Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: +lBF3QrkAQ3oV84/n3dBpOXWrIsxRpkH323HBA9lsSQ=
Subject key identifier: F7:61:F8:C5:BD:E7:28:06:C0:79:68:B9:F0:F8:CF:65:55:F9:15:5D
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 019D28F33B0EDD12CEDE416421AE95AFAE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 0658
Signing time: Thu 26 Mar 2026 07:02:02 +0000
Manifest this update: Thu 26 Mar 2026 07:02:02 +0000
Manifest next update: Fri 27 Mar 2026 07:02:02 +0000
Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: j/r6sP/3dbNtdSBkq7p9UOxCJCon23Uq9aBdjGwCUs8=)
2: SmafHrnaMWuly5trV1gC3gRhXUk.roa (hash: 48PkkvQ09WAg7AqwCjJuzSMQ1WYgWgSM17QO2PTsJN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:3b:0e:dd:12:ce:de:41:64:21:ae:95:af:ae:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Mar 26 07:02:02 2026 GMT
Not After : Mar 27 07:02:02 2026 GMT
Subject: CN=f761f8c5bde72806c07968b9f0f8cf6555f9155d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f5:72:cb:1c:c5:75:a6:0d:8b:96:c3:ad:fa:
98:be:94:e4:12:d2:40:a4:2e:11:3c:83:c7:d5:d0:
d5:c1:14:45:f6:5f:8c:5d:1e:03:58:b0:b1:85:5a:
5e:44:5f:a9:4f:5d:8b:d5:89:08:04:78:5d:89:16:
9e:92:5b:ae:c9:e1:ed:21:98:07:26:69:3f:56:bf:
0c:3f:ee:0e:0e:f0:99:0a:b0:13:90:69:9f:a1:ad:
3a:90:b8:3f:02:ae:d3:1a:ea:f9:8b:55:85:fa:e0:
ee:02:2d:32:5b:cc:d3:85:20:1f:c6:6b:16:18:82:
3b:19:b0:0e:26:88:99:8f:d6:c4:a5:be:b0:04:45:
24:88:ce:b3:77:2c:7a:0d:f0:3b:2a:e8:bc:7c:b2:
9d:77:1f:e0:e9:82:e6:5b:25:57:d7:63:8c:f0:dc:
13:6d:52:cf:29:53:36:59:c3:3e:d9:38:7a:5d:7f:
62:9f:99:db:6f:f2:29:41:4b:f3:6a:80:c7:f6:3d:
01:20:95:71:bd:49:22:86:fa:37:17:38:ea:7a:63:
79:df:ff:51:9f:98:eb:d9:68:49:02:97:7f:e8:5c:
7e:39:8b:69:14:4e:a8:de:33:67:a9:48:c9:1e:6c:
c3:c2:78:db:61:1a:1a:4b:2a:4c:6b:74:d0:27:c3:
5c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:61:F8:C5:BD:E7:28:06:C0:79:68:B9:F0:F8:CF:65:55:F9:15:5D
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:be:46:3e:a8:90:14:c3:b5:83:f7:8f:38:02:4f:30:f6:03:
95:e7:eb:d7:53:70:8e:3b:7c:18:3c:95:22:9b:da:af:84:08:
ed:22:f1:97:cf:4b:ec:06:f3:c9:5e:4c:6d:5f:11:0f:90:86:
fb:a2:9b:06:e4:a8:e3:8b:87:ef:2f:65:32:ce:a3:4f:e9:92:
a9:de:49:9f:8c:4a:8b:80:b5:62:6e:6a:65:8c:07:1c:37:6b:
71:b3:86:3f:44:c5:be:44:19:ad:5c:f0:d3:ce:cf:97:a5:d0:
25:5c:49:fd:88:4d:28:52:cc:da:bf:d6:44:45:cf:b7:8e:c1:
9c:0a:0e:eb:59:e0:f2:80:4b:e9:aa:1e:33:99:d4:52:f4:50:
cf:5a:1b:b9:df:ef:83:67:7b:85:02:bc:b9:03:91:8e:26:46:
7d:da:ba:d9:82:58:37:37:fc:2b:8d:7b:bf:71:53:2c:63:33:
73:c0:1e:96:d8:2c:db:9c:74:6d:f9:35:f3:85:98:95:90:ff:
21:75:a8:f1:4a:51:e0:ea:59:ea:c3:6f:75:a2:40:6b:26:e5:
8e:22:b2:1a:f6:8d:3c:44:b7:1d:a9:53:3a:82:f3:6a:cc:3f:
b5:72:18:d3:0a:58:97:4e:8b:12:60:f3:95:08:23:ea:32:f3:
81:a9:9c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:22 2026 by rpki-client