Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
File: 3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json)
Hash identifier: X/acizcBmnjJCLyryKh3u0kMjIIvv3b1h8fpo/uJN2c=
Subject key identifier: 8B:29:18:2D:83:C4:42:C8:88:0F:04:74:60:C2:E8:A0:A8:4D:AE:36
Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0
Certificate serial: 01A0C933C496ECAB9AB757D54A3AE99757A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
Manifest number: 0902
Signing time: Tue 22 Sep 2026 13:00:08 +0000
Manifest this update: Tue 22 Sep 2026 13:00:08 +0000
Manifest next update: Wed 23 Sep 2026 13:00:08 +0000
Files and hashes: 1: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: UWVcakRg91ibTVpF5IFagEYBjKaBxCWuzKbAZbWpa08=)
2: QQZsuXSlDaVTpljlvdfkJMjaEpY.roa (hash: DV/Zqnvfr5xdAPG252VQe4FEQYmxMLuCBh//Xq6odPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:33:c4:96:ec:ab:9a:b7:57:d5:4a:3a:e9:97:57:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0
Validity
Not Before: Sep 22 13:00:08 2026 GMT
Not After : Sep 23 13:00:08 2026 GMT
Subject: CN=8b29182d83c442c8880f047460c2e8a0a84dae36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b9:90:24:0c:2c:20:48:03:94:47:47:6c:e5:
30:3b:97:ce:4f:e7:f9:54:40:72:e2:8c:e3:50:c0:
81:7c:fe:91:c5:57:84:b5:24:63:ab:26:74:f9:79:
f9:56:48:48:14:5c:a0:ec:b2:2f:d2:ed:c0:d5:c2:
9a:e2:34:43:ca:69:5d:e6:94:78:7f:7c:4d:03:d1:
92:66:d6:de:fd:60:bb:a8:c8:7c:07:4e:74:46:83:
0f:fa:ee:e2:e5:1a:bc:7c:75:cd:bc:03:66:8e:83:
ec:55:6f:02:23:1f:46:1a:99:17:ed:05:1e:a0:39:
33:4d:84:d2:ca:d9:63:81:c1:48:13:56:cd:52:a6:
dd:4d:a8:fa:4e:4d:21:5c:72:2b:55:82:a1:5d:a2:
98:7b:2f:58:cb:be:7d:fe:f5:98:2a:f5:53:0b:0a:
b1:6a:c3:ba:08:b9:04:d7:00:5c:d9:2e:56:92:29:
9e:97:9f:95:24:9d:44:64:a1:7e:22:29:ae:3b:eb:
3e:9d:ab:b1:30:88:6d:cb:2e:96:75:ad:9c:7a:ee:
b8:4f:77:7b:7f:9f:91:72:eb:ac:a9:7f:7c:d3:6b:
ca:ad:b7:ae:2c:b7:11:86:5b:ef:f3:8b:a9:b6:af:
02:03:dc:80:99:15:de:50:19:13:74:04:71:66:59:
46:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:29:18:2D:83:C4:42:C8:88:0F:04:74:60:C2:E8:A0:A8:4D:AE:36
X509v3 Authority Key Identifier:
keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f2:d8:67:a7:f1:b3:ef:93:48:6c:bf:0c:f2:70:12:49:d3:
f1:74:41:d5:7a:35:e9:3a:6a:e9:bb:b5:32:c0:2e:c1:1b:b5:
a4:4f:0d:e6:3a:c5:ed:31:4e:6d:af:b6:07:f3:34:4a:79:bc:
da:49:3e:77:c4:60:35:25:02:b8:1f:b9:0a:f8:c1:44:9b:43:
4a:e2:1f:ae:30:b1:7c:c4:c5:da:fd:19:6e:d6:c5:e9:79:c0:
14:c7:dc:f8:ee:16:38:07:5b:32:55:23:b6:4c:9e:e4:ef:8c:
68:a1:80:87:57:88:a9:70:fe:ec:8d:ab:0d:1f:56:a6:e0:02:
e2:94:89:41:0e:3d:09:cd:0f:c0:97:82:a9:7d:8d:36:91:dd:
06:e1:b8:8b:a9:6c:25:5b:e0:44:3f:6f:42:58:b1:fb:74:bc:
cb:9c:08:b9:dd:ef:ec:4d:5d:24:db:de:11:37:6a:39:d9:aa:
7f:be:2d:6b:bb:9b:98:c2:74:94:d1:bc:a3:7d:9a:79:db:96:
33:5f:1e:69:60:00:11:1c:0a:a4:22:79:e4:2b:9e:c5:04:91:
64:03:91:51:e8:cd:a1:1f:00:79:8a:b8:6e:1c:db:af:26:5c:
fd:d6:ff:22:e5:81:9f:be:74:32:cb:70:53:41:18:df:36:4e:
ab:e0:77:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:40:34 2026 by rpki-client