Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
File: 3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json)
Hash identifier: Yl7yZkDqMRYINtVX+4ZrbBGrUuJSLBxF3rXlAAsCBfk=
Subject key identifier: ED:F0:94:FA:84:F8:97:4C:BC:1C:1F:01:DF:3A:B3:34:1E:E2:DC:44
Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0
Certificate serial: 019E30E007529BDB5A025798ADE7A968A6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
Manifest number: 07AA
Signing time: Sat 16 May 2026 13:00:48 +0000
Manifest this update: Sat 16 May 2026 13:00:48 +0000
Manifest next update: Sun 17 May 2026 13:00:48 +0000
Files and hashes: 1: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: IGRlvAyjGp0oPZxF2EcSny6fSA84/JDrCUf9dQcu0tg=)
2: QQZsuXSlDaVTpljlvdfkJMjaEpY.roa (hash: DV/Zqnvfr5xdAPG252VQe4FEQYmxMLuCBh//Xq6odPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:07:52:9b:db:5a:02:57:98:ad:e7:a9:68:a6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0
Validity
Not Before: May 16 13:00:48 2026 GMT
Not After : May 17 13:00:48 2026 GMT
Subject: CN=edf094fa84f8974cbc1c1f01df3ab3341ee2dc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:1f:4e:e6:cb:ae:74:eb:d4:be:4a:7d:af:
0c:7a:09:8a:5d:ab:0f:3d:ab:c1:39:3d:01:32:71:
d9:7b:de:4e:aa:da:3e:ab:87:ea:04:f9:23:3e:81:
ad:8d:5d:4c:74:fa:58:f3:4b:21:88:9f:9b:86:53:
52:69:aa:32:b6:ed:eb:22:c6:e6:a4:6f:bd:b1:84:
42:3c:83:fe:d1:49:be:6d:64:7f:93:bc:93:4c:85:
d3:65:90:d1:fa:1d:e1:89:24:d4:3e:16:83:ab:c6:
88:ec:65:dd:93:4f:57:06:a0:99:a9:9d:27:dd:51:
3e:f7:54:e2:af:23:d2:07:b7:7e:b0:f4:5c:fc:66:
76:1b:0f:01:92:9a:50:16:93:bc:c4:f8:14:79:0c:
8c:a7:4c:56:df:04:d6:69:5b:cd:36:5d:53:32:86:
17:54:1c:ce:6d:7f:61:7b:1f:e2:7d:6c:2a:21:6a:
ec:fd:25:8d:1d:fc:d0:eb:dd:b8:64:02:6c:76:b7:
52:49:fe:55:c4:a9:4f:43:c3:ed:b2:7c:cf:48:4f:
c0:ca:1c:c6:cb:1d:99:85:0b:68:d2:89:7c:e6:55:
0e:69:bb:47:df:8c:49:cb:fb:fc:d6:93:5a:6f:ee:
b5:ed:ad:a0:0a:44:12:4e:4a:fa:f3:e9:81:33:54:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F0:94:FA:84:F8:97:4C:BC:1C:1F:01:DF:3A:B3:34:1E:E2:DC:44
X509v3 Authority Key Identifier:
keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b9:a6:1a:36:f8:08:20:b5:65:95:da:f1:c1:bf:67:96:eb:
38:d4:12:26:df:83:76:05:c8:09:10:98:d0:1d:5e:d5:46:84:
05:37:7e:41:d4:4d:5c:ce:f4:df:b3:bc:83:cf:a0:8a:9d:50:
20:0f:71:73:f7:22:59:e6:73:3d:8b:c6:f2:1d:7e:63:2e:de:
91:53:f5:a7:77:a6:91:4e:52:f5:ac:03:2a:b8:2d:d8:da:7d:
40:1d:0e:4e:f2:c5:07:63:eb:09:87:7f:03:2b:1f:c3:d3:7c:
18:02:be:f1:00:1c:6a:5f:22:05:7d:fd:cf:c7:70:43:34:90:
dc:71:9f:3a:38:53:ee:b8:d0:7c:a2:3b:89:24:25:20:f4:e2:
08:c3:d0:09:50:f4:89:db:a0:f6:0a:32:29:d0:50:40:06:3d:
4a:fa:90:45:7b:86:65:67:16:59:60:a9:5f:d6:00:9b:a6:f2:
21:ad:ea:48:0c:f4:dd:7f:f3:03:19:af:9d:27:1b:e6:9e:25:
39:c1:c8:98:cf:72:4c:cb:d7:fc:8d:3a:fd:8e:4e:c4:42:55:
af:38:6f:c3:9d:32:78:c5:b4:c5:37:a1:99:2a:89:41:1c:2d:
4a:09:9e:02:2e:33:b4:9b:9a:a6:80:d2:ae:9f:da:eb:e5:f0:
f5:48:bb:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4AdSm9taAleYreepaKbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZDI0NmUxODMwNTY3YWIxMTUyMzFkYjc3NWYyODc5ZDk5
YWYwYTAwHhcNMjYwNTE2MTMwMDQ4WhcNMjYwNTE3MTMwMDQ4WjAzMTEwLwYDVQQD
EyhlZGYwOTRmYTg0Zjg5NzRjYmMxYzFmMDFkZjNhYjMzNDFlZTJkYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2wfTubLrnTr1L5Kfa8MegmKXasP
PavBOT0BMnHZe95Oqto+q4fqBPkjPoGtjV1MdPpY80shiJ+bhlNSaaoytu3rIsbm
pG+9sYRCPIP+0Um+bWR/k7yTTIXTZZDR+h3hiSTUPhaDq8aI7GXdk09XBqCZqZ0n
3VE+91TiryPSB7d+sPRc/GZ2Gw8BkppQFpO8xPgUeQyMp0xW3wTWaVvNNl1TMoYX
VBzObX9hex/ifWwqIWrs/SWNHfzQ6924ZAJsdrdSSf5VxKlPQ8PtsnzPSE/AyhzG
yx2ZhQto0ol85lUOabtH34xJy/v81pNab+617a2gCkQSTkr68+mBM1RzewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3wlPqE+JdMvBwfAd86szQe4txEMB8GA1UdIwQY
MBaAFNzSRuGDBWerEVIx23dfKHnZmvCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lMTE2YjYtM2M2ZC00ODVmLWFmY2Qt
YTQxZTYyMGJhM2ViLzEvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lMTE2YjYtM2M2ZC00ODVmLWFmY2QtYTQxZTYyMGJhM2Vi
LzEvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrmmGjb4
CCC1ZZXa8cG/Z5brONQSJt+DdgXICRCY0B1e1UaEBTd+QdRNXM7037O8g8+gip1Q
IA9xc/ciWeZzPYvG8h1+Yy7ekVP1p3emkU5S9awDKrgt2Np9QB0OTvLFB2PrCYd/
Aysfw9N8GAK+8QAcal8iBX39z8dwQzSQ3HGfOjhT7rjQfKI7iSQlIPTiCMPQCVD0
idug9goyKdBQQAY9SvqQRXuGZWcWWWCpX9YAm6byIa3qSAz03X/zAxmvnScb5p4l
OcHImM9yTMvX/I06/Y5OxEJVrzhvw50yeMW0xTehmSqJQRwtSgmeAi4ztJuapoDS
rp/a6+Xw9Ui7SA==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:52 2026 by rpki-client