59:
a3:99:28:fa:b6:bd:c1:75:83:ed:22:7c:4a:49:4b:
cb:be:8c:21:9b:1c:ae:1c:b6:eb:53:80:55:0f:bb:
8a:0b:cc:37:9f:05:4d:d0:97:5c:d7:46:1b:29:33:
2d:e3:19:e3:5a:f9:49:1e:83:8d:d6:3d:4b:ed:20:
f7:a8:63:a5:f2:68:b6:d6:df:de:d7:9f:93:7c:f9:
b9:85:83:c2:05:4a:d1:4f:ff:fd:6a:eb:0f:b9:0c:
7f:8c:92:04:d2:9c:6d:1b:7f:de:8f:eb:2c:06:ec:
c8:d0:b1:cc:9f:fe:b2:3a:ff:81:3c:5b:56:d3:c2:
97:7c:1e:e7:12:07:e1:32:60:55:ad:92:0f:f8:eb:
33:5e:5c:e3:a5:f3:c7:a9:bf:86:2d:e0:29:16:3c:
88:8f:a2:e8:0d:73:fa:d7:f5:31:95:16:33:c1:4c:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F7:A5:06:F9:C8:89:A0:7C:CB:1F:FC:2A:BC:1F:04:2D:27:D7:30
X509v3 Authority Key Identifier:
keyid:DE:44:26:F4:0C:3C:82:50:F6:CF:C4:1E:1E:E0:9F:4F:11:F0:9A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kQm9Aw8glD2z8QeHuCfTxHwmmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/3kQm9Aw8glD2z8QeHuCfTxHwmmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/3kQm9Aw8glD2z8QeHuCfTxHwmmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:04:0d:6b:e7:63:3c:d3:d4:32:c5:f1:84:5c:c3:de:20:a0:
09:be:a5:16:ec:e9:66:cc:56:ad:bc:1a:96:55:7f:65:9f:ce:
5b:74:c8:01:b4:07:e3:6f:14:2e:1e:04:94:f2:1d:5a:11:13:
16:b9:62:3b:6c:da:13:2e:a3:66:a7:d7:e5:00:1d:84:ad:9d:
e1:2e:50:a1:4f:af:2e:fd:77:7d:e4:d2:71:88:59:d5:3f:c6:
2c:2c:bc:c0:1f:1b:c5:8b:f1:a8:69:e1:7d:fe:f2:31:4c:f9:
3a:0c:08:c2:45:9d:38:39:76:66:c0:53:67:fb:6f:15:b4:09:
3d:6f:66:17:ea:c7:56:9f:70:54:e1:9a:29:0c:18:fd:c2:ac:
49:af:75:aa:cc:e1:04:a2:43:bf:12:c5:29:4b:73:f6:50:2b:
0d:ec:7e:db:e3:b0:48:a9:af:f8:a2:04:72:33:13:31:64:86:
93:46:ea:a1:22:7a:d5:9e:4c:23:ea:34:cc:22:7f:6a:0a:f0:
1b:44:c1:52:a7:97:db:ef:99:b2:de:8e:ce:de:42:18:6d:44:
9a:ad:05:78:ec:d8:db:da:f5:b8:f7:d6:6c:af:ab:e4:c1:a4:
b9:46:61:4b:1c:60:21:c4:fb:ab:2f:66:b8:b2:24:37:7c:c5:
0d:85:11:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:09:55 2026 by rpki-client