Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: dwPSBQCBHtS/4yBrK1EuGXbt7PAFa3DnLXy3D+KMzok=
Subject key identifier: C4:08:D2:9E:92:3A:B3:EC:AA:1A:D9:54:4A:CD:7C:77:0F:BC:65:44
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 019DA48AB6FDBC9FB79E8AB0558A252B061B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 0698
Signing time: Sun 19 Apr 2026 07:00:47 +0000
Manifest this update: Sun 19 Apr 2026 07:00:47 +0000
Manifest next update: Mon 20 Apr 2026 07:00:47 +0000
Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: B2wG5t/Z+rWtUq/PysoiMltjB7OwIkpnCvxdMxNAEuQ=)
2: SmafHrnaMWuly5trV1gC3gRhXUk.roa (hash: 48PkkvQ09WAg7AqwCjJuzSMQ1WYgWgSM17QO2PTsJN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:b6:fd:bc:9f:b7:9e:8a:b0:55:8a:25:2b:06:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Apr 19 07:00:47 2026 GMT
Not After : Apr 20 07:00:47 2026 GMT
Subject: CN=c408d29e923ab3ecaa1ad9544acd7c770fbc6544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:34:cb:50:cf:f8:fc:91:b7:40:49:10:cc:
5b:2d:1c:a6:bc:11:b2:ef:d6:48:cc:6e:62:8d:6f:
bc:27:e7:4e:af:2b:b6:c7:33:d0:a8:87:7d:a2:65:
3c:10:16:38:84:7f:e0:c5:97:53:ef:7b:f3:69:42:
15:0b:bc:b5:a5:83:b1:ab:e8:a9:6b:8e:e8:1c:94:
8a:06:2c:50:a1:37:3a:3d:24:eb:53:7c:68:3a:31:
43:88:92:83:9b:19:82:bb:7e:cb:7e:07:ca:35:fe:
51:90:11:a8:c4:5a:16:91:ab:89:93:32:bc:32:1f:
c5:83:42:ae:58:94:61:c4:57:44:78:1d:23:56:25:
ef:4c:89:62:55:c1:1e:47:26:58:ed:80:40:54:2d:
45:a7:fa:e2:66:79:64:36:cf:a7:85:0b:24:a3:7e:
0e:9a:5e:b2:24:60:75:66:a4:d8:55:29:b6:61:9f:
2e:90:29:60:ff:cc:60:4e:31:5c:af:60:7b:37:9a:
30:8b:b6:a7:4d:04:be:2d:8b:21:e0:d8:54:55:ad:
3c:93:b4:b9:43:97:b2:db:1f:a2:55:d4:33:55:59:
a6:9c:2f:c7:39:21:3c:26:36:36:bd:93:7f:2c:4b:
f4:b4:e5:53:b0:46:15:b0:ea:fc:b3:b9:3f:cd:59:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:08:D2:9E:92:3A:B3:EC:AA:1A:D9:54:4A:CD:7C:77:0F:BC:65:44
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2b:ce:fa:c6:2c:8a:67:c3:07:bb:81:e5:4f:a8:0d:52:48:
6f:45:c8:25:5f:cc:a5:ab:ca:e5:6b:48:62:b1:b8:10:88:52:
13:7b:c3:17:eb:fb:1d:0c:5c:46:63:7d:91:29:2a:cd:60:32:
87:26:bb:86:2a:d0:64:9a:f2:a6:11:39:45:52:b6:b4:e3:68:
ad:a6:0c:ae:f7:84:9c:d6:2c:ba:74:fc:89:83:43:a7:b3:b3:
bc:8f:c1:a7:47:cf:81:d5:14:86:8c:04:f4:5a:cc:82:1f:84:
dc:51:50:21:5a:9a:fc:42:60:81:4b:c5:a2:16:0b:51:a6:ff:
7d:6d:5c:22:c1:7f:bc:55:2f:fa:40:4b:0d:c7:1d:f4:a1:11:
28:95:ba:0f:42:48:d4:84:84:fb:db:94:c6:e9:fa:f7:87:d4:
54:22:c5:af:e6:03:c8:d1:58:b3:92:47:91:9e:bb:71:e1:45:
07:8c:2d:17:4e:b6:4f:fd:c1:bb:20:be:86:1a:1e:cb:10:ad:
77:d8:f0:98:d4:30:5a:39:e2:30:26:74:5e:71:3b:9c:37:3e:
45:18:17:8d:58:8f:42:bb:4a:93:40:f8:3d:50:08:9b:01:18:
92:c2:bb:5e:24:57:d0:a2:3a:0e:56:e7:6f:bd:93:fc:b6:2b:
28:ac:3e:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kirb9vJ+3noqwVYolKwYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZGVkM2VhM2JhNjczYTgwOGNmNWU2YWRjYjUxZWE3ZjMz
ZjQyMDMwHhcNMjYwNDE5MDcwMDQ3WhcNMjYwNDIwMDcwMDQ3WjAzMTEwLwYDVQQD
EyhjNDA4ZDI5ZTkyM2FiM2VjYWExYWQ5NTQ0YWNkN2M3NzBmYmM2NTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsw0y1DP+PyRt0BJEMxbLRymvBGy
79ZIzG5ijW+8J+dOryu2xzPQqId9omU8EBY4hH/gxZdT73vzaUIVC7y1pYOxq+ip
a47oHJSKBixQoTc6PSTrU3xoOjFDiJKDmxmCu37LfgfKNf5RkBGoxFoWkauJkzK8
Mh/Fg0KuWJRhxFdEeB0jViXvTIliVcEeRyZY7YBAVC1Fp/riZnlkNs+nhQsko34O
ml6yJGB1ZqTYVSm2YZ8ukClg/8xgTjFcr2B7N5owi7anTQS+LYsh4NhUVa08k7S5
Q5ey2x+iVdQzVVmmnC/HOSE8JjY2vZN/LEv0tOVTsEYVsOr8s7k/zVnRbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQI0p6SOrPsqhrZVErNfHcPvGVEMB8GA1UdIwQY
MBaAFNze0+o7pnOoCM9eaty1HqfzP0IDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMt
MTU3MzBlMjQ2YmE2LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMtMTU3MzBlMjQ2YmE2
LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiivO+sYs
imfDB7uB5U+oDVJIb0XIJV/MpavK5WtIYrG4EIhSE3vDF+v7HQxcRmN9kSkqzWAy
hya7hirQZJryphE5RVK2tONoraYMrveEnNYsunT8iYNDp7OzvI/Bp0fPgdUUhowE
9FrMgh+E3FFQIVqa/EJggUvFohYLUab/fW1cIsF/vFUv+kBLDccd9KERKJW6D0JI
1ISE+9uUxun694fUVCLFr+YDyNFYs5JHkZ67ceFFB4wtF062T/3BuyC+hhoeyxCt
d9jwmNQwWjniMCZ0XnE7nDc+RRgXjViPQrtKk0D4PVAImwEYksK7XiRX0KI6Dlbn
b72T/LYrKKw+XQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:46:11 2026 by rpki-client