Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: LyxpQIJ56Nub5nxP+0TB0L8ero2tAOzUzEJpBfk5C78=
Subject key identifier: A1:22:02:0C:FB:6A:58:0D:C4:F7:BF:5B:21:96:FE:B8:00:75:8D:9D
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 019F872020D848285FE2F3912447669D21CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 19C3
Signing time: Wed 22 Jul 2026 00:00:57 +0000
Manifest this update: Wed 22 Jul 2026 00:00:57 +0000
Manifest next update: Thu 23 Jul 2026 00:00:57 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: AmN2JJ7yd7R0laYPP4BqnFTXXxNLT+dzYaQm2w0lvMU=)
2: 9abfo1dfe2i5VEGFeOCi-Yu11DQ.roa (hash: 4raYX1rjDm7gMpaOcfPnUtC02bJsDBACsNYhYrbdmZM=)
3: gxBj4mi9DTD-XtJhh92wnnFfI0c.roa (hash: aSdTaRESDnJDn6dr8aVPGxKTLYVHaS0mrAqCtrDcgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:20:20:d8:48:28:5f:e2:f3:91:24:47:66:9d:21:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Jul 22 00:00:57 2026 GMT
Not After : Jul 23 00:00:57 2026 GMT
Subject: CN=a122020cfb6a580dc4f7bf5b2196feb800758d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f7:4a:a0:f6:05:91:54:4e:01:1b:05:ff:c0:
c8:77:93:5e:e6:9c:17:8a:cb:07:9d:34:59:08:63:
3c:de:27:18:b7:34:a1:34:82:72:6b:61:6a:a2:82:
9b:82:66:72:a6:92:43:e4:93:13:cf:6b:3e:95:90:
8c:d5:d5:64:6b:d9:dc:f6:a9:59:f5:6d:15:60:b5:
44:7b:b4:e8:ce:c0:27:09:0d:a8:1b:f3:93:34:3f:
d6:7e:c6:be:7d:1e:94:b3:30:c3:4b:be:7e:9d:4b:
9c:0e:77:dd:be:88:91:5e:4b:da:59:0c:cb:95:c8:
eb:ef:ba:46:b8:32:25:2d:ac:d4:7e:24:72:f0:e0:
9a:81:c5:f5:54:c8:26:90:5f:c5:d3:be:20:c4:fb:
b3:8d:f0:b6:80:38:5e:f2:80:be:c2:62:5e:6c:d1:
60:40:50:eb:a0:47:25:41:61:66:a7:2b:b9:51:ce:
28:04:c8:a9:a4:1c:b1:fd:b3:fb:d1:28:42:cd:4e:
11:68:32:58:25:ff:a4:7c:21:27:56:0b:54:af:68:
24:f9:df:86:42:b8:25:3b:2b:bb:45:35:f1:5c:52:
da:55:4f:a7:13:d2:d2:fc:a9:49:c4:43:70:76:7d:
f9:4b:de:6e:49:0a:56:49:f0:48:07:73:6a:1c:fe:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:22:02:0C:FB:6A:58:0D:C4:F7:BF:5B:21:96:FE:B8:00:75:8D:9D
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:b1:22:c3:4f:e7:63:15:9c:3a:6e:b1:11:18:fd:f3:fb:b8:
f8:fa:82:e3:fc:b2:49:ae:80:71:fc:ff:41:27:74:70:34:f7:
08:a2:61:a6:3e:9d:43:a9:9a:ba:6f:56:f8:9f:24:60:f8:31:
a7:31:a9:16:bc:1f:e2:d0:8b:74:14:ed:85:6d:90:b8:27:4b:
30:7a:89:cb:55:ba:6e:a4:fa:d6:d7:05:c4:eb:f2:82:a9:00:
2d:a1:46:d6:15:2b:5a:14:93:89:62:23:b8:db:f3:27:fb:4c:
1f:fa:8c:8b:bf:ce:74:6a:c8:3a:ca:67:f3:9e:ca:87:67:d5:
10:4c:04:6f:46:fd:02:f4:b4:ab:51:aa:84:18:9e:d4:2d:2d:
b2:ef:e8:e9:c1:f6:76:62:95:4e:73:f5:52:74:5a:23:79:2e:
d9:6f:96:31:58:5c:dc:94:71:a5:5e:1c:7c:7d:31:a8:20:df:
84:9d:30:c1:b8:31:7f:7a:5d:4f:5b:0b:8b:f0:6c:29:f2:1a:
0a:d6:9d:c4:42:be:1c:f2:57:65:3e:72:0a:e7:aa:3c:5e:33:
84:e0:02:be:e2:ae:b9:d6:d4:0f:82:61:f1:0b:b3:99:bb:7f:
84:91:8c:74:ee:52:c2:35:2b:3d:bd:08:3a:67:e3:04:3c:71:
95:b9:28:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:04:16 2026 by rpki-client