Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
File: 3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json)
Hash identifier: r7edtjrPZ+CWBAkT1kLiMK6w7DBlJaxT82akGJEShCM=
Subject key identifier: 15:A7:26:2C:04:87:05:2A:09:EA:D6:D3:FA:C7:6C:6F:AD:32:3C:82
Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0
Certificate serial: 01A1DCF03C542E75F354B54FBAB5ACA8CCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
Manifest number: 0991
Signing time: Sun 15 Nov 2026 02:01:33 +0000
Manifest this update: Sun 15 Nov 2026 02:01:33 +0000
Manifest next update: Mon 16 Nov 2026 02:01:33 +0000
Files and hashes: 1: 00VuA26pvtlCzmdbOiF4kNThWVw.roa (hash: N6q+WPfXIyQH3uoSPmMDrINPLAz6XbUy2yMlO1ckTtI=)
2: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: 4Gku+Lq15mnlxH1Xz9VY2OAMxu5B7pL0x0bo0ovJ0/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:3c:54:2e:75:f3:54:b5:4f:ba:b5:ac:a8:cc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0
Validity
Not Before: Nov 15 02:01:33 2026 GMT
Not After : Nov 16 02:01:33 2026 GMT
Subject: CN=15a7262c0487052a09ead6d3fac76c6fad323c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:c9:2b:fc:03:2f:c5:b2:90:2f:31:2b:ef:
8f:f6:8c:05:01:b4:5d:a7:54:a3:fc:2e:c4:b4:af:
7b:b5:49:40:38:0c:1f:32:a8:03:d9:67:9b:60:e0:
96:4b:83:05:e3:21:a7:a6:34:16:c8:55:0d:5f:e7:
bb:64:63:4b:52:a9:df:0c:e6:2f:2f:a9:20:9d:70:
f8:8e:cf:6f:82:21:f9:36:91:b2:33:61:d5:18:b9:
cd:b7:0a:5c:40:17:1f:5c:5c:07:76:3d:0f:e2:7d:
35:04:35:12:68:9b:9e:31:ad:19:36:f5:b2:a1:23:
10:8e:32:32:41:6c:a8:65:7d:df:ef:56:e0:f4:91:
23:09:af:ae:5e:8f:18:41:a2:d0:17:95:aa:0b:0e:
bc:99:47:2f:66:9b:22:29:a4:f2:20:cc:1c:16:bf:
d8:1d:64:39:ac:b6:e3:bb:03:df:5a:2f:89:43:3e:
18:c4:6c:50:82:94:ca:88:2f:8b:2c:08:17:72:2c:
f3:87:2e:aa:a3:d0:70:5a:8f:c0:92:aa:da:b6:fc:
c3:2e:71:f9:14:b3:38:f8:80:9a:eb:1b:fb:55:27:
f0:76:3e:58:db:fc:be:3a:6f:73:43:a1:f0:35:67:
82:65:ea:87:4d:19:fb:0d:42:b5:fb:3f:0f:77:32:
05:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A7:26:2C:04:87:05:2A:09:EA:D6:D3:FA:C7:6C:6F:AD:32:3C:82
X509v3 Authority Key Identifier:
keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:fc:42:ef:37:6f:53:a2:42:53:8e:66:ca:ed:37:4d:f8:1f:
d3:cd:25:70:d4:69:4a:73:d5:3c:5c:9b:51:8b:cc:35:bc:8e:
1f:9c:96:ec:40:ad:1b:00:25:af:74:ed:bc:83:da:4f:3a:57:
fe:c4:bc:8b:cf:4e:2e:78:d7:2d:16:18:53:f5:27:b7:d5:b4:
8c:ea:c7:9b:40:18:ff:ae:cc:67:19:c4:d2:e0:2d:b3:e6:96:
8c:de:a9:14:b7:4e:22:d0:30:eb:18:bf:eb:9a:44:e2:07:45:
57:55:04:2a:5e:4e:62:ec:46:db:c0:5f:3a:43:58:6d:b6:52:
eb:2c:33:aa:59:b9:14:68:09:5f:4f:fc:ff:c6:7c:03:65:4d:
1a:f5:1d:a5:a7:c6:66:ce:35:fa:bb:40:fb:91:50:3b:c2:01:
34:92:e3:c8:6b:01:d0:97:38:eb:9d:09:a2:e3:72:54:a6:21:
08:e7:59:ac:e3:89:5f:97:b5:90:e5:f4:55:9e:91:b6:b4:e4:
89:6e:0e:7f:61:80:ed:91:77:cb:32:90:9c:41:55:93:11:f3:
64:48:6b:e8:42:2f:5c:84:78:c1:b4:5b:17:eb:a7:0b:c5:03:
ff:56:7b:51:d6:70:68:54:c3:5c:be:82:66:19:d5:f5:56:a8:
30:18:c5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:52:46 2026 by rpki-client