Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
File: 3cf_z32PTDOExrKNBKESsh8jeRA.mft (raw, json)
Hash identifier: xLSW+YUFjR23lHP3kibNzfU0QOP4ircsxOIdgTsQK80=
Subject key identifier: 80:65:1D:9B:48:F5:AB:CF:72:FA:31:65:F0:36:FE:D3:E4:2E:67:7B
Authority key identifier: DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
Certificate issuer: /CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Certificate serial: 019EBEB609B44E01B1DB69D2329CB0399825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
Manifest number: 016D
Signing time: Sat 13 Jun 2026 02:01:01 +0000
Manifest this update: Sat 13 Jun 2026 02:01:01 +0000
Manifest next update: Sun 14 Jun 2026 02:01:01 +0000
Files and hashes: 1: 3cf_z32PTDOExrKNBKESsh8jeRA.crl (hash: uP2yycvGPDRhC54e8RWRlWxY+ItTkq4p/gVX6cW/O6w=)
2: BX4ECMa5PSwMxBNsjfnl8GRXj1s.asa (hash: wiV7d2L86p523gY92Ip5gfxBxVerpTdBSH5xKncDAqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:09:b4:4e:01:b1:db:69:d2:32:9c:b0:39:98:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Validity
Not Before: Jun 13 02:01:01 2026 GMT
Not After : Jun 14 02:01:01 2026 GMT
Subject: CN=80651d9b48f5abcf72fa3165f036fed3e42e677b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:89:76:24:75:fb:38:92:35:3c:65:d4:8d:
78:20:e7:87:7b:17:80:77:97:72:9c:1f:b5:33:f2:
a5:52:30:d1:32:c9:c1:6f:55:6b:66:1c:1a:46:d8:
de:d7:35:15:7a:1c:59:f7:4c:11:de:5a:d5:9e:49:
a6:d7:0a:7c:3c:80:b2:d1:ef:9a:c7:14:ed:55:74:
a1:65:83:6c:cd:e5:79:e3:1c:df:c5:57:3a:2d:ca:
14:d5:14:94:74:22:cc:f6:9e:1c:92:02:75:84:22:
ac:6c:67:2d:c5:de:12:b8:13:1e:53:45:94:fc:44:
86:f3:89:5f:ef:fb:6e:ea:e6:02:5f:2f:7d:8a:b9:
28:27:90:c4:0f:3e:36:16:b7:2a:b6:72:d8:58:21:
bc:eb:ad:ee:9e:49:66:01:c2:da:47:eb:da:61:20:
cf:9a:26:5c:00:d3:0b:09:94:c0:64:90:be:40:7b:
1b:70:69:dd:25:10:13:f3:e1:a2:ee:b6:6b:ea:cd:
45:3d:7a:c1:ef:07:a9:4a:93:d8:52:bf:4a:68:43:
82:a3:f3:6e:21:9a:26:bb:52:68:44:14:c0:f1:45:
bc:38:1a:b8:38:64:0b:7f:8d:74:17:29:17:02:72:
7b:60:d8:d5:e5:08:8a:0d:e1:6d:cd:7f:70:6a:ad:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:65:1D:9B:48:F5:AB:CF:72:FA:31:65:F0:36:FE:D3:E4:2E:67:7B
X509v3 Authority Key Identifier:
keyid:DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ef:96:de:53:34:08:40:f7:f0:b1:11:21:b3:25:86:c3:47:
8c:55:41:b6:e5:6d:ca:dc:08:e8:45:0b:bc:aa:3a:1c:e9:03:
ea:34:56:8f:de:fa:85:f9:d7:4f:c3:34:ed:0e:99:ce:c5:b6:
02:ae:0f:4b:de:a8:b1:2b:4d:7d:60:60:16:30:59:12:8e:02:
2b:8e:e6:04:9f:a2:dc:f3:88:8e:bc:17:8c:17:cd:89:57:a2:
bb:0e:df:ce:40:8c:61:a6:87:f5:d4:89:a8:6f:54:f8:8f:65:
f8:b1:1b:cf:8a:69:49:f4:6a:17:32:d8:b6:91:7f:fa:4b:e1:
3c:60:79:6f:d1:1f:d0:2e:45:b4:93:1c:d7:1a:2f:e9:c5:c5:
d9:4d:83:b4:56:0d:69:8d:0c:48:1c:16:a5:82:14:36:e2:d0:
69:e8:9c:a4:ba:b7:b8:66:7a:64:18:a6:f1:65:e1:68:9b:92:
8f:91:16:b4:d0:47:66:ce:f0:3b:cd:c3:fb:61:01:4a:c2:3c:
b6:01:6e:86:80:24:06:80:1f:4c:62:02:12:fb:5d:76:ac:57:
66:20:ac:a1:ac:76:ca:0d:2f:a1:17:0e:04:ea:39:d6:e4:08:
ff:34:f3:b9:5e:a9:76:95:aa:f8:b8:41:a6:15:59:d4:d9:e0:
0b:61:a9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:29 2026 by rpki-client