Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: pfixOqGt++5oPVumDiAYSjD0gjYqIvVB4dn06faxY+0=
Subject key identifier: 0C:06:B8:61:20:F5:DB:A4:8D:12:02:85:95:10:41:60:D5:04:F6:EF
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 01A1795EBCC0178309DB12BCB45226A0B697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 18:00:13 +0000
Manifest this update: Mon 26 Oct 2026 18:00:13 +0000
Manifest next update: Tue 27 Oct 2026 18:00:13 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: 6eDj+/U8WQRNizod4DZEe6eCHUBAUlkOm1brt+1ursY=)
2: 9abfo1dfe2i5VEGFeOCi-Yu11DQ.roa (hash: 4raYX1rjDm7gMpaOcfPnUtC02bJsDBACsNYhYrbdmZM=)
3: gxBj4mi9DTD-XtJhh92wnnFfI0c.roa (hash: aSdTaRESDnJDn6dr8aVPGxKTLYVHaS0mrAqCtrDcgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:5e:bc:c0:17:83:09:db:12:bc:b4:52:26:a0:b6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Oct 26 18:00:13 2026 GMT
Not After : Oct 27 18:00:13 2026 GMT
Subject: CN=0c06b86120f5dba48d12028595104160d504f6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:19:b6:e1:49:ae:1c:e5:b5:8c:64:8d:28:83:
95:d2:1e:6c:30:87:21:49:f9:b1:b7:e5:8e:70:42:
43:45:f3:25:99:4c:f3:0e:41:03:3f:d7:d4:a0:05:
48:03:6e:75:f8:03:f8:5f:27:af:a4:7c:02:68:6d:
4e:46:4a:89:96:ae:dc:c3:7f:65:02:9d:86:fa:83:
e5:9a:4a:74:6b:8e:c4:db:35:66:9e:f5:73:f1:f2:
16:06:c2:de:79:e6:97:a6:4d:3c:f0:86:c0:5f:21:
6f:61:a5:4b:69:ba:da:32:8e:a7:76:95:aa:98:57:
48:22:37:5f:e3:3f:14:fb:25:c5:32:50:d6:1b:80:
0b:3e:5a:fa:05:b8:fe:2a:11:55:c9:fb:c5:18:5c:
25:46:aa:9e:26:0b:1a:b4:d9:9e:7d:db:ed:c6:08:
5d:85:0c:a8:61:8e:18:ce:9b:98:b4:f7:10:94:dc:
af:81:f6:2e:70:61:c6:35:08:07:bf:1e:09:fd:65:
a6:7a:f1:0f:a3:48:c3:e3:56:3f:e9:a3:64:e1:03:
09:fe:0e:52:c2:c9:c4:a4:7c:5d:72:6b:fd:6f:90:
6f:21:87:41:e0:b9:50:1f:3b:ae:b0:55:dc:f3:c9:
a5:68:10:02:40:bc:bd:87:d4:ea:99:f4:38:95:90:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:06:B8:61:20:F5:DB:A4:8D:12:02:85:95:10:41:60:D5:04:F6:EF
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9e:f1:aa:f9:f3:47:f9:25:3e:f0:ab:0f:65:7d:59:89:ef:
01:2a:c6:a6:aa:4b:cc:08:2d:ad:0e:fe:19:41:7f:2f:0f:aa:
52:3f:96:a9:36:c0:fb:31:6b:cd:11:c9:85:5e:54:79:30:e4:
fc:20:04:61:72:18:79:0a:b5:b1:12:c1:aa:08:09:97:6f:58:
7c:3d:21:93:3d:a4:f7:f6:4d:80:f6:88:44:5f:43:74:2c:95:
5d:c4:29:1b:b4:70:49:0e:57:d1:7e:5d:61:7a:a5:c3:f1:50:
4a:8b:14:30:9d:f1:ed:c7:47:ff:5e:b8:45:4a:18:a3:54:b0:
ef:8f:dd:a9:11:bd:65:01:f5:5b:88:87:37:88:20:77:33:b9:
dc:ec:0f:2a:e4:d3:5d:66:66:f3:b6:43:8e:55:53:b0:cd:9a:
07:b5:82:3f:58:cc:da:a2:1a:ba:c8:1f:41:c9:d7:6c:31:f2:
93:11:cd:eb:c9:a7:bd:74:72:18:0f:7f:67:9f:48:15:cf:63:
24:fd:81:68:ae:c1:dd:f5:58:d1:10:61:09:47:9b:6c:96:13:
a2:32:95:e4:54:1b:c5:5d:77:b1:a2:f0:34:4c:4a:ba:d4:80:
b7:f1:56:b8:ae:8b:31:17:8a:21:06:53:00:ec:aa:2f:25:d2:
5c:d5:07:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 02:58:58 2026 by rpki-client