Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
File: 3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json)
Hash identifier: 3CymMHXO4knLN9CrBXg/oKscqIhMbLL3lczt4IIvlnc=
Subject key identifier: 9C:29:33:E1:53:FD:80:28:FE:22:E0:26:85:22:8C:52:61:93:F0:5F
Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0
Certificate serial: 019D284DDF68B8212B66E34AD052675BFE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
Manifest number: 0721
Signing time: Thu 26 Mar 2026 04:01:25 +0000
Manifest this update: Thu 26 Mar 2026 04:01:25 +0000
Manifest next update: Fri 27 Mar 2026 04:01:25 +0000
Files and hashes: 1: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: t3/8zAOqNkt5jRSjqngPyYLXK8hGzMnkCzcYmngxZ5s=)
2: QQZsuXSlDaVTpljlvdfkJMjaEpY.roa (hash: DV/Zqnvfr5xdAPG252VQe4FEQYmxMLuCBh//Xq6odPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:df:68:b8:21:2b:66:e3:4a:d0:52:67:5b:fe:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0
Validity
Not Before: Mar 26 04:01:25 2026 GMT
Not After : Mar 27 04:01:25 2026 GMT
Subject: CN=9c2933e153fd8028fe22e02685228c526193f05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:da:e6:52:73:62:bf:85:5c:74:cb:9a:fe:
ae:7c:b8:07:52:5a:de:b4:2f:b3:28:f8:35:80:8a:
98:75:d0:22:34:67:b2:1d:8f:bf:cb:f7:82:91:25:
6c:a2:8b:d6:4f:0a:7e:78:7e:79:0f:85:32:69:41:
f1:b4:c1:3f:bc:bd:9b:33:54:b1:e3:e4:fd:bd:c8:
8d:51:8f:9d:f5:de:6b:dc:9f:69:95:77:1b:9d:41:
ba:a7:e8:9b:cf:35:be:5f:15:2b:bc:06:85:83:d1:
60:92:73:dd:72:10:34:0e:60:12:e4:af:96:42:36:
89:8a:66:07:1b:58:f3:ca:4a:00:3b:6c:26:c8:f1:
af:33:38:aa:3a:8d:95:72:99:db:5f:ff:2f:d6:8d:
74:59:f5:ad:0e:91:74:72:66:7b:d7:fc:27:35:43:
d8:9a:c5:d6:99:05:a2:57:d7:8d:c0:5a:5c:09:3a:
dd:b9:2f:4c:b0:06:aa:be:1e:14:e6:42:2a:8e:71:
e6:c0:c6:48:60:5f:bb:f5:ef:e9:f3:88:01:cc:ca:
4b:e3:b2:b3:89:d2:03:d6:5a:56:88:71:d0:f5:02:
ab:11:7b:a6:86:a0:b6:ca:ec:99:05:e2:ab:f6:5b:
b5:ba:26:bb:9f:75:5a:fe:43:c8:52:39:b6:66:37:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:29:33:E1:53:FD:80:28:FE:22:E0:26:85:22:8C:52:61:93:F0:5F
X509v3 Authority Key Identifier:
keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:33:d6:b0:06:c9:bc:7e:71:65:f1:1a:c8:e9:de:1a:90:0b:
ee:a4:61:9c:bd:c4:cf:c9:9b:26:a2:a8:5a:f9:74:30:2f:82:
c0:2c:9d:ca:af:1c:9f:fc:f6:48:85:81:f2:e6:e2:04:80:9e:
e1:0c:c5:d6:96:e4:9d:9d:11:83:7d:14:27:d6:f6:71:3e:64:
82:ce:6f:17:2b:72:67:fa:a6:0b:54:b1:66:12:5e:aa:64:bf:
9e:12:5f:f7:63:a6:99:19:0e:8d:77:68:42:e7:30:05:0d:1c:
90:98:7f:a1:f4:c6:94:ee:02:a6:1f:1e:8b:20:b9:ad:ee:e3:
60:8c:35:54:11:7b:56:1b:2d:e1:dd:de:f9:f4:46:d6:de:52:
f5:b3:1b:fd:fe:a5:c8:b5:60:ad:c1:7b:60:10:19:89:a4:9a:
89:c9:e0:51:ef:21:1e:21:88:46:ad:53:b6:4c:63:42:9b:5c:
08:9d:ca:d5:55:28:50:87:7b:d4:e6:c1:41:c7:12:09:69:56:
33:75:ab:e8:c6:6b:87:13:41:7b:ee:de:60:80:d9:68:34:6f:
bb:7f:c1:94:ff:dd:86:b0:74:fa:7d:f9:f7:9a:e6:23:e8:a8:
0e:23:d2:a8:b6:e0:65:c5:19:04:f5:c8:56:ed:ef:d5:6e:dd:
e6:94:a0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:51 2026 by rpki-client