Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: aG5GjyKtg2A8YDhqJERkyWDroGR/rW9ZaxQ9Zn/0fjs=
Subject key identifier: E7:16:53:6D:9A:EC:5E:76:70:AC:CB:EA:FC:D9:A4:4F:2F:51:C7:81
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 019E1DFEBBAF5A9E8FFCC2F14B12B241E149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 21:01:33 +0000
Manifest this update: Tue 12 May 2026 21:01:33 +0000
Manifest next update: Wed 13 May 2026 21:01:33 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: 3EfGbxsXaJ1G7gxzcqpq/m2B+Zae7EkP3tbRa0G0dk8=)
2: 9abfo1dfe2i5VEGFeOCi-Yu11DQ.roa (hash: 4raYX1rjDm7gMpaOcfPnUtC02bJsDBACsNYhYrbdmZM=)
3: gxBj4mi9DTD-XtJhh92wnnFfI0c.roa (hash: aSdTaRESDnJDn6dr8aVPGxKTLYVHaS0mrAqCtrDcgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:bb:af:5a:9e:8f:fc:c2:f1:4b:12:b2:41:e1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: May 12 21:01:33 2026 GMT
Not After : May 13 21:01:33 2026 GMT
Subject: CN=e716536d9aec5e7670accbeafcd9a44f2f51c781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:86:37:06:e4:68:f8:dd:81:c7:fa:00:47:
bd:cf:54:cf:18:c6:79:73:ad:dc:91:b3:0c:a6:3f:
7e:9a:43:d9:13:81:3f:1b:ec:18:ec:4d:66:73:6e:
41:50:64:92:64:bb:b9:67:cf:94:4e:b8:e6:91:61:
52:23:c7:13:f7:33:7e:2b:85:2d:7f:4f:4a:4d:84:
13:a8:c5:5a:db:94:bc:04:f7:69:8f:42:38:aa:48:
86:3b:67:63:35:9b:d5:ec:d7:54:eb:5f:bd:5f:27:
71:b6:ef:97:91:a1:79:69:33:9b:bc:fb:12:2a:72:
9b:85:b5:e3:a2:66:b4:9e:03:d5:b4:bd:a1:31:b5:
47:65:53:4d:92:99:15:af:48:97:d0:95:7d:c8:cd:
2f:6a:60:9d:d3:dd:64:7a:5c:57:0e:bc:92:1f:84:
33:09:3c:4c:c3:35:4a:a8:22:d2:c5:e4:d8:b3:42:
88:a4:ad:50:6a:f2:bd:b9:11:cc:e2:3a:8b:35:a4:
ca:cd:71:d6:b8:62:c0:50:0d:a2:f0:d2:cc:bc:5f:
12:11:2b:d9:99:95:f7:1b:a4:df:ed:13:f6:6a:d0:
0e:1f:cc:01:35:61:80:09:02:49:cb:cd:5a:82:f9:
4c:5c:fd:d3:9f:1e:5b:8f:82:da:bb:cc:68:89:97:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:16:53:6D:9A:EC:5E:76:70:AC:CB:EA:FC:D9:A4:4F:2F:51:C7:81
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:77:62:a3:b3:75:ed:a0:e6:56:eb:af:9a:29:30:57:06:1e:
1c:6b:81:95:6a:22:97:9c:6a:0d:c0:7d:df:bc:46:de:6e:c5:
11:93:e7:8a:b5:f3:8b:4b:a7:bd:e8:b0:99:22:0f:04:54:6c:
97:53:ee:45:a5:bc:9b:20:7b:1a:3d:d7:98:c2:db:a8:4b:cc:
eb:b7:7a:03:63:3c:a9:41:17:0b:57:24:2c:6b:0a:42:af:10:
a8:88:b6:cc:08:37:91:2d:e0:07:c8:ea:1c:45:94:aa:9a:05:
17:0d:0f:34:8b:02:49:63:dc:e4:21:7f:51:37:f7:ab:e8:92:
58:40:65:bc:bb:b6:f7:7c:da:e1:ed:b2:c5:d6:64:a6:6d:06:
99:db:f7:b3:e7:46:f9:67:dc:77:b3:a2:3d:5d:93:5e:ed:9b:
23:21:fc:db:e3:a3:e7:90:83:b3:af:6d:ce:61:0e:42:02:36:
d1:85:a6:61:15:28:14:e1:02:f7:e3:c4:cd:cb:b9:86:7e:40:
8a:32:46:5e:a1:38:52:40:a9:e5:4d:f7:f5:d3:21:03:a1:f7:
80:9e:f4:ae:51:41:2d:17:e7:a4:60:07:c8:ae:f6:36:c5:03:
06:b9:2f:93:fd:df:91:ef:11:1b:0c:85:ee:65:5e:7a:0b:b0:
18:32:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:07:48 2026 by rpki-client