Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: bbnUKBYwWiP5jfa5mkVYmbjCvNa+9mdoYI1h3lHAEGE=
Subject key identifier: 4D:A1:7D:CB:1B:EE:59:4C:65:65:AA:FB:99:7A:9F:12:5D:6E:39:0B
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 019CAB6BC74D361C2A42117B71F3DC0D0693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 0617
Signing time: Sun 01 Mar 2026 22:01:33 +0000
Manifest this update: Sun 01 Mar 2026 22:01:33 +0000
Manifest next update: Mon 02 Mar 2026 22:01:33 +0000
Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: kLP6aUY18nQZHmmteM8srjhJ2G8v3fUZ/XUz7b3DPf0=)
2: SmafHrnaMWuly5trV1gC3gRhXUk.roa (hash: 48PkkvQ09WAg7AqwCjJuzSMQ1WYgWgSM17QO2PTsJN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:c7:4d:36:1c:2a:42:11:7b:71:f3:dc:0d:06:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Mar 1 22:01:33 2026 GMT
Not After : Mar 2 22:01:33 2026 GMT
Subject: CN=4da17dcb1bee594c6565aafb997a9f125d6e390b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:66:28:26:57:5e:82:a5:66:89:ba:7d:81:42:
b6:a7:7c:e4:46:66:a5:86:9b:e7:9e:06:c4:73:52:
8d:53:9c:85:bd:b4:cf:35:e2:56:01:b4:49:a1:42:
49:37:5c:58:f5:6e:3d:92:16:4d:e5:ef:22:16:47:
d0:51:23:52:10:9b:47:81:14:51:1b:32:c7:a6:a3:
0e:a2:80:fe:1d:5d:ba:fa:6e:31:dc:98:57:cc:6a:
f1:51:ad:dd:3e:69:87:82:2e:d9:02:ea:2b:d1:8c:
9e:cc:7c:a6:a4:19:13:2d:f1:32:80:63:57:a0:20:
9f:a0:b0:bf:ff:85:07:fd:74:75:99:72:34:7d:b9:
ac:d0:4d:3a:ea:d4:89:31:4a:78:9f:9c:10:ce:1f:
86:ad:9d:a8:f4:b8:2d:c9:7d:12:1a:17:01:6a:62:
ad:f0:d3:23:72:0d:f8:b7:0e:46:86:8e:22:e0:14:
ac:6b:23:86:2d:55:eb:d7:a1:52:30:1b:88:87:a7:
cc:cf:27:a5:10:3c:1d:a8:98:fc:58:02:94:20:56:
a1:75:28:ab:b5:7f:24:a6:6d:86:a7:4c:4f:d0:ea:
07:a6:d8:8e:c4:09:1e:9d:4e:51:de:fe:4a:70:07:
ec:df:b5:e9:65:6d:b5:cf:dd:d1:88:4a:52:7d:94:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A1:7D:CB:1B:EE:59:4C:65:65:AA:FB:99:7A:9F:12:5D:6E:39:0B
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:95:84:cc:24:8a:3d:a4:54:23:4c:43:90:c6:d4:66:ef:c2:
25:40:9e:78:7b:64:a5:2f:63:c3:69:35:41:d2:b4:0f:ec:59:
ec:db:e6:96:0e:9c:21:98:ca:ec:fd:9e:25:bd:eb:82:7c:f1:
a4:39:df:b8:ae:db:f3:4f:60:47:b5:5a:24:f4:98:2f:ef:51:
e9:d9:91:81:66:4e:50:7a:a6:ea:55:27:15:08:ff:9b:0a:69:
0c:0c:95:df:39:6b:c7:82:4b:86:18:68:f1:5b:b3:64:4a:c9:
75:c4:5d:0e:3f:e8:02:20:0a:dd:3d:cd:4e:8c:55:fd:c7:7a:
27:b7:0c:01:bc:fe:41:52:76:a4:3a:bf:26:fc:fb:19:49:88:
ef:6a:9a:9a:64:30:ad:4c:6b:d2:ec:b4:ee:d5:8f:45:e8:d6:
2d:f8:3c:52:62:89:2a:51:9f:8d:e3:ee:46:93:7d:1c:d7:c6:
6f:48:5b:67:10:9a:e4:d9:a2:11:90:20:ba:e9:69:6b:8f:35:
11:54:b2:84:8c:3c:34:72:94:41:ea:9c:cd:9b:75:77:09:82:
97:c1:39:25:78:60:fe:06:da:1b:93:82:0b:27:10:92:4c:95:
1c:7e:ca:95:b6:5c:d0:03:ee:02:91:34:c6:04:2b:d0:a1:5a:
c0:f1:03:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:18 2026 by rpki-client