Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: 0D72KUzqAcoME2R84MjFo+tqVfgd59J/HtFw718cpfE=
Subject key identifier: 44:73:97:8C:C9:AF:89:01:37:95:DA:0E:DA:08:06:BA:96:BE:CF:A0
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 019D3A54597E1F1EAF7416A0C72160574FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 0661
Signing time: Sun 29 Mar 2026 16:01:39 +0000
Manifest this update: Sun 29 Mar 2026 16:01:39 +0000
Manifest next update: Mon 30 Mar 2026 16:01:39 +0000
Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: B3Bu9hJ8IY+AsMKwL0we9JwgTrCikoC+rUZgXWxI1Vs=)
2: SmafHrnaMWuly5trV1gC3gRhXUk.roa (hash: 48PkkvQ09WAg7AqwCjJuzSMQ1WYgWgSM17QO2PTsJN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:59:7e:1f:1e:af:74:16:a0:c7:21:60:57:4f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Mar 29 16:01:39 2026 GMT
Not After : Mar 30 16:01:39 2026 GMT
Subject: CN=4473978cc9af89013795da0eda0806ba96becfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:53:8d:40:f9:f2:41:22:35:91:76:60:91:
99:c7:7e:64:75:26:25:26:21:24:da:d4:9b:eb:81:
50:d3:43:4e:6b:5b:db:e7:58:98:d1:f2:04:8c:0f:
a5:14:bd:bf:40:0f:c9:0c:37:8d:df:d6:96:8e:05:
52:7f:23:47:3c:21:af:94:59:21:e9:ba:54:30:3a:
97:74:06:e4:f8:07:d4:78:94:12:9e:3f:41:e5:72:
72:36:9c:bd:9d:8e:a2:11:39:c1:ff:59:bf:e7:c0:
82:f4:e8:02:92:17:76:97:30:97:ec:68:a1:44:af:
60:b1:c9:6c:36:aa:42:5e:d5:0a:18:d2:05:79:a3:
df:73:f9:97:b4:29:16:c4:5c:b6:9e:69:c3:c9:64:
e9:2f:af:52:42:e1:6f:ce:31:3c:91:58:2d:38:1f:
e0:dd:92:66:40:92:1c:7b:d7:f5:4b:72:78:bc:54:
ad:81:6b:08:b8:6e:ea:a2:4d:ba:10:37:2a:00:6a:
10:df:42:62:35:2f:f9:97:99:a2:13:dc:1d:da:b7:
63:1c:05:8b:21:ed:fd:8b:67:63:41:36:ae:be:bc:
11:6f:b1:08:5a:d7:4a:d5:09:da:53:e3:c6:7a:17:
2d:8e:cd:16:05:a1:f3:47:fa:33:ed:e8:ba:d2:0a:
d1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:73:97:8C:C9:AF:89:01:37:95:DA:0E:DA:08:06:BA:96:BE:CF:A0
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c1:ca:16:5b:68:a3:58:e2:be:fc:4a:89:d8:06:56:3a:28:
81:71:b6:3e:2d:e0:53:19:31:8c:f9:85:91:a4:36:31:b4:40:
27:f4:55:e1:30:53:41:5f:cc:cd:dc:b9:bb:21:57:f8:28:d1:
8f:85:6e:04:d6:02:d8:58:4c:05:10:e9:c7:74:d7:c2:73:05:
c3:74:8f:14:72:54:bf:8d:5b:26:f3:d9:f5:7d:7a:80:e4:92:
95:cc:db:46:0b:26:95:8a:9d:0a:21:f3:09:c2:c1:2b:43:4c:
f3:b4:78:e5:bf:18:76:24:3b:33:b2:fc:6a:e4:de:7b:d3:fe:
a8:eb:1b:fe:ab:c3:ae:2e:67:c9:bc:1b:36:70:7f:66:5c:02:
6e:42:e1:66:d2:f7:09:c0:0a:7a:25:3b:e9:07:83:b4:8f:71:
b4:76:bc:ab:ed:32:2a:c0:20:49:a7:da:e9:05:f2:f5:c2:4f:
d7:36:f8:ca:49:5e:51:05:27:e9:9c:6a:f8:4b:ed:c9:85:dd:
0a:eb:90:15:36:2d:11:ed:fc:36:e9:05:37:e4:44:fc:1a:1e:
17:58:21:4f:a3:d0:95:b8:58:ea:6b:5c:66:f4:16:ea:b7:51:
9d:39:a5:cd:72:8d:a1:1e:cd:ff:dd:25:ca:5c:42:e1:1b:87:
1d:a2:2b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:50:52 2026 by rpki-client