Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
File: 3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json)
Hash identifier: Rd2jDRGBW0iJN5EHrapjN5EkzqjkFCU3oc4JbLG6IcA=
Subject key identifier: F0:34:8B:43:C6:E5:49:CA:59:C9:5E:8E:A9:5F:EE:E9:0D:30:D3:73
Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
Certificate issuer: /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Certificate serial: 019EBEEC6E0B20387CC7EEF62907035CA01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
Manifest number: 1667
Signing time: Sat 13 Jun 2026 03:00:25 +0000
Manifest this update: Sat 13 Jun 2026 03:00:25 +0000
Manifest next update: Sun 14 Jun 2026 03:00:25 +0000
Files and hashes: 1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: 7jMPHXg06s8HxZehfLeeb/b6aFD8ZgRW/NP2yEh/A44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:6e:0b:20:38:7c:c7:ee:f6:29:07:03:5c:a0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Validity
Not Before: Jun 13 03:00:25 2026 GMT
Not After : Jun 14 03:00:25 2026 GMT
Subject: CN=f0348b43c6e549ca59c95e8ea95feee90d30d373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:15:e8:17:25:dd:51:54:19:d1:7f:5a:56:
da:01:2d:1c:b6:a4:bb:e9:12:41:1b:85:1d:a0:b1:
21:6f:28:a4:01:ef:89:32:a5:33:72:9a:90:2a:8a:
93:aa:76:11:7b:d7:dd:8a:89:64:cd:87:ad:23:d6:
c3:f5:e9:f3:86:4f:14:5a:37:a1:f6:cb:a2:95:d5:
15:8f:2f:10:c1:b4:e6:fb:27:4f:08:f5:37:36:bf:
92:6a:73:29:8e:c9:dd:15:9d:56:ea:f4:e9:ec:f4:
68:ed:66:1f:d9:14:ac:89:21:72:1f:26:b0:40:28:
fa:50:19:55:65:85:48:f4:c1:06:02:73:6f:7d:8d:
58:b2:30:cb:16:6a:0d:60:99:3a:08:5a:a3:6a:90:
42:58:dc:25:59:ca:43:f1:27:19:76:6f:f5:ca:29:
d8:c7:43:37:1d:ce:b5:a3:1e:03:40:20:c4:92:2e:
43:8c:2d:09:ee:be:1e:87:58:32:4f:20:7e:f2:9f:
e5:cc:0c:96:46:95:a2:eb:ea:b6:ad:83:c7:7b:6c:
81:d3:1a:f7:d7:71:56:e7:ab:d9:56:b8:9a:3e:4b:
3a:a2:64:bd:31:db:10:ca:4e:0c:0d:f7:79:1b:3b:
66:32:29:6f:a8:7e:a2:b0:a4:f5:92:1f:43:cc:c4:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:34:8B:43:C6:E5:49:CA:59:C9:5E:8E:A9:5F:EE:E9:0D:30:D3:73
X509v3 Authority Key Identifier:
keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b2:92:e8:75:f7:e9:1e:21:d9:dc:c6:93:95:34:25:71:31:
67:eb:41:14:19:8e:6a:1f:bf:83:6d:e9:87:be:9b:7d:a2:27:
94:3a:e9:dc:07:fc:bb:00:37:bb:0e:50:1c:84:5d:de:25:cc:
b9:3c:23:f7:d4:31:d6:d7:91:41:e9:2f:1b:18:c9:33:6b:ac:
0b:ef:3b:ef:f2:bb:75:8f:28:17:d1:49:7e:3e:16:8f:d8:19:
36:2c:f1:65:0e:01:53:ed:30:b8:5e:ee:93:95:f3:f9:59:ea:
3b:c3:b3:36:fa:e9:f6:17:1a:c6:dc:69:ac:a2:ad:03:4e:be:
d5:d6:9d:0a:84:91:28:df:a5:4d:f1:b8:38:2e:e9:51:29:8d:
9d:cd:59:14:4c:2f:4e:ed:db:5c:e2:4c:83:e7:4b:fc:70:8b:
45:52:66:78:fb:11:2a:71:70:d7:16:db:35:5f:ed:f5:c6:0b:
3e:26:c1:22:9c:53:ba:fc:f2:43:4d:79:a0:37:68:5d:22:a7:
e1:81:e2:d0:35:ab:4f:6b:a8:7c:7c:83:ec:af:02:14:a2:b2:
a6:5f:c5:34:2c:70:74:1d:9d:25:0a:fd:77:8a:b7:f8:0a:42:
e0:0d:1a:bd:68:fa:75:99:5b:2a:22:ef:86:e3:45:d1:2d:7e:
cd:0e:ca:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:29 2026 by rpki-client