Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
File: 3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json)
Hash identifier: ZJiDYPUPc4WWguXLsiGzT1nF+46BHxswU1HDGlQ6hrE=
Subject key identifier: 7B:AF:BC:5E:8F:79:29:9B:7A:58:6D:93:E0:7A:12:2D:E2:09:9D:E4
Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
Certificate issuer: /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Certificate serial: 019CABD9851801CF8A12398D61199B41A149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
Manifest number: 1554
Signing time: Mon 02 Mar 2026 00:01:25 +0000
Manifest this update: Mon 02 Mar 2026 00:01:25 +0000
Manifest next update: Tue 03 Mar 2026 00:01:25 +0000
Files and hashes: 1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: lpFcr9TgI9DudLdw+AbeC3cNQdeO0Q6pqdp97e8HWoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:85:18:01:cf:8a:12:39:8d:61:19:9b:41:a1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Validity
Not Before: Mar 2 00:01:25 2026 GMT
Not After : Mar 3 00:01:25 2026 GMT
Subject: CN=7bafbc5e8f79299b7a586d93e07a122de2099de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:bb:e4:27:9d:70:9d:16:89:44:eb:9c:86:
e1:a3:9e:9e:33:00:f0:5b:44:5f:83:f5:e6:8f:b3:
ed:94:da:c4:e4:95:f5:ee:fb:3e:a8:f2:83:cf:77:
0f:ba:b7:36:fe:69:4c:66:6f:22:1a:9c:39:b4:d1:
8a:d8:c5:72:1a:e2:62:c3:96:99:52:ca:a3:d0:3d:
2f:01:2e:cf:34:09:5b:74:4a:57:48:a4:76:03:02:
15:a7:7d:62:75:79:b7:32:da:d1:65:02:7e:34:fa:
93:4f:0d:c7:38:c3:1b:d9:ed:4b:dc:1d:44:c9:ac:
50:81:31:18:f0:f1:eb:75:a7:ba:6b:ff:8a:3b:44:
eb:ad:aa:36:72:6f:32:d7:29:90:03:b4:f1:da:d4:
12:12:0f:11:0f:90:b3:6c:85:c1:c6:74:7c:1c:fa:
ef:df:7f:5c:72:ff:ec:05:8b:c1:5e:62:ec:0c:4d:
a6:61:1f:c8:55:cd:f1:c8:df:01:16:4e:5d:7b:1b:
d5:2a:31:00:d7:03:15:31:07:e6:f8:26:3d:66:81:
eb:69:83:4b:d3:c1:b1:e2:ce:82:6f:a2:c7:b7:e4:
ce:19:8c:cc:dd:51:56:43:41:56:9b:cc:3e:ff:ad:
d5:73:3c:f8:82:af:69:9c:38:b6:6c:94:b3:c2:e1:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AF:BC:5E:8F:79:29:9B:7A:58:6D:93:E0:7A:12:2D:E2:09:9D:E4
X509v3 Authority Key Identifier:
keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:20:8f:93:e4:c5:03:1c:51:c2:9f:3a:c1:8f:18:fc:dd:c3:
25:ca:ec:93:6c:68:f4:cb:75:e0:d5:7f:03:3e:a2:89:52:b2:
d1:20:06:21:80:eb:c4:67:bf:bb:f0:e0:28:68:64:3e:b5:0b:
9c:e0:e2:bd:f0:66:ba:b3:88:49:a6:08:a6:dc:5c:dc:d0:69:
44:b3:75:0f:fe:9c:db:47:20:49:52:bd:3f:fa:c5:39:ed:98:
0e:aa:0c:1b:68:f5:3a:44:5c:2c:c8:39:95:8f:86:b4:58:45:
c2:22:b1:cf:b6:9d:5e:41:7d:80:d7:75:5a:f9:da:75:b1:67:
18:c9:9c:71:1c:08:ec:7a:2f:3e:3b:b5:67:7e:09:b4:e8:1d:
89:b8:84:fd:6a:3a:4e:9c:f3:ee:56:df:c5:2a:41:12:55:8c:
a1:fa:b0:57:45:24:8e:7f:c3:8e:2d:19:29:88:4d:ad:af:57:
91:fd:ab:8a:c9:70:f5:9e:70:c6:90:c4:dd:19:25:55:5d:c6:
f3:c4:55:f3:e4:94:2b:58:71:9f:60:b1:4a:f1:ab:b6:28:98:
68:69:bb:06:42:83:a1:43:d5:8b:3e:bd:0b:bc:d1:bb:01:f6:
03:67:b1:1d:77:e1:3d:fa:ed:3f:26:3f:37:b2:0f:7c:31:32:
82:f1:fe:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:38 2026 by rpki-client