Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
File: 3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json)
Hash identifier: sQASW7ouz2MYmSS+laFMHfV/PpFVp2hfMTBJZw4fuWg=
Subject key identifier: CC:5A:CF:49:2A:53:67:9B:D3:9B:61:2B:46:F4:5C:4F:31:5A:FE:AC
Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
Certificate issuer: /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Certificate serial: 019FA899A84067D5DC63D5BE39BCE5202F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
Manifest number: 16E0
Signing time: Tue 28 Jul 2026 12:01:09 +0000
Manifest this update: Tue 28 Jul 2026 12:01:09 +0000
Manifest next update: Wed 29 Jul 2026 12:01:09 +0000
Files and hashes: 1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: vgycoGdKaMuT/+Pwd1JRlPSQtNKGr2JgJlqksv98M2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:a8:40:67:d5:dc:63:d5:be:39:bc:e5:20:2f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Validity
Not Before: Jul 28 12:01:09 2026 GMT
Not After : Jul 29 12:01:09 2026 GMT
Subject: CN=cc5acf492a53679bd39b612b46f45c4f315afeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:b5:34:11:19:55:6a:13:a8:f8:77:cc:1a:
3a:e1:7e:1b:ec:05:7c:9d:a9:8c:4c:ae:26:9f:56:
f8:bc:ea:63:91:ce:07:b1:06:e1:45:95:d4:f5:80:
16:06:42:69:93:0e:77:11:77:d4:b6:01:18:ef:82:
d4:83:6d:50:d3:30:9d:77:82:d4:21:23:a0:d7:10:
1f:de:1a:64:d4:fb:75:f0:9f:0c:83:eb:36:f1:88:
7d:6b:4e:9b:67:50:ae:a5:f9:9c:54:90:10:6c:69:
1e:0a:39:60:0e:81:4b:93:45:c9:f9:2f:aa:58:5a:
7d:06:fa:06:bc:70:72:41:4b:1c:20:29:72:18:73:
bf:7f:f4:09:59:bc:57:39:d4:3b:e1:29:64:0a:4e:
00:ab:8b:ec:72:72:64:d7:6b:ac:ae:d3:0d:8a:5d:
46:7a:c7:60:85:46:25:76:1e:d2:e8:0a:b8:c1:1c:
04:98:09:b4:28:ed:33:b5:44:84:75:7e:2e:0d:76:
42:1a:56:34:25:69:b8:2f:b4:9a:fc:fb:75:9f:c9:
40:b1:a5:ab:ae:d5:b2:7a:50:42:f7:8b:21:f8:58:
5d:c1:3b:09:26:21:90:4e:b4:21:00:8f:bb:76:45:
8e:ea:9e:3f:7e:53:30:2c:08:bb:b1:47:45:62:97:
a7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:CF:49:2A:53:67:9B:D3:9B:61:2B:46:F4:5C:4F:31:5A:FE:AC
X509v3 Authority Key Identifier:
keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d0:33:00:d0:a0:9c:77:d7:2c:c4:2c:ea:50:66:aa:e4:50:
f9:c6:b3:ac:f7:4a:28:89:4d:33:f6:e9:46:c6:a1:f7:fb:df:
7f:e2:74:a9:87:39:48:d8:ea:04:e3:d5:25:0c:be:f3:58:8c:
e2:81:3d:b3:d4:3d:d4:6c:c7:b7:76:d5:c9:8d:90:11:c9:15:
82:d3:6f:ca:d4:e5:8f:56:05:bf:f6:bb:8a:da:ed:66:f3:34:
80:7b:e4:21:a4:41:5a:0f:bc:af:da:29:97:ff:42:62:0d:5a:
9a:2e:b0:15:f8:84:82:dd:bb:c1:ab:69:ea:2e:75:bc:77:89:
06:8b:7a:a2:bb:39:44:8b:ca:67:3c:cb:9e:9e:c1:5d:a5:36:
de:20:d3:32:62:4d:d6:4e:0b:d1:56:02:12:40:3b:ab:4e:be:
87:33:85:59:66:12:f5:c1:98:af:ca:1b:62:49:f1:8b:d2:0f:
85:68:31:84:c1:9d:aa:a4:43:36:b8:df:b6:4b:31:d0:f0:b8:
05:bd:bb:d6:f3:1e:8a:46:c5:a8:01:6b:92:f6:a8:1a:7a:58:
1e:9b:6f:33:1d:30:a2:68:91:dd:5e:e4:2e:d6:cc:59:73:9b:
26:45:a4:c8:12:71:04:26:08:a7:f7:e8:29:d9:ec:53:7d:3c:
b8:05:04:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:03 2026 by rpki-client