Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: 1c0GHOmvN5YI2+QeKY0GZMtQ8OV9gRX1bzDDbu1s0Is=
Subject key identifier: B1:8B:F4:8F:17:98:F8:41:99:05:46:E5:20:B4:68:F0:EC:58:6D:29
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 01A0FBD8C1CD080F70A8E9B00DA702B38A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 1A84
Signing time: Fri 02 Oct 2026 09:01:21 +0000
Manifest this update: Fri 02 Oct 2026 09:01:21 +0000
Manifest next update: Sat 03 Oct 2026 09:01:21 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: q50rTDQEwgugv5EoWS08k9DhkvG7V5OXGqlZlXlTC9I=)
2: 9abfo1dfe2i5VEGFeOCi-Yu11DQ.roa (hash: 4raYX1rjDm7gMpaOcfPnUtC02bJsDBACsNYhYrbdmZM=)
3: gxBj4mi9DTD-XtJhh92wnnFfI0c.roa (hash: aSdTaRESDnJDn6dr8aVPGxKTLYVHaS0mrAqCtrDcgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:d8:c1:cd:08:0f:70:a8:e9:b0:0d:a7:02:b3:8a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Oct 2 09:01:21 2026 GMT
Not After : Oct 3 09:01:21 2026 GMT
Subject: CN=b18bf48f1798f841990546e520b468f0ec586d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:70:04:29:21:58:01:9b:41:04:f6:6b:bd:
39:cb:ec:d4:5d:6c:61:29:2d:d9:73:9b:c8:b5:68:
65:20:9a:fb:c8:bd:3c:53:a8:9f:a9:ef:68:83:80:
97:74:c5:df:68:3a:20:8d:07:75:1e:57:bc:23:07:
b7:23:8a:54:da:93:a6:b6:39:08:ca:ad:37:a3:f1:
42:c9:25:13:90:ae:4d:12:71:04:bb:8f:5d:b8:4d:
f1:59:8c:a1:d8:41:39:0f:66:4b:3b:74:13:e8:1f:
ea:bb:07:26:c1:f5:f1:d6:f6:0c:eb:75:f0:08:5c:
a6:ed:49:0c:c0:1f:7f:49:ec:06:64:ce:9a:ee:11:
b4:dd:ed:24:1c:3a:65:8e:ac:b3:1e:b4:d8:70:09:
01:9f:89:88:47:9f:be:5e:01:b8:b2:ff:63:aa:e8:
7a:99:79:7a:b7:3a:39:b1:73:ab:5c:14:f1:70:f5:
23:ee:01:66:5e:18:fa:d1:fd:5e:69:b2:3d:fc:b2:
14:c9:18:ad:ff:2a:36:0c:1d:da:73:4e:69:7b:68:
75:f6:3f:67:3a:23:3f:23:ba:5f:98:5c:78:f4:57:
bb:bb:64:e6:fa:fe:09:dd:cd:b7:7c:25:b0:78:4c:
ce:07:cc:f6:7c:7c:76:b3:ae:28:e4:1d:64:2e:4b:
58:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8B:F4:8F:17:98:F8:41:99:05:46:E5:20:B4:68:F0:EC:58:6D:29
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:03:11:8d:f0:ef:fe:b8:75:40:04:87:32:e9:a9:a8:e8:39:
1b:90:1a:87:b6:59:cb:e2:20:9f:16:d7:f5:5d:ed:38:03:a5:
94:b4:98:2d:45:4f:24:d2:44:c1:93:e6:b8:19:e9:81:5c:de:
67:7c:04:d9:85:e7:4d:0f:67:e8:59:69:62:5b:21:c2:ca:a3:
a7:f2:9d:7d:4c:07:d5:10:51:d7:ce:68:69:15:1f:3c:5d:9a:
c6:95:de:c8:05:f5:a7:c3:36:36:7c:0f:c6:ae:9e:fb:c9:43:
1b:ab:69:9b:a6:47:47:d3:78:05:ed:1e:d6:83:8f:88:5f:37:
2e:c2:3f:f3:90:c6:3d:ed:d7:c6:64:e5:eb:94:33:ed:84:03:
f7:43:19:51:7f:d1:51:ba:b8:8d:ef:14:91:df:de:30:a5:0c:
42:9a:71:e4:de:d7:9c:cc:fd:4e:ba:c7:61:ad:0c:9f:96:a4:
62:31:45:50:29:72:61:ec:36:dc:32:8c:f9:96:39:57:95:50:
06:76:6f:a6:11:1a:f4:df:06:e9:1b:d5:01:20:6e:53:e7:73:
a8:41:10:64:a4:db:21:84:ff:49:90:b6:3e:8f:ae:e1:17:33:
6b:f6:ce:da:7f:95:0e:70:43:72:9d:2d:80:fb:d7:c9:70:b2:
ec:7e:39:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 17:24:53 2026 by rpki-client