Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
File: 3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json)
Hash identifier: tf+cwPQu6CkfY7Eoe8+ZPd4VXMBGiRW9ND23apdKtE4=
Subject key identifier: F4:A1:7B:7F:33:77:2C:36:E5:F3:EF:90:1D:1E:A4:FA:B6:9A:EB:B0
Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
Certificate issuer: /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Certificate serial: 019D9773DAAB0E5BA6E02110DF281EEAB490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
Manifest number: 15CE
Signing time: Thu 16 Apr 2026 18:00:45 +0000
Manifest this update: Thu 16 Apr 2026 18:00:45 +0000
Manifest next update: Fri 17 Apr 2026 18:00:45 +0000
Files and hashes: 1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: c5jw06DgTLD4sZR87z1WnPfRWW/kxKKqO+SvCA35UmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:da:ab:0e:5b:a6:e0:21:10:df:28:1e:ea:b4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Validity
Not Before: Apr 16 18:00:45 2026 GMT
Not After : Apr 17 18:00:45 2026 GMT
Subject: CN=f4a17b7f33772c36e5f3ef901d1ea4fab69aebb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dd:ab:a1:28:02:68:ff:f7:f8:15:3e:2d:48:
01:0f:77:19:59:b6:29:34:6a:ee:c5:92:49:2a:e7:
aa:f0:91:c7:a4:d5:b5:ff:6c:94:02:cc:3a:65:4c:
75:69:a5:35:d6:8c:56:33:3d:6b:45:4f:c4:b7:7a:
38:8c:f3:ac:d9:a9:fa:d0:5c:b5:2c:38:58:62:81:
09:47:24:ac:dc:06:06:90:22:1a:da:71:e6:14:32:
78:77:ab:0e:25:ee:e3:f4:df:31:8c:97:0b:af:3c:
d4:be:fa:7a:54:06:45:d8:02:57:6c:27:ec:1f:9a:
07:3a:24:67:f2:9d:c7:e2:6c:f7:78:a5:a0:67:93:
14:0d:91:41:0e:5a:04:08:cb:ea:c8:86:f7:ea:ae:
c9:72:34:e0:e4:72:46:43:e1:7c:96:8a:a8:11:32:
a7:2b:f2:31:40:6c:67:7b:52:29:15:49:2d:08:64:
74:c7:48:cc:5e:4c:fd:6b:36:4f:c2:45:0b:2b:ca:
cd:18:21:7f:9c:5d:cb:6a:4c:45:cd:99:0d:d5:fc:
fe:c2:7b:19:0a:2a:c0:83:32:3e:60:bd:bd:63:2f:
87:52:2a:ae:9e:f5:f1:ee:07:0c:10:79:cc:4a:16:
25:83:a0:79:56:72:1b:bd:4e:89:33:86:c4:0f:b8:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A1:7B:7F:33:77:2C:36:E5:F3:EF:90:1D:1E:A4:FA:B6:9A:EB:B0
X509v3 Authority Key Identifier:
keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cd:a0:a2:fe:fa:b1:b6:9c:7a:22:15:66:49:e1:49:e7:cd:
5b:30:7c:f2:25:30:d4:41:41:6b:1d:4f:f2:b4:19:7f:88:5f:
b2:1e:2b:39:d2:44:f5:99:5c:12:c8:24:62:0c:d4:f5:ea:bf:
2d:f8:34:30:6c:a4:61:6d:96:a4:12:92:1f:54:8b:a3:e1:c1:
66:23:53:57:c0:6b:ee:09:9e:51:70:11:98:dd:24:ce:f0:75:
22:8a:51:c0:dd:32:1b:ff:4e:6b:87:1f:05:75:ac:f3:b3:2f:
61:8c:c7:84:76:4d:44:d5:1e:9e:61:6a:6a:25:b4:1e:cf:1a:
38:9e:53:92:29:f6:c5:36:7e:d0:d8:ad:f9:f2:2f:83:db:65:
eb:63:3b:3b:b4:c2:28:7e:d8:60:fb:93:d9:86:af:24:0b:7f:
91:ad:f8:3d:fd:61:b7:aa:43:eb:94:e2:0c:92:c9:1e:9e:11:
97:78:ba:71:e1:b9:ed:4c:1c:51:6c:49:bc:2f:42:36:17:a0:
8c:81:0f:23:42:e5:fe:59:8d:bc:19:39:47:7e:0d:a8:35:65:
5f:2f:b3:c3:1a:a8:81:94:19:17:ba:f4:ca:fd:1e:cc:85:84:
61:64:7c:c5:c9:60:66:9e:06:84:29:80:7d:a1:9d:03:17:93:
86:6a:9e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:26 2026 by rpki-client