Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
File: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft (raw, json)
Hash identifier: IbNdD8/w7roRQXzKCILKp/Fj9omxGDoVtk6B0yVlk5g=
Subject key identifier: B8:04:37:1F:59:CB:20:41:BF:F6:98:E1:19:66:47:9A:33:86:F6:9B
Authority key identifier: DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
Certificate issuer: /CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Certificate serial: 01A0C7EAC9A4543036CAEDD20EAAF3701B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
Manifest number: 027F
Signing time: Tue 22 Sep 2026 07:00:48 +0000
Manifest this update: Tue 22 Sep 2026 07:00:48 +0000
Manifest next update: Wed 23 Sep 2026 07:00:48 +0000
Files and hashes: 1: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl (hash: i+dB1ziuBGDcMkMj7ZA7GCQSTP8enRaL4BHAsro7vBc=)
2: VGuckUmXD3FffNojHBh4mr4L2f8.roa (hash: 8TbPfvVyzj3G5WKw2nSbHXcBZE5w35KkZHPmx5cAQsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:c9:a4:54:30:36:ca:ed:d2:0e:aa:f3:70:1b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Validity
Not Before: Sep 22 07:00:48 2026 GMT
Not After : Sep 23 07:00:48 2026 GMT
Subject: CN=b804371f59cb2041bff698e11966479a3386f69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:eb:03:8e:86:f3:69:74:60:0f:9e:ad:3c:
0b:e6:3a:59:aa:f8:6b:7a:7f:66:1f:2a:7b:fe:aa:
43:73:30:7e:f6:b2:8f:65:ed:94:cf:ea:f4:b5:67:
6c:21:e7:77:2d:18:b7:ac:50:e8:24:52:55:0d:43:
7e:77:bf:1f:f6:8e:6c:00:89:5e:6f:69:13:bc:b0:
43:0d:c9:c8:07:78:18:fc:91:55:ce:f3:54:41:6b:
0c:72:db:5c:50:93:47:d2:b4:03:62:fa:b4:c5:ff:
e0:0e:09:49:23:e2:c9:11:87:03:70:88:b0:cd:ea:
4f:8b:99:e7:87:99:83:aa:71:11:06:4e:94:e0:64:
1c:6c:4a:65:80:00:40:97:1c:50:46:41:11:5c:6e:
78:44:df:fb:81:da:3e:d9:83:9b:ba:77:8a:a4:f4:
fe:46:d8:44:14:0e:13:a0:12:c7:98:6a:b2:ff:2f:
69:c8:7a:14:5d:54:d9:46:0b:fe:68:0e:04:8d:98:
e4:58:cc:70:7d:e7:92:40:40:87:85:27:b2:81:f4:
d3:96:4d:3f:c5:b1:c4:a1:63:21:dc:9b:a8:ae:0e:
53:42:7e:9c:31:ad:cb:06:c1:0f:ba:61:e0:d6:49:
f6:b4:44:1f:fd:ad:05:bf:b3:f4:bf:3f:39:b0:47:
01:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:04:37:1F:59:CB:20:41:BF:F6:98:E1:19:66:47:9A:33:86:F6:9B
X509v3 Authority Key Identifier:
keyid:DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:37:64:6f:ab:6d:eb:02:c7:60:13:8e:4f:5d:ce:e7:7a:f0:
69:61:1a:84:02:a3:23:63:c1:7c:98:42:ec:69:68:2f:64:2e:
cf:b9:f3:eb:4c:9a:5c:b0:9e:0f:fe:46:01:11:b2:2b:77:af:
e2:dc:95:d4:57:74:de:6f:81:b9:e4:13:fa:a4:56:62:38:1e:
d4:2d:ed:1a:49:11:71:d1:57:9d:e2:27:2b:c5:86:28:a0:06:
30:7e:f4:5c:b8:90:83:62:05:20:3c:ff:4a:48:cb:37:76:fe:
94:7c:2f:bd:f2:12:49:18:e7:73:c3:8a:09:c2:1b:f8:eb:b3:
ba:5f:41:6d:9b:8d:15:b5:34:eb:26:ce:22:2b:9f:d7:13:8b:
69:d3:1f:b9:c8:26:68:27:8e:b3:62:44:a0:f1:6e:0c:cf:14:
50:1c:f7:33:6f:18:12:ec:54:22:9b:56:a7:7b:b8:3a:49:b2:
dd:e3:20:b5:1c:58:fd:80:44:a3:ea:c7:e6:85:26:58:01:33:
7a:1d:83:cb:f5:44:76:81:ae:d3:42:30:11:53:17:4e:b5:24:
55:61:4b:72:1f:af:db:07:5b:b3:b4:ee:09:d5:30:ec:60:46:
a3:cf:fc:5b:05:2c:eb:6c:a2:46:7c:b3:82:b7:bd:e7:15:96:
35:d4:3e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:44:12 2026 by rpki-client