Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
File: 3cf_z32PTDOExrKNBKESsh8jeRA.mft (raw, json)
Hash identifier: T7xxBaFagakDYvx7i0woavL403ZgLexExn4NihXM3hM=
Subject key identifier: CB:C1:0D:E1:67:01:11:F3:D8:61:45:E8:07:36:90:6C:99:F6:F2:56
Authority key identifier: DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
Certificate issuer: /CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Certificate serial: 019CA7C5A329E7A8C3CC88A2B4E31BCD90AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
Manifest number: 58
Signing time: Sun 01 Mar 2026 05:01:13 +0000
Manifest this update: Sun 01 Mar 2026 05:01:13 +0000
Manifest next update: Mon 02 Mar 2026 05:01:13 +0000
Files and hashes: 1: 3cf_z32PTDOExrKNBKESsh8jeRA.crl (hash: 1lShR8feu5rbMkB9Ls5VECigCcNKA7ePSF8oiby7prs=)
2: BX4ECMa5PSwMxBNsjfnl8GRXj1s.asa (hash: wiV7d2L86p523gY92Ip5gfxBxVerpTdBSH5xKncDAqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:c5:a3:29:e7:a8:c3:cc:88:a2:b4:e3:1b:cd:90:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Validity
Not Before: Mar 1 05:01:13 2026 GMT
Not After : Mar 2 05:01:13 2026 GMT
Subject: CN=cbc10de1670111f3d86145e80736906c99f6f256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:cf:55:21:4e:69:c5:b6:5f:4c:ee:df:ab:
90:6b:a2:f8:85:06:9a:34:88:b6:3a:5f:d2:ee:ef:
32:79:e4:38:3e:6a:ed:5a:4e:7f:66:a4:38:5e:e5:
0c:83:72:3c:9a:23:57:47:2a:b6:6c:15:85:98:14:
4b:6c:6e:a5:6b:54:b5:fd:0b:96:36:e6:34:7a:43:
f9:b8:d3:2b:bf:56:04:80:7b:0a:94:cc:8d:4f:42:
d9:03:94:ee:51:13:b8:99:7f:ae:25:5b:ff:95:9f:
9d:b0:28:2b:ea:ff:8a:ea:1b:b2:c9:9b:c7:d2:54:
ac:d3:0c:7a:21:3f:a5:ce:2e:68:19:13:5d:45:39:
71:df:3e:15:f0:e4:4a:70:d9:22:76:31:58:09:1e:
da:b9:34:d4:5a:08:6d:ba:89:0b:e9:b8:85:39:e8:
12:4d:66:7e:1d:9e:e8:d1:0a:6d:36:dd:7a:44:e7:
7a:9f:8f:51:fe:a5:1e:d0:ad:8e:25:5c:39:a5:1e:
22:12:8d:c3:d8:a4:de:f5:89:17:7d:7a:1c:27:35:
56:aa:e5:9d:62:07:87:7d:10:a8:64:1b:90:2a:52:
06:81:d3:50:30:33:22:1b:3a:16:de:5a:77:09:ce:
26:38:80:01:d0:d1:b5:df:4f:d1:14:2c:5f:af:77:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C1:0D:E1:67:01:11:F3:D8:61:45:E8:07:36:90:6C:99:F6:F2:56
X509v3 Authority Key Identifier:
keyid:DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b5:a4:50:a4:fb:f3:c9:1e:78:b9:b9:10:d2:e4:9f:f2:b5:
36:9f:76:b5:f2:5b:af:ad:71:8b:90:4c:dc:87:67:0e:3a:d7:
58:77:52:20:99:93:21:de:11:52:e6:a8:6f:3a:d7:fa:f9:59:
62:6e:d7:34:75:1a:a8:80:26:9c:13:5a:fd:49:66:e3:ea:53:
e3:2c:f7:a1:89:4f:ce:23:e9:e0:85:f4:eb:d2:41:ac:1f:88:
d7:27:b2:f9:17:69:07:04:94:70:c3:27:4f:82:d6:d0:fe:80:
ee:8d:f7:bd:86:62:8c:94:43:58:b3:b6:3a:51:be:4e:91:25:
c1:f7:e2:1d:fc:25:27:1b:77:00:9b:ac:b3:b7:c3:31:db:be:
1d:b6:f8:9a:71:a7:55:17:ca:34:0f:55:fe:b7:b3:68:29:d7:
7c:ef:42:c8:0f:2b:02:19:1f:ca:32:ca:1d:9a:f4:6b:b4:ed:
ab:81:38:65:98:f0:5d:df:bc:ed:aa:2a:62:2d:90:12:e9:dd:
7c:f4:8b:64:7f:bb:e2:80:c9:c8:94:8f:e8:65:57:70:e6:72:
a1:cd:98:1d:f2:57:52:4c:dc:dc:c4:28:c0:5b:52:0a:36:2e:
54:26:54:cb:0c:7e:ea:1c:e6:05:e9:b5:75:bc:df:25:c3:b9:
e6:26:3d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:36 2026 by rpki-client