Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
File: 3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json)
Hash identifier: DIklZzbLVlJ4jBfgQRKAbpbxwSvtkaUuRGcD60UMeL0=
Subject key identifier: 4C:96:5C:C5:66:85:36:52:80:5F:CF:ED:C3:F3:6A:E6:5A:F1:FC:4E
Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0
Certificate serial: 019F189E62C702A0B74159BF41DD11302973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
Manifest number: 0822
Signing time: Tue 30 Jun 2026 13:01:00 +0000
Manifest this update: Tue 30 Jun 2026 13:01:00 +0000
Manifest next update: Wed 01 Jul 2026 13:01:00 +0000
Files and hashes: 1: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: ycWDHwM8DQ3x4a4frrLtz+7feTn9Rc5/UZJVvqiJXSM=)
2: QQZsuXSlDaVTpljlvdfkJMjaEpY.roa (hash: DV/Zqnvfr5xdAPG252VQe4FEQYmxMLuCBh//Xq6odPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:62:c7:02:a0:b7:41:59:bf:41:dd:11:30:29:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0
Validity
Not Before: Jun 30 13:01:00 2026 GMT
Not After : Jul 1 13:01:00 2026 GMT
Subject: CN=4c965cc566853652805fcfedc3f36ae65af1fc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:ae:ea:77:b7:17:0a:0e:ec:ae:04:2b:41:
a0:0b:b0:f1:31:e8:f4:76:45:e6:b6:b9:0c:18:3e:
6f:e7:8d:21:55:b3:77:fd:a8:40:8c:b7:23:50:14:
30:87:fd:00:7b:ba:6c:8f:21:9e:9e:f5:63:d7:86:
c7:7c:2a:69:06:07:83:a2:8e:25:38:8a:5a:76:15:
7a:7a:21:ab:03:06:ca:b7:e2:c5:f1:d6:66:8d:46:
c4:36:ab:10:f9:cd:83:81:a6:51:e9:bf:fb:80:23:
c4:c5:68:98:6d:a5:d2:71:f6:12:56:9e:b5:f1:13:
07:31:04:1b:a1:48:d7:47:93:0f:6b:b6:0e:1f:a0:
64:3d:20:f5:2d:ba:08:a0:0f:f6:c9:5a:13:30:12:
9e:28:44:e4:5c:1f:90:27:82:c2:51:ee:55:08:4c:
21:db:a7:c2:14:d4:fc:0d:db:29:b9:10:2f:22:a6:
39:cc:48:b9:2b:89:d9:e4:35:6a:b9:9f:80:db:a6:
0b:19:42:8d:6f:29:71:18:1e:dd:e9:3e:93:36:a2:
ed:59:b4:8e:b7:a0:a3:fd:87:13:1c:be:3b:55:80:
50:0a:c7:a4:af:86:ef:af:f2:6c:60:ca:79:be:32:
1d:65:0a:e7:d2:88:fc:3c:55:d8:eb:65:40:3a:5e:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:96:5C:C5:66:85:36:52:80:5F:CF:ED:C3:F3:6A:E6:5A:F1:FC:4E
X509v3 Authority Key Identifier:
keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:52:ac:4f:92:1b:4d:c5:22:81:ac:44:3e:30:09:a1:1c:3d:
10:13:83:f5:47:cb:39:30:e5:ea:28:3c:6b:ee:5e:46:27:1a:
8c:c4:6a:8a:a7:cf:7d:4e:a0:6e:c1:ca:34:6f:da:c1:d3:86:
d2:6c:4e:fb:c9:73:c2:6c:71:ef:24:6d:42:69:32:56:84:72:
51:4c:7e:32:92:99:83:50:46:b4:6e:4b:0c:05:ca:5f:cd:09:
cb:ed:fe:c9:58:9f:9d:12:ca:c3:51:e0:76:34:b7:79:2a:cd:
95:a2:ba:a7:ff:ab:f0:8f:57:b0:04:b6:e7:14:75:d5:72:fa:
7e:0a:fa:12:36:dc:40:98:df:52:a8:50:ca:28:bd:d7:8a:7d:
d2:0d:30:03:11:e2:7a:cd:a2:53:f2:9d:3a:8c:19:fd:f5:7a:
3b:7d:d5:9a:a9:4f:bc:6a:e4:dd:6e:e5:25:28:cb:3f:0b:ec:
b7:b0:a8:63:fc:33:19:43:6d:63:de:e2:a8:2f:0b:ce:88:b6:
1f:10:c2:9e:70:5c:fc:1e:e6:df:6a:a9:ef:cf:89:bc:ee:cf:
70:2d:f5:6e:68:38:d2:5b:db:ac:97:51:a8:74:a6:99:04:9c:
d1:35:dc:62:75:62:e5:fb:99:05:ae:d1:bf:7d:9e:7e:6d:40:
87:55:77:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:45 2026 by rpki-client