Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
File: 3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json)
Hash identifier: nLe/S0p7x/DSWk+BVsnno/eQlLtwLW94SDA+AIdGIqE=
Subject key identifier: 46:B0:20:BC:8D:89:37:F1:ED:54:4B:B5:3A:2E:9D:35:E4:42:09:D6
Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0
Certificate serial: 019E1D911DC29046F0EA90F1ADA032635F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
Manifest number: 07A0
Signing time: Tue 12 May 2026 19:01:50 +0000
Manifest this update: Tue 12 May 2026 19:01:50 +0000
Manifest next update: Wed 13 May 2026 19:01:50 +0000
Files and hashes: 1: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: 79w3NujUrBZq7rmOftpzm48GiivOOhK45WIIVJwlZYk=)
2: QQZsuXSlDaVTpljlvdfkJMjaEpY.roa (hash: DV/Zqnvfr5xdAPG252VQe4FEQYmxMLuCBh//Xq6odPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:1d:c2:90:46:f0:ea:90:f1:ad:a0:32:63:5f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0
Validity
Not Before: May 12 19:01:50 2026 GMT
Not After : May 13 19:01:50 2026 GMT
Subject: CN=46b020bc8d8937f1ed544bb53a2e9d35e44209d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ee:13:bb:1a:06:0a:ee:29:78:64:e7:84:15:
b8:ac:31:a5:18:4b:a6:e9:60:a9:3d:3a:c4:2e:b9:
c2:8b:d4:b2:71:41:dc:1e:d2:43:bb:00:f1:52:a0:
c4:4e:f5:01:61:a5:91:92:fe:1b:9e:38:ad:cd:63:
89:57:27:6d:65:b4:60:19:2c:10:fb:b0:41:79:60:
81:e2:04:3c:e9:38:29:93:d3:5d:0a:30:61:14:7b:
5f:ff:5d:55:9d:08:f3:13:ba:44:d3:fd:49:fa:f0:
ec:b8:f2:c1:5a:d0:49:94:60:66:b5:e9:2b:d2:f3:
72:18:7e:b8:f0:36:93:9a:dc:e4:3b:29:dd:98:6d:
88:03:e0:3d:eb:5f:a3:9b:31:5b:20:f1:c4:ce:be:
a1:66:21:17:54:56:66:3f:c4:36:79:f4:5f:8f:9e:
ef:67:d6:09:89:7f:af:df:10:62:d9:d6:a1:1a:b5:
72:88:c7:59:dd:cf:7e:fa:f4:c9:fa:94:77:47:bd:
1f:d1:ee:4f:9d:73:ef:8a:2f:36:85:96:79:9a:f5:
e5:54:61:ec:c4:e5:bb:3e:92:93:03:6c:a0:e2:97:
b5:b0:59:11:65:33:79:86:b4:c7:38:3c:c0:10:e3:
fe:4a:e0:77:cf:e9:28:48:4f:9c:fa:3f:3f:5c:12:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B0:20:BC:8D:89:37:F1:ED:54:4B:B5:3A:2E:9D:35:E4:42:09:D6
X509v3 Authority Key Identifier:
keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a6:c0:f8:43:09:13:f9:9a:1a:95:b6:e2:68:20:fc:3f:da:
c0:3f:7e:b5:64:7d:2f:86:a6:7b:8b:4d:ff:d9:ea:18:9e:f6:
31:70:4c:8e:a5:36:c4:4e:ba:ea:49:a0:d1:e8:7d:db:d7:2f:
55:44:69:15:16:11:0e:1c:55:38:5e:4e:0b:67:b4:32:77:8d:
9e:a4:1b:5a:e8:38:f8:8f:3b:69:d2:1f:c0:d7:4a:a6:ab:d4:
36:e8:18:28:62:52:af:c1:8a:e6:e5:de:e4:ae:27:ab:43:44:
80:39:c6:e0:52:98:66:4f:66:98:84:ec:33:25:25:25:00:e2:
aa:c2:af:0f:13:e7:e5:53:8a:68:a3:f8:74:cb:c2:88:1a:f9:
f5:2a:bd:9a:1f:df:60:8f:1c:0f:a2:bf:b1:a7:35:cf:23:58:
1a:69:e7:57:20:93:6b:b5:1d:df:4c:e9:91:70:b5:1a:dc:a9:
fe:3e:5e:66:75:71:29:8d:1f:04:ef:55:d4:62:36:0d:dc:53:
66:80:a7:0a:7e:67:b4:76:14:97:7d:99:ec:b1:be:ce:bf:5d:
e4:7e:8a:e4:9c:97:50:ee:ee:9a:b6:1b:84:77:d3:09:d0:c1:
d6:6d:0c:10:a1:43:54:4f:05:7b:80:a6:a0:1f:7c:18:f2:8c:
b6:29:47:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:13 2026 by rpki-client