Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: ZBlzGmKwVnfHBs4k4QtCj00rgLaPaFpOs76bXx3RTv8=
Subject key identifier: 34:9A:06:3C:75:99:73:A6:DE:BC:EA:A9:BB:FB:E8:51:77:1E:96:5B
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 01A06EDE457CB1F872E8E52F95212362A048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 1A3B
Signing time: Sat 05 Sep 2026 00:00:55 +0000
Manifest this update: Sat 05 Sep 2026 00:00:55 +0000
Manifest next update: Sun 06 Sep 2026 00:00:55 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: w61CeM1d5yFUodiKHi/Bt3xWpGtxxrw7xIlP1Bv8JjY=)
2: 9abfo1dfe2i5VEGFeOCi-Yu11DQ.roa (hash: 4raYX1rjDm7gMpaOcfPnUtC02bJsDBACsNYhYrbdmZM=)
3: gxBj4mi9DTD-XtJhh92wnnFfI0c.roa (hash: aSdTaRESDnJDn6dr8aVPGxKTLYVHaS0mrAqCtrDcgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:45:7c:b1:f8:72:e8:e5:2f:95:21:23:62:a0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Sep 5 00:00:55 2026 GMT
Not After : Sep 6 00:00:55 2026 GMT
Subject: CN=349a063c759973a6debceaa9bbfbe851771e965b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:ee:c6:c3:c3:6c:84:2b:90:74:8f:66:e7:
fb:a2:41:4c:77:cb:59:94:68:9c:14:97:ea:38:cc:
e7:ef:a2:15:58:dd:0a:12:62:ea:bc:9e:bf:23:e8:
82:c3:52:c4:5a:2b:ce:6a:e2:12:93:28:31:d0:1e:
f7:8f:a4:aa:c3:ab:75:52:da:cb:ae:9f:78:71:9c:
ff:d4:82:a1:ec:c9:6b:74:df:84:a7:42:9a:6c:c6:
c6:84:ce:17:52:17:c4:03:96:f3:ef:57:b7:2b:4b:
e2:6c:f1:27:aa:bf:1a:ba:db:7a:c5:6a:c5:7a:ed:
74:36:b5:47:7d:a8:a3:8a:81:35:9c:81:80:e2:96:
9e:16:a0:1a:07:fa:74:9d:af:35:35:91:8e:0c:86:
f8:be:92:68:3b:74:86:0a:68:b7:4e:b9:77:ec:bc:
61:4c:e2:fd:ae:e9:f4:eb:a7:5a:ad:0f:32:61:d2:
d6:52:a2:cf:5f:a9:cd:14:e4:3d:f2:d6:e9:bc:9f:
a0:c0:a3:bb:32:ed:17:b4:5f:5e:dc:4e:bb:a8:c0:
d3:95:a7:87:2a:08:7f:26:31:7c:26:2f:8c:7a:c9:
42:3a:50:ce:3c:c8:a3:87:e9:46:0b:4b:5d:4f:d8:
5f:3f:87:8d:0b:51:69:eb:95:3c:7b:74:2e:81:30:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9A:06:3C:75:99:73:A6:DE:BC:EA:A9:BB:FB:E8:51:77:1E:96:5B
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a6:f9:f1:08:6f:d6:de:ab:80:0c:d7:fa:1e:7f:ef:e5:2c:
58:04:c7:21:20:10:14:19:65:15:d6:74:cc:5e:45:24:68:ed:
f4:a5:1a:32:04:45:97:7d:0b:0c:85:a7:53:12:38:0e:e7:ec:
c9:95:84:c7:f1:95:be:02:2a:12:37:7b:78:cd:2f:b4:f6:d6:
52:57:63:cc:80:7d:30:2a:1e:a1:ef:59:14:7a:ef:ac:68:c0:
a7:34:40:18:24:0b:bb:f2:1b:dc:78:78:4b:e5:73:0c:70:72:
1f:be:10:d9:24:e3:88:e0:28:e3:93:e8:87:7a:af:d8:74:e1:
1a:a3:ed:da:d1:3d:e0:7d:58:0b:10:c9:13:26:cb:ce:14:f2:
ee:6c:2d:1b:91:e4:0d:cb:5d:00:48:44:29:49:79:bd:ec:81:
42:42:2b:cc:bb:93:ed:b1:72:54:d6:8b:dc:df:8e:80:10:44:
aa:8b:2b:71:b4:65:e0:01:b3:79:3d:23:6e:41:a7:fa:db:a5:
5a:02:d1:1f:78:9b:48:7e:6b:fc:27:c9:99:26:69:ff:c9:ca:
32:91:33:9a:d1:69:cb:c3:40:93:c8:92:f8:63:cc:2a:5c:f5:
da:7f:51:b7:ba:d2:6f:da:c1:ef:1b:fe:ab:a8:ae:fc:28:6e:
ff:18:75:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:12:04 2026 by rpki-client