Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: iBicQBdLm2vgZB+1KgG3OrdePDBMsrJW+HRXf28B4CM=
Subject key identifier: 55:11:9D:3E:09:D7:93:48:35:BC:48:2C:36:39:B4:E5:CF:67:78:EF
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 019E9B84CCD2CCC45C51C4F1017C85D4C388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 1949
Signing time: Sat 06 Jun 2026 06:00:32 +0000
Manifest this update: Sat 06 Jun 2026 06:00:32 +0000
Manifest next update: Sun 07 Jun 2026 06:00:32 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: Rl5t8AOG6HYHbgKFNYjIlWwBshUYF2+qNQsiYKCSb4A=)
2: 9abfo1dfe2i5VEGFeOCi-Yu11DQ.roa (hash: 4raYX1rjDm7gMpaOcfPnUtC02bJsDBACsNYhYrbdmZM=)
3: gxBj4mi9DTD-XtJhh92wnnFfI0c.roa (hash: aSdTaRESDnJDn6dr8aVPGxKTLYVHaS0mrAqCtrDcgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:84:cc:d2:cc:c4:5c:51:c4:f1:01:7c:85:d4:c3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Jun 6 06:00:32 2026 GMT
Not After : Jun 7 06:00:32 2026 GMT
Subject: CN=55119d3e09d7934835bc482c3639b4e5cf6778ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:0f:70:21:70:06:c0:85:f9:16:07:ba:2b:
f9:22:f9:fb:01:3d:ed:cb:b5:04:37:81:09:f7:e4:
6a:66:3a:93:b5:3e:05:00:f4:15:59:6c:91:6d:fe:
bc:79:6a:75:07:fa:4d:f8:14:41:e9:7e:6b:5b:ff:
c7:fd:5f:51:52:ff:fa:42:1f:c8:1d:2b:ca:07:1f:
8d:fa:f9:b4:6e:8a:43:e3:95:df:d5:ca:45:6e:ee:
0b:8d:61:e2:b7:c5:f4:92:84:19:8f:f2:8c:b6:95:
1a:4d:00:a8:a4:a5:15:03:b3:ed:1c:16:38:29:e4:
f9:ca:d7:1f:22:2c:6a:1e:44:f7:2c:81:26:96:bb:
75:75:31:6f:74:79:e5:b3:22:23:54:99:7d:98:8b:
08:fe:25:0e:5c:34:1a:d7:ec:67:d0:dd:88:de:14:
da:51:5c:47:28:33:8d:fb:2a:b8:11:70:a6:28:95:
c2:6c:e6:1f:61:4b:38:77:9d:84:66:c2:cc:70:39:
33:0c:5e:78:0e:b5:5a:42:ba:a2:ce:02:67:76:5f:
c9:b6:03:b1:db:99:48:b1:7d:e2:39:0d:b6:e5:a9:
d6:ff:9b:f1:79:ff:f4:84:01:6f:3c:52:39:c2:56:
08:73:9a:3c:48:c4:f4:b3:11:25:6b:30:ae:0d:d0:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:11:9D:3E:09:D7:93:48:35:BC:48:2C:36:39:B4:E5:CF:67:78:EF
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b0:08:be:f7:57:3e:3b:88:96:12:10:a5:7b:a3:43:40:02:
65:f9:cd:3b:84:54:e2:2b:ed:12:5d:95:45:14:b5:fb:1d:eb:
01:f4:1a:c8:39:4f:e0:80:4f:cd:fa:16:64:2a:00:6b:02:c5:
30:cf:08:69:80:2e:6c:2a:ce:bc:ad:02:eb:fb:41:4a:71:23:
e8:89:f1:9c:18:b9:87:a4:47:36:8c:d1:bc:87:20:fc:1e:2e:
4f:c3:6f:5a:5d:39:22:ce:2d:f5:8a:30:86:51:b2:da:c5:46:
8e:85:7e:2f:70:ca:69:c7:21:c6:4b:89:e4:85:ab:c1:1b:f4:
60:b9:81:32:62:6f:a2:02:7b:5b:0d:65:e1:89:be:65:70:bf:
76:7e:ee:e3:30:ee:b1:c8:df:fc:e0:ca:a4:f3:43:cb:a6:8e:
22:0f:32:7c:77:11:37:0f:d1:a3:b8:3a:5d:55:e5:69:72:23:
da:4f:d6:b0:47:35:0b:9b:fc:8c:d2:08:79:e6:d1:f9:b0:e7:
5f:35:e4:55:df:5c:02:dc:49:be:d0:f4:9a:c7:79:f4:b0:18:
ca:5a:71:f4:d3:58:91:81:22:17:a0:38:4f:16:b4:73:e7:56:
cb:76:db:c8:2a:40:cd:8d:58:35:65:ac:ef:71:82:48:d4:e1:
7c:13:c8:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bhMzSzMRcUcTxAXyF1MOIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZGNiMDJiNjFlM2ExNWVhYzM3M2I5OTJlMGUxYTY1NDVm
NjFlNTIwHhcNMjYwNjA2MDYwMDMyWhcNMjYwNjA3MDYwMDMyWjAzMTEwLwYDVQQD
Eyg1NTExOWQzZTA5ZDc5MzQ4MzViYzQ4MmMzNjM5YjRlNWNmNjc3OGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkoPcCFwBsCF+RYHuiv5Ivn7AT3t
y7UEN4EJ9+RqZjqTtT4FAPQVWWyRbf68eWp1B/pN+BRB6X5rW//H/V9RUv/6Qh/I
HSvKBx+N+vm0bopD45Xf1cpFbu4LjWHit8X0koQZj/KMtpUaTQCopKUVA7PtHBY4
KeT5ytcfIixqHkT3LIEmlrt1dTFvdHnlsyIjVJl9mIsI/iUOXDQa1+xn0N2I3hTa
UVxHKDON+yq4EXCmKJXCbOYfYUs4d52EZsLMcDkzDF54DrVaQrqizgJndl/JtgOx
25lIsX3iOQ225anW/5vxef/0hAFvPFI5wlYIc5o8SMT0sxElazCuDdC1QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFURnT4J15NINbxILDY5tOXPZ3jvMB8GA1UdIwQY
MBaAFNzcsCth46FerDc7mS4OGmVF9h5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAt
NjY3NTg0Nzk4NjNlLzEvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAtNjY3NTg0Nzk4NjNl
LzEvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrAIvvdX
PjuIlhIQpXujQ0ACZfnNO4RU4ivtEl2VRRS1+x3rAfQayDlP4IBPzfoWZCoAawLF
MM8IaYAubCrOvK0C6/tBSnEj6InxnBi5h6RHNozRvIcg/B4uT8NvWl05Is4t9Yow
hlGy2sVGjoV+L3DKacchxkuJ5IWrwRv0YLmBMmJvogJ7Ww1l4Ym+ZXC/dn7u4zDu
scjf/ODKpPNDy6aOIg8yfHcRNw/Ro7g6XVXlaXIj2k/WsEc1C5v8jNIIeebR+bDn
XzXkVd9cAtxJvtD0msd59LAYylpx9NNYkYEiF6A4Txa0c+dWy3bbyCpAzY1YNWWs
73GCSNThfBPIXA==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:45:04 2026 by rpki-client