Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: 8Oik6M4qu4sgozE3JBj14gK2LJ4v4w9QOhL0b4zkFqI=
Subject key identifier: FE:82:CE:53:96:AD:FE:73:F7:E6:DC:F1:A2:51:17:ED:F8:66:47:B7
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 019FAABE258831B7D2B8E4BB74C1B34D9115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 15CB
Signing time: Tue 28 Jul 2026 22:00:15 +0000
Manifest this update: Tue 28 Jul 2026 22:00:15 +0000
Manifest next update: Wed 29 Jul 2026 22:00:15 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: bBnGIrbs7ucIVJ0uq0rshBb6YVOUBUKmJ7rQfKlNnqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:25:88:31:b7:d2:b8:e4:bb:74:c1:b3:4d:91:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Jul 28 22:00:15 2026 GMT
Not After : Jul 29 22:00:15 2026 GMT
Subject: CN=fe82ce5396adfe73f7e6dcf1a25117edf86647b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:1d:f4:36:c6:58:b0:b9:bc:9b:76:14:30:
cd:fd:8c:8e:ba:e5:5d:21:39:55:12:1f:ee:df:cc:
19:e2:2b:17:5e:08:2a:ab:bd:41:22:af:cd:a9:58:
90:11:f9:4a:ce:15:f6:5f:0b:5a:f9:5f:0c:d0:cc:
d0:d1:cc:c6:bb:8b:85:00:0e:24:67:66:ca:6f:a5:
57:c6:c4:d8:d6:7c:52:a0:68:aa:91:cc:bb:42:70:
59:73:54:90:ed:a6:ca:76:d9:8a:a9:37:ae:66:8f:
e1:32:69:1c:60:31:eb:cd:01:97:6f:a0:50:a6:b3:
b7:94:37:d1:7c:97:e1:fe:de:f6:e1:8c:a9:4b:a7:
91:1a:ae:83:90:08:c0:fe:f7:dc:09:02:81:8f:88:
1d:f3:b8:d5:05:d1:d9:73:24:4f:82:6e:87:27:63:
b2:90:bd:99:24:dd:18:94:cb:ec:55:1f:12:27:4f:
13:91:82:7e:3f:f9:e5:2d:2b:e2:04:10:67:76:7b:
d0:0a:1f:0a:e7:db:9f:98:93:9a:8c:09:ea:83:a6:
12:bd:51:c0:ba:e6:15:bb:50:69:3d:a6:0e:9e:e8:
ba:60:0e:d1:76:05:de:f4:89:c5:40:52:05:17:c8:
e6:1f:42:da:ea:5d:09:c0:c0:5a:79:f1:c9:a0:5a:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:82:CE:53:96:AD:FE:73:F7:E6:DC:F1:A2:51:17:ED:F8:66:47:B7
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:10:46:85:54:25:71:13:83:08:66:34:26:f2:2a:55:ca:b8:
c0:ab:17:62:0f:04:d7:8f:dd:e4:9f:ca:73:42:1a:ca:ad:09:
ed:8f:84:23:ba:3a:96:64:3a:df:ff:28:dc:90:c2:68:4a:2c:
93:57:f6:31:b4:3b:2e:9f:4f:a4:c2:58:6b:e2:7c:ad:bc:18:
1c:68:7a:72:6b:21:d2:d5:70:86:db:80:d6:c8:1e:e5:59:d8:
9c:fc:c8:b4:64:6c:55:8a:58:4c:e7:58:08:5e:57:62:d4:57:
ec:eb:6b:84:05:41:5d:69:f4:68:7e:6a:37:4e:42:16:bc:49:
d0:a2:19:70:ee:2a:72:11:46:d9:8d:42:9c:63:df:a4:66:9c:
e7:62:16:6a:50:69:f3:8d:b4:55:60:69:81:85:8b:5b:ed:41:
53:9b:ba:0a:9a:26:29:71:f3:2a:61:04:82:1a:c1:50:af:d2:
bb:ea:af:3b:cf:81:4e:6c:fc:15:18:47:87:58:a0:69:b1:51:
df:7f:3b:0c:b5:09:6c:36:b0:c1:02:c1:8d:ff:fc:58:6f:1c:
43:70:16:13:c6:47:ad:5e:1c:10:97:d8:a7:07:d3:d6:b2:b5:
da:8c:ec:f7:b1:b3:9b:10:1d:86:e8:22:d9:71:84:52:f2:24:
c4:9e:c5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:00:03 2026 by rpki-client