Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: ISB3CTyMYr37UyxwauYNR+58nEbTHaRa2P/0pS2gdNY=
Subject key identifier: 35:48:A5:09:4D:40:A6:7D:45:61:2A:C8:04:74:0F:B1:3B:C6:A0:AC
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 019D9AAC0A5E36CCA91D4F8A553B2FC27D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 09:00:59 +0000
Manifest this update: Fri 17 Apr 2026 09:00:59 +0000
Manifest next update: Sat 18 Apr 2026 09:00:59 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: aEZcVn7T2bdLwxkr2vMTwgs9J9YWSseSXwPaogjjnhY=)
2: 9abfo1dfe2i5VEGFeOCi-Yu11DQ.roa (hash: 4raYX1rjDm7gMpaOcfPnUtC02bJsDBACsNYhYrbdmZM=)
3: gxBj4mi9DTD-XtJhh92wnnFfI0c.roa (hash: aSdTaRESDnJDn6dr8aVPGxKTLYVHaS0mrAqCtrDcgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:0a:5e:36:cc:a9:1d:4f:8a:55:3b:2f:c2:7d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Apr 17 09:00:59 2026 GMT
Not After : Apr 18 09:00:59 2026 GMT
Subject: CN=3548a5094d40a67d45612ac804740fb13bc6a0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:9b:87:4b:53:f0:e0:02:e5:19:6a:07:64:
b7:ad:18:fb:af:28:27:c6:b3:d8:c4:62:02:95:60:
e5:8b:5f:6e:34:98:10:2d:d2:00:bf:24:f9:73:3d:
9b:ad:af:28:95:36:fb:02:14:39:65:e2:ef:72:ed:
67:c0:bd:e9:65:f4:c8:46:07:5a:d9:06:52:58:de:
1d:a1:a2:77:89:b0:1b:e2:a1:0a:3e:05:01:3b:d1:
62:57:29:6e:5b:26:4c:9e:76:88:91:dd:ef:78:8f:
64:88:ea:e4:4e:2c:60:33:b0:95:aa:0f:0a:da:27:
e8:20:0d:0d:df:db:c4:33:2e:29:fa:cf:35:68:eb:
f3:74:24:cf:82:11:95:80:fc:9d:1d:85:b6:d2:35:
8f:bc:c3:85:95:91:af:e4:26:97:84:ec:bc:91:96:
29:91:bb:3b:e2:15:40:1f:50:d8:1a:86:6a:e1:72:
90:75:75:da:78:84:1f:47:22:f8:7c:f1:8c:0b:a9:
33:3d:ad:55:e9:34:6c:1f:60:6c:f5:fb:a1:cd:c2:
4e:c3:5f:ca:65:e9:d9:9d:11:d7:22:bf:15:c9:be:
5d:2e:9a:36:67:11:0f:de:26:94:0f:85:c7:8e:17:
65:17:5f:d5:7d:be:b0:4f:f7:ee:ee:eb:d9:29:da:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:48:A5:09:4D:40:A6:7D:45:61:2A:C8:04:74:0F:B1:3B:C6:A0:AC
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3e:63:2f:5a:18:8e:66:22:78:6a:93:0b:fd:7d:52:e8:67:
23:2f:1d:0f:c7:95:33:f6:4d:e3:d5:c9:ed:f5:8c:d3:55:02:
b3:49:ae:ca:82:f2:c1:d5:75:80:df:39:f9:d8:a0:bf:ab:ed:
79:e4:8a:b1:c8:ad:30:f5:a9:d6:86:c3:50:30:c5:fc:cd:17:
db:77:1c:2c:f6:7c:ef:5e:fc:48:c3:bd:bc:ee:69:f7:3a:3a:
ee:e0:05:f7:dc:6e:08:ee:f6:3c:d8:d4:aa:ca:9c:e6:25:13:
73:2d:6b:e6:fd:80:f1:8a:6e:d9:57:1f:f3:53:a3:52:67:63:
75:58:01:7e:9d:20:5b:62:a8:70:3d:65:b2:f0:00:98:c8:9a:
18:4e:c2:01:8b:2b:ce:76:c2:87:f4:dd:42:63:52:38:4c:67:
02:18:96:c9:6d:69:74:1f:40:4d:7c:7c:96:1c:45:f5:c9:72:
4e:4d:df:1b:9a:d2:b4:eb:6c:02:05:70:37:e0:c2:9c:81:a2:
42:58:12:86:97:fa:7d:95:72:f4:36:94:73:91:d7:76:4a:75:
2b:9e:2c:7c:ce:db:19:d8:37:7a:2f:91:80:1a:40:bd:02:0e:
92:58:07:95:74:98:27:72:29:13:f4:4e:d1:56:bc:75:d0:38:
60:de:ef:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:49 2026 by rpki-client