Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: HGZjcHRfHJJqzadhvmIB/8dRcChcc2aK9Ox5fHHrmUQ=
Subject key identifier: 10:D1:25:76:64:D9:C9:79:55:B3:1E:18:7E:2D:16:E4:23:9C:C7:F2
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 01A0DEE10D6B129A8275DD12F57254175545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 18:01:25 +0000
Manifest this update: Sat 26 Sep 2026 18:01:25 +0000
Manifest next update: Sun 27 Sep 2026 18:01:25 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: HiUILN7Echjq9O6c2LjH/YghlsEA3DazCFI9+FYSiFc=)
2: 9abfo1dfe2i5VEGFeOCi-Yu11DQ.roa (hash: 4raYX1rjDm7gMpaOcfPnUtC02bJsDBACsNYhYrbdmZM=)
3: gxBj4mi9DTD-XtJhh92wnnFfI0c.roa (hash: aSdTaRESDnJDn6dr8aVPGxKTLYVHaS0mrAqCtrDcgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e1:0d:6b:12:9a:82:75:dd:12:f5:72:54:17:55:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Sep 26 18:01:25 2026 GMT
Not After : Sep 27 18:01:25 2026 GMT
Subject: CN=10d1257664d9c97955b31e187e2d16e4239cc7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:62:3f:59:c4:d2:69:29:78:1b:e7:74:ce:
2f:42:70:18:47:a5:7f:10:f7:d4:59:03:07:81:91:
3c:24:93:53:05:99:d0:bd:85:95:ed:c3:16:b3:b4:
fd:a9:ae:be:89:39:e3:87:05:80:4a:48:d2:a7:e7:
20:61:77:1e:12:71:40:fa:b8:c9:82:aa:cc:0f:73:
29:64:86:64:96:7d:f1:20:05:76:ca:e5:40:b9:f7:
54:e0:9f:3c:4e:49:01:1a:8d:42:eb:25:d0:f7:8e:
c5:5b:07:28:84:31:3e:19:0d:80:11:a3:25:84:6c:
0e:c5:54:07:9c:0a:1e:68:a2:56:71:5e:0b:5f:09:
83:3f:94:9b:cd:62:41:ba:ef:b1:79:b2:cb:f0:ec:
84:99:4f:08:e3:93:dc:2a:05:99:72:b4:22:c1:46:
6d:c9:90:b8:9e:cb:54:03:88:43:e7:30:d6:0b:4f:
34:dd:58:6f:95:0d:0f:21:fc:39:c4:a5:fd:ff:f9:
2e:37:28:59:cc:31:b2:a2:01:dc:03:ee:ac:e7:3c:
75:bd:c4:5f:c3:1b:6a:4c:d4:4d:3c:15:1f:18:ac:
f5:13:96:60:14:84:33:48:55:d7:a1:28:cb:02:ba:
19:88:9f:26:43:89:47:05:ba:ae:38:64:d1:49:67:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D1:25:76:64:D9:C9:79:55:B3:1E:18:7E:2D:16:E4:23:9C:C7:F2
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f6:e6:6d:84:fe:43:c8:e5:b9:c9:78:c9:1a:c7:f1:93:df:
8e:81:18:b3:f6:75:5c:80:fd:61:21:ba:0a:d7:36:0f:98:2f:
71:77:4f:ae:c6:af:57:a3:ba:e6:2b:a4:21:a0:35:b7:ab:2c:
ac:50:6b:b6:5a:8c:42:bd:16:9e:5b:df:2a:f4:37:da:89:f0:
4f:fa:f3:fb:19:d4:bc:1a:96:0d:f4:ac:57:ff:da:85:4a:47:
a0:48:30:79:e7:7d:bc:82:d2:31:70:d0:74:ab:c6:77:fb:8a:
e0:7f:b9:1f:0f:b4:2b:44:89:55:fa:38:6c:2e:ff:70:19:7b:
29:59:e4:1c:d5:7a:6a:e6:29:44:d7:64:ed:c9:64:77:ec:5a:
00:c6:69:1e:f5:78:97:a7:dd:78:59:a4:49:33:98:ee:6e:ee:
73:7b:0a:26:70:c0:bd:72:4a:1a:7f:fe:03:eb:6f:a7:57:1e:
5a:e4:5e:8b:56:18:7f:c5:82:6e:3d:9b:86:ad:a1:33:e3:ef:
6b:ce:2e:7c:26:aa:45:b5:e2:9f:a4:c0:eb:5b:8f:d6:f3:a7:
70:96:f7:ea:70:4c:4a:4e:73:6e:2a:3b:f1:69:ce:27:7d:33:
14:fc:c0:8c:f0:cc:e1:44:d2:b7:f6:0a:37:30:30:93:b6:c0:
7f:32:c6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:19:14 2026 by rpki-client