Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: OVX84uRhKvWQvws3HjiVpYQ7KcivKqNSdmSWOnGzUe0=
Subject key identifier: 19:6C:0A:37:F2:EA:1F:2A:AB:4F:B0:39:F9:48:3D:FC:97:46:9B:43
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 019F90C81B662127A05786D3185EADACD9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 21:01:00 +0000
Manifest this update: Thu 23 Jul 2026 21:01:00 +0000
Manifest next update: Fri 24 Jul 2026 21:01:00 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: UxCZm+dlH2Ul22WlyAt4wt8SXHgf3wnART7hCL6/lt0=)
2: 9abfo1dfe2i5VEGFeOCi-Yu11DQ.roa (hash: 4raYX1rjDm7gMpaOcfPnUtC02bJsDBACsNYhYrbdmZM=)
3: gxBj4mi9DTD-XtJhh92wnnFfI0c.roa (hash: aSdTaRESDnJDn6dr8aVPGxKTLYVHaS0mrAqCtrDcgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:1b:66:21:27:a0:57:86:d3:18:5e:ad:ac:d9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Jul 23 21:01:00 2026 GMT
Not After : Jul 24 21:01:00 2026 GMT
Subject: CN=196c0a37f2ea1f2aab4fb039f9483dfc97469b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:75:42:7e:25:96:33:97:92:93:69:8d:d8:62:
3e:8d:09:7c:32:8f:6f:b1:aa:3b:c2:83:b7:ed:e8:
45:11:1a:f1:f2:d5:38:51:d0:c0:39:10:e2:48:5b:
0a:36:fd:f9:b1:cb:43:32:03:7a:8f:15:e0:10:7c:
2a:5f:33:b0:12:a6:72:b7:72:d0:0d:4f:73:d2:06:
7c:61:e8:08:53:07:72:a7:df:33:1b:6a:5f:a8:a3:
32:bf:df:0f:4c:72:52:20:f5:35:c0:98:19:03:fa:
f4:09:9e:30:2d:b2:80:91:17:8e:60:a0:18:e1:6c:
b8:0b:e2:b8:5c:06:55:b9:94:40:93:f8:54:a0:78:
7d:e3:19:16:19:93:73:30:88:15:85:c1:11:94:62:
83:df:8f:69:8a:33:47:a7:73:7c:33:53:05:43:6e:
69:62:e8:09:57:fe:9e:11:c5:6a:b0:56:b3:b2:5c:
4b:ce:83:bf:92:a3:52:3b:bc:72:68:92:81:b5:5f:
0c:a9:80:53:63:ba:30:4a:ff:bc:c3:84:e8:af:76:
b7:4d:59:43:e6:d1:eb:5b:85:71:80:c9:51:45:c1:
f2:98:d4:be:39:74:22:6c:3a:ab:29:ff:08:e2:b1:
26:18:65:01:49:c9:5b:89:97:1c:5b:b2:9c:a2:95:
7d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6C:0A:37:F2:EA:1F:2A:AB:4F:B0:39:F9:48:3D:FC:97:46:9B:43
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:85:d0:b2:cb:54:ca:c1:19:50:3c:b9:a9:53:12:6a:1d:34:
26:71:49:74:bc:98:16:2b:33:9a:24:f6:f2:2f:0e:ca:ba:0d:
fb:b2:75:12:4f:7c:ea:10:aa:9b:e2:af:ac:3c:92:81:f9:4e:
d2:34:58:35:c9:3b:fb:bb:a6:23:64:e6:b0:18:a7:65:72:cb:
63:cf:3f:00:bf:51:b2:73:e4:e0:8c:86:97:23:71:ac:36:23:
a2:89:ff:4a:41:9d:84:11:21:8a:b7:36:f4:7c:90:e0:02:46:
45:de:87:33:ea:8b:46:b7:5a:81:43:88:a8:f4:23:3e:26:d5:
13:88:03:33:20:5e:e2:32:51:90:a8:73:ad:11:ca:51:0e:b4:
e4:e6:a9:18:a1:49:b1:f3:2a:8b:89:9b:cf:e6:fe:2e:14:5c:
ec:ae:ee:df:88:9c:6f:dd:a0:03:1f:8d:2a:66:b4:d6:12:b4:
4e:da:28:86:da:bb:17:a5:98:2d:24:a1:a9:f4:54:8f:e0:77:
a4:bd:3b:4f:75:61:da:d4:b0:00:6b:84:eb:64:8f:e0:34:4b:
12:6f:de:59:97:3c:2f:24:f3:fb:8c:5f:8a:36:94:05:20:9d:
92:f8:8c:b5:b6:d2:d0:98:a5:ed:fe:4a:80:0f:1d:f8:d7:3b:
2a:3c:a5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:31:55 2026 by rpki-client