Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: E6XoUETbZYH/kD/NBi7yjJzrs3o0qWcYnU39SeXs+ck=
Subject key identifier: 75:FD:77:58:C1:36:1D:BC:6E:71:8A:61:2F:BD:38:2F:AE:4C:3B:2F
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 019D28BB1CCBCC056C5DC5BE8704D9C534B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:00:44 +0000
Manifest this update: Thu 26 Mar 2026 06:00:44 +0000
Manifest next update: Fri 27 Mar 2026 06:00:44 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: hHH3FDIk7FQqvyOybTOotDtgfYjgs1e1Mk/iuQztfbU=)
2: 9abfo1dfe2i5VEGFeOCi-Yu11DQ.roa (hash: 4raYX1rjDm7gMpaOcfPnUtC02bJsDBACsNYhYrbdmZM=)
3: gxBj4mi9DTD-XtJhh92wnnFfI0c.roa (hash: aSdTaRESDnJDn6dr8aVPGxKTLYVHaS0mrAqCtrDcgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1c:cb:cc:05:6c:5d:c5:be:87:04:d9:c5:34:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Mar 26 06:00:44 2026 GMT
Not After : Mar 27 06:00:44 2026 GMT
Subject: CN=75fd7758c1361dbc6e718a612fbd382fae4c3b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:6a:bc:2f:67:47:11:6d:16:d0:db:bb:1b:
22:18:04:ff:0e:3e:5b:3d:52:ed:88:c2:a9:ad:a7:
e6:c0:19:08:4b:53:70:20:96:8a:32:c5:da:96:7a:
30:55:cb:1e:9c:09:eb:6c:cd:97:2b:f8:7c:4c:8e:
22:c2:fb:72:59:3a:b0:26:7f:df:39:49:18:3e:db:
7d:61:8a:7c:95:9f:aa:06:5a:60:f8:30:6c:a1:02:
00:0e:9e:98:08:d0:1c:ed:f9:0b:27:52:1b:9f:49:
a7:f6:86:b7:4f:f1:a1:1b:7a:e4:e1:b7:b4:81:4a:
95:79:ea:9a:1e:e0:45:99:d4:71:37:2f:f3:df:4a:
6e:ae:2c:2d:cf:fd:c3:6b:d9:35:70:b7:e1:08:d1:
fb:ff:da:bc:b1:95:af:f6:d9:04:03:49:f3:52:bf:
4d:b2:0d:14:2a:13:02:22:f4:fe:17:a7:1c:46:b4:
a5:ed:66:7d:5a:0f:e7:96:cf:34:60:7d:b3:4e:d4:
a6:79:0b:d2:b5:ec:d8:ec:85:b8:49:38:9e:fd:11:
10:02:4c:28:b4:5f:88:7e:cc:d4:f4:e6:71:d9:ab:
a6:6a:e9:ab:00:c3:07:a9:0f:3f:f3:fe:fe:37:aa:
37:72:1f:79:5b:9d:fb:7d:9c:1f:64:0a:2d:2a:ba:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FD:77:58:C1:36:1D:BC:6E:71:8A:61:2F:BD:38:2F:AE:4C:3B:2F
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:df:fb:33:6d:08:ea:1d:6d:7e:c0:3c:a3:99:63:d0:47:61:
42:21:45:5f:92:46:3a:6b:1d:bd:b4:94:3f:87:0b:5b:0c:d9:
d7:46:11:98:c5:3e:35:a3:3b:0c:89:ba:bf:de:12:9c:e1:7f:
92:e3:55:9a:a8:cc:3d:53:1d:6b:ea:d2:f8:fa:0c:ec:0a:c1:
97:91:a8:63:c1:91:4f:cd:d2:ce:08:3c:60:ad:22:58:0b:cd:
63:d0:7e:97:4b:7a:9f:63:8f:f5:cc:65:a2:25:e2:7d:03:60:
28:92:08:45:7a:72:6f:16:e2:8e:c6:5b:be:20:2a:9d:7e:25:
f4:86:02:8d:0b:dc:bf:b0:3d:7d:2a:ac:83:85:6d:f1:63:ec:
e2:16:50:5b:02:37:14:42:2e:6b:e6:fd:6b:0b:89:0b:de:97:
33:b6:69:48:4d:e6:78:8e:c0:0c:35:9e:02:94:45:ef:ca:61:
88:b4:d7:e5:3d:17:a3:db:23:e9:a5:48:11:4c:25:ae:23:99:
2f:14:ee:36:54:ce:8c:02:a1:38:34:ae:c3:5e:de:25:b3:8f:
1d:54:1d:af:2b:77:ca:68:ee:04:1e:df:df:cc:68:49:d3:d2:
72:81:1c:71:a8:85:ae:a1:a2:51:2b:b0:36:65:8a:42:77:81:
5c:be:1e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:30 2026 by rpki-client