Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: wbJZGyrhtmWs95l1ExK0OawnCDBOHzXFH19cVNyhVls=
Subject key identifier: 03:74:CA:6C:E7:B0:26:E1:EA:E0:61:32:5C:CF:C8:AA:54:AA:38:E4
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 019EBE7F5E0DF932279E9DCA07981962A19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 072A
Signing time: Sat 13 Jun 2026 01:01:18 +0000
Manifest this update: Sat 13 Jun 2026 01:01:18 +0000
Manifest next update: Sun 14 Jun 2026 01:01:18 +0000
Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: nFfgaZFSg0FrA9IZOocg7FjhuHo5eJbUSTQ6Ymg+ny8=)
2: SmafHrnaMWuly5trV1gC3gRhXUk.roa (hash: 48PkkvQ09WAg7AqwCjJuzSMQ1WYgWgSM17QO2PTsJN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:5e:0d:f9:32:27:9e:9d:ca:07:98:19:62:a1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Jun 13 01:01:18 2026 GMT
Not After : Jun 14 01:01:18 2026 GMT
Subject: CN=0374ca6ce7b026e1eae061325ccfc8aa54aa38e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:89:78:64:ee:ae:8e:16:65:bb:88:78:be:
da:c9:f4:1e:fd:21:b3:dd:f9:75:88:3e:94:dc:05:
72:39:b2:1d:ed:13:55:ac:75:7d:94:df:af:a5:64:
77:b7:5a:9e:ee:60:1f:77:bf:50:41:a8:98:1e:4d:
cd:19:57:ba:80:49:2a:78:23:4a:7e:ce:ce:41:23:
9f:a0:0f:52:66:2a:42:6c:df:65:39:cb:25:59:d9:
46:61:0d:ba:5f:4c:33:2f:1b:8b:24:71:5a:86:0d:
44:c3:72:f4:9b:7e:73:dd:a5:cf:2e:b5:03:3d:c2:
cf:fe:8b:70:61:d7:44:e9:e9:1d:29:2a:9b:0f:68:
90:ea:bb:c9:69:02:29:7d:10:32:73:48:70:59:b4:
de:a4:07:60:82:ac:18:69:4e:4b:48:50:ab:c2:68:
a4:77:1d:d5:fc:20:42:7c:28:b5:74:50:24:f1:fd:
e4:ce:9e:12:01:17:9c:69:85:5a:1b:d7:05:28:e0:
bc:dc:c1:8d:80:c5:99:49:d5:7e:dc:28:ca:c3:94:
70:41:a7:2a:aa:b5:c5:58:c4:6b:6f:ae:89:d2:7e:
fc:67:38:d2:3a:ce:a8:72:c2:26:ce:b2:d8:e3:05:
a9:34:fd:30:bc:6d:b6:7e:88:60:3c:1e:58:35:16:
9e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:74:CA:6C:E7:B0:26:E1:EA:E0:61:32:5C:CF:C8:AA:54:AA:38:E4
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6f:a1:63:78:62:04:0a:9a:e2:a3:db:15:e7:94:6f:b3:50:
f6:86:1b:dd:71:72:a8:53:15:d5:f5:41:e9:0b:de:8f:f9:43:
47:c9:17:c4:c1:c7:be:76:23:ae:72:4e:ab:e0:ac:e7:df:d0:
b0:7b:24:62:33:69:f9:fb:55:3b:e9:40:44:07:a9:80:66:a0:
f8:f2:65:cb:6b:3a:5d:70:e6:3c:f1:11:4c:cf:35:be:ed:2d:
b1:04:a7:65:f9:dd:f8:86:a4:fc:f9:f3:69:a7:85:1e:db:98:
a8:e7:ca:4c:aa:a7:49:37:d8:36:60:4f:98:8b:9a:7c:b8:06:
b5:2b:1b:f3:c2:11:9a:14:a2:f6:85:67:80:81:dd:2b:2f:cb:
3d:ce:cf:01:9d:8d:d4:23:61:02:0a:57:69:77:23:35:22:ed:
4c:ba:d7:c7:39:4d:e9:04:16:0f:c6:35:88:50:c1:14:4b:44:
e4:51:b6:66:e8:3a:bd:15:19:7e:a3:e7:f1:91:14:64:6b:cb:
42:95:75:b0:43:7a:c3:fa:59:2a:c2:4a:6d:0a:39:5c:dd:48:
7d:02:66:66:0d:89:2b:23:52:db:7f:77:16:ff:ed:fb:1c:d3:
d3:2c:5a:b6:74:e4:fa:05:e6:85:e5:88:c5:de:ca:49:96:c8:
9e:a2:e9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:02:16 2026 by rpki-client