Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: Fi7f9syZpzRILF20tQJQ2eGjLMPhR+J5VXNXPiHon3Y=
Subject key identifier: FC:4E:1E:59:89:23:AE:85:3F:6C:A3:8A:7B:F7:48:D7:AA:9C:A0:00
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 019DA52F9A7BEAE39CAFC70DF1C0BC612C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 14BF
Signing time: Sun 19 Apr 2026 10:00:53 +0000
Manifest this update: Sun 19 Apr 2026 10:00:53 +0000
Manifest next update: Mon 20 Apr 2026 10:00:53 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: YGrrtNFWmSfy195Wocrn4cAHERWzN2RgpbqUFt/HsKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:9a:7b:ea:e3:9c:af:c7:0d:f1:c0:bc:61:2c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Apr 19 10:00:53 2026 GMT
Not After : Apr 20 10:00:53 2026 GMT
Subject: CN=fc4e1e598923ae853f6ca38a7bf748d7aa9ca000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:63:e6:79:79:be:f6:bd:e5:e8:83:fc:14:
0a:91:6a:f5:22:bf:2c:13:42:93:f6:34:ff:ad:6c:
e0:fe:a7:47:ff:29:d5:f2:42:6f:e0:8a:08:4e:9e:
0f:d8:94:30:15:bb:1e:f1:89:ef:ca:1c:91:19:4f:
1b:2a:f3:91:d7:18:ab:b7:4f:f9:d5:bd:73:ff:6d:
e0:ac:3b:e5:d5:dd:dd:c4:bb:b9:15:f3:9b:b2:2c:
82:79:49:b1:03:d5:ba:20:f8:ff:69:5b:6f:fc:a9:
11:cf:e8:e0:45:b1:1c:eb:22:8c:a8:07:e8:05:17:
48:dd:ac:93:d7:c8:c2:96:f1:8c:04:d7:61:bb:4d:
b8:87:8d:ba:4f:19:38:93:72:4f:46:7e:33:60:51:
2d:5f:ae:9e:55:ac:66:26:26:69:74:6a:ff:2d:83:
8c:7e:cf:4c:df:5f:30:9f:2a:b5:51:10:29:46:68:
41:af:0f:97:c7:58:dd:00:4f:8f:a2:98:6a:9a:fd:
31:9b:a8:84:b5:42:ba:31:ac:7c:fb:cb:a5:df:0c:
f1:6c:31:d9:48:65:9a:0d:88:d2:95:81:c6:50:dd:
75:15:09:1c:56:b1:52:1a:b1:4a:6b:68:de:c4:bf:
25:ef:33:49:71:00:d6:46:c9:62:0e:28:f1:a6:5d:
02:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4E:1E:59:89:23:AE:85:3F:6C:A3:8A:7B:F7:48:D7:AA:9C:A0:00
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:08:10:c7:71:2f:5d:a3:0c:a9:3f:6a:3d:fb:70:37:b9:5d:
44:67:32:50:8e:da:37:8c:e8:dc:74:72:ce:da:7d:f3:1d:1f:
2d:6c:cf:b0:e2:f4:60:6c:33:43:61:64:f5:2c:51:06:81:7e:
27:c2:e4:cc:a1:1a:6c:a7:ad:60:ec:0d:2c:90:9a:12:cc:19:
68:44:96:e3:49:62:23:63:49:9c:1c:2d:ff:18:16:b4:1d:8b:
5c:9a:5d:8b:53:d3:ce:4c:17:ab:71:91:3a:59:cf:53:ad:2e:
8e:4b:41:00:c6:15:1a:9c:3a:c2:82:a6:1f:70:88:ef:72:2a:
59:62:1f:2d:9b:61:95:ab:ad:24:f1:9f:60:a7:72:e2:d4:1a:
d9:95:61:f4:60:f8:26:b9:fc:b9:dc:e3:3e:80:1e:93:ac:9b:
fd:b3:b9:38:4b:07:3f:88:7a:cb:4c:1c:57:51:b7:39:ff:53:
c2:93:34:1a:62:58:1c:86:e0:aa:b5:58:52:f8:21:49:4a:0f:
45:bd:1f:a8:8d:e4:81:14:31:0c:61:13:87:59:4d:18:2b:1b:
3f:e6:9d:16:eb:e6:c4:7b:73:c8:47:5a:3b:71:99:c7:4f:81:
b2:1a:b3:f1:a2:cf:0e:59:b6:65:89:86:f0:de:e7:98:55:58:
7b:94:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:57 2026 by rpki-client