Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
File: 3cf_z32PTDOExrKNBKESsh8jeRA.mft (raw, json)
Hash identifier: VCzW8WwRjJU+nt1IfsB6jOEygI32a9uSd1bsKICUq7U=
Subject key identifier: 79:BC:C2:44:6B:DF:0C:4D:1A:A8:AF:46:B6:FB:BA:30:18:F4:C6:B5
Authority key identifier: DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
Certificate issuer: /CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Certificate serial: 019D9B197E3819F447AB28CC39751E324549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
Manifest number: D6
Signing time: Fri 17 Apr 2026 11:00:32 +0000
Manifest this update: Fri 17 Apr 2026 11:00:32 +0000
Manifest next update: Sat 18 Apr 2026 11:00:32 +0000
Files and hashes: 1: 3cf_z32PTDOExrKNBKESsh8jeRA.crl (hash: TbDynQQfHiXXNtpRqb/Ey9yBviRv0kMM9mZWaISTVy0=)
2: BX4ECMa5PSwMxBNsjfnl8GRXj1s.asa (hash: wiV7d2L86p523gY92Ip5gfxBxVerpTdBSH5xKncDAqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:7e:38:19:f4:47:ab:28:cc:39:75:1e:32:45:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Validity
Not Before: Apr 17 11:00:32 2026 GMT
Not After : Apr 18 11:00:32 2026 GMT
Subject: CN=79bcc2446bdf0c4d1aa8af46b6fbba3018f4c6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:c1:01:64:e7:e3:a7:65:25:c0:77:ab:52:
5c:af:f7:10:ac:e4:c8:b4:37:52:65:8c:de:7c:36:
36:28:93:aa:3c:63:48:f0:5c:5e:b6:2e:a5:90:ef:
41:b8:ed:26:43:7e:cc:ed:be:fc:6e:0d:33:fc:85:
6a:5e:b7:15:ce:92:da:9e:bc:d7:45:83:5c:f7:cd:
74:7d:45:06:50:88:99:27:14:e8:20:4e:d5:a6:8d:
25:2d:ee:61:63:d3:dc:e5:59:3c:a3:0c:36:74:d5:
e6:67:b6:24:37:bb:af:78:0e:df:20:9b:d1:74:22:
74:68:07:46:7e:ee:21:0e:b1:8f:9d:30:12:7e:12:
8b:76:b3:5f:53:f6:f7:67:60:8e:b3:b4:33:03:10:
8a:a7:92:78:59:d7:31:2a:cc:1c:ff:fe:c3:c2:5f:
0a:7c:3b:4f:54:b3:c5:47:1e:80:a4:db:b6:2c:b4:
34:0f:a4:92:6f:c0:28:9b:25:63:ee:c7:52:00:a8:
13:c2:f1:d9:01:1e:7c:b3:fd:92:66:93:52:22:a4:
82:fe:f1:26:45:4a:70:c1:2c:7c:92:17:76:14:d1:
55:60:2f:20:09:85:35:3a:58:09:1e:9e:14:69:28:
bb:a7:79:86:37:ec:1e:e4:4a:ac:e5:94:0a:61:f6:
aa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BC:C2:44:6B:DF:0C:4D:1A:A8:AF:46:B6:FB:BA:30:18:F4:C6:B5
X509v3 Authority Key Identifier:
keyid:DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:42:c4:bf:bf:a8:35:8b:fc:5f:89:4b:b9:12:59:77:46:97:
e7:14:9a:5f:1a:05:30:4f:32:32:82:86:42:e4:1c:9e:8b:07:
91:dc:3b:d3:ba:fc:cc:9d:bd:bf:12:26:fc:1f:d6:45:1f:3f:
1c:5c:bb:5c:97:fa:6c:11:db:65:07:1c:86:63:c2:54:76:be:
11:aa:57:84:8a:25:94:c0:6b:12:5b:10:37:3f:a3:c2:4d:b6:
4d:9d:f1:c0:70:7b:fe:d1:e5:ed:6c:e0:38:4a:ac:44:20:bb:
ed:df:8c:5b:df:0d:60:df:c8:0d:87:91:ce:80:45:41:81:71:
a6:3c:b2:5a:9c:ff:27:07:be:84:7d:3f:bb:78:f6:e3:86:dc:
64:80:0e:c6:75:cb:cc:3e:f0:c1:35:d3:4e:f7:ba:ad:05:a4:
7b:5d:94:ad:cf:69:c2:a1:9b:1a:76:ca:f9:15:f7:4b:15:0c:
73:9f:9c:bc:80:2a:48:32:ed:b3:b9:13:c8:39:bf:30:4c:d7:
99:2f:44:43:99:b8:e7:f4:5c:d4:66:48:a7:35:17:f0:c5:b1:
3c:d6:8d:0c:b7:22:74:a3:d4:96:76:29:9e:3f:4b:c1:fb:a9:
38:cd:40:2a:44:db:ff:a0:1d:6b:3d:07:b7:04:96:80:4c:28:
d4:50:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:46 2026 by rpki-client