Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
File: 3cf_z32PTDOExrKNBKESsh8jeRA.mft (raw, json)
Hash identifier: MHVi/Vequxf2PjsrWdWFyHPGQsnIxolVidd6dfqEc2s=
Subject key identifier: DE:A9:D6:79:B2:E8:E2:F6:58:0C:C2:BB:BF:16:05:50:88:69:AA:8C
Authority key identifier: DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
Certificate issuer: /CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Certificate serial: 01A0C821DBADCAE3F9ADDCF176ACD54556EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
Manifest number: 027B
Signing time: Tue 22 Sep 2026 08:00:57 +0000
Manifest this update: Tue 22 Sep 2026 08:00:57 +0000
Manifest next update: Wed 23 Sep 2026 08:00:57 +0000
Files and hashes: 1: 3cf_z32PTDOExrKNBKESsh8jeRA.crl (hash: +NlJr8W8ITa1ug+CDSrGJ5KHYoT9xuSZUee+eweokto=)
2: BX4ECMa5PSwMxBNsjfnl8GRXj1s.asa (hash: wiV7d2L86p523gY92Ip5gfxBxVerpTdBSH5xKncDAqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:db:ad:ca:e3:f9:ad:dc:f1:76:ac:d5:45:56:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Validity
Not Before: Sep 22 08:00:57 2026 GMT
Not After : Sep 23 08:00:57 2026 GMT
Subject: CN=dea9d679b2e8e2f6580cc2bbbf1605508869aa8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:1a:9c:f3:21:0b:20:3b:da:4b:ea:0d:3f:
2a:42:85:63:d5:48:42:07:91:7f:cb:ac:f1:f4:c6:
ba:4b:b7:2d:b4:40:f9:c6:4e:60:12:af:ad:4e:1b:
1e:b7:32:3a:a1:f1:d9:8b:9f:46:7b:65:49:3d:d5:
b7:5d:20:77:dc:ed:13:f9:14:97:d1:b6:c4:dd:fc:
cd:41:c8:48:d7:20:82:ac:d9:4f:52:bd:4a:4d:36:
10:89:c3:37:a7:8d:78:78:bc:8d:32:29:fe:16:48:
13:8f:b3:21:28:ec:95:b4:85:b7:47:29:a6:fd:c6:
68:af:31:01:3c:ea:d2:7b:0e:8d:2e:1c:77:a7:14:
37:eb:b3:88:0a:c8:81:0e:1d:35:12:a6:2b:ca:2f:
9f:24:10:69:17:06:41:93:2b:bd:39:30:7b:39:c6:
bc:f7:5f:dc:b1:07:ec:1c:ed:21:d6:4f:b9:10:7e:
46:6e:a3:04:4c:0c:36:36:a0:70:89:66:ef:a9:5a:
a1:ae:04:38:11:b6:0a:ee:a9:63:d7:19:32:69:0f:
49:ab:46:13:f0:85:5a:e9:84:00:68:a0:d6:d4:80:
82:13:f8:6e:b5:0c:db:19:cd:97:fe:75:0b:79:37:
37:14:cf:23:a1:21:c0:08:39:44:be:56:14:40:d2:
39:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A9:D6:79:B2:E8:E2:F6:58:0C:C2:BB:BF:16:05:50:88:69:AA:8C
X509v3 Authority Key Identifier:
keyid:DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:95:ca:cd:8c:e0:bc:05:63:14:81:8e:b3:54:7c:76:67:0d:
37:8f:22:00:32:15:fb:9f:05:26:ab:c8:56:2e:76:4e:20:ad:
ae:4d:ec:02:52:2b:6b:4b:5c:4b:73:b4:f0:eb:f1:96:7c:c2:
36:8e:8f:33:f2:9f:53:bf:17:40:2d:87:4f:67:72:6c:c8:dd:
39:40:43:26:d5:1d:30:74:b8:ad:6e:15:2b:85:b3:ea:e7:f6:
2f:4a:66:ad:8f:fb:dd:fb:1e:45:d0:60:d3:27:66:5a:fc:15:
4b:85:94:8f:51:dd:cf:ac:4d:0a:5a:b5:81:2c:9c:21:ec:15:
c3:88:7e:38:e4:c1:5f:e2:49:8d:a4:9d:83:16:28:b0:b7:c0:
9f:ff:74:7c:69:25:3d:55:d9:9b:48:bd:04:76:ca:5b:27:1b:
ca:cb:50:eb:01:03:de:23:75:f1:d5:91:3c:7a:84:94:3b:ae:
98:0d:ef:73:68:62:23:9d:98:63:1f:56:f7:b3:91:1e:0c:57:
4a:e3:a5:3e:8a:44:b4:b6:3e:4c:ae:99:12:e4:5c:ed:55:c4:
06:79:f0:99:4c:23:db:7f:d5:32:5a:e8:bb:ed:ec:c0:e6:e7:
9b:f4:88:61:01:d7:f5:77:5f:3b:b9:55:a8:ae:70:40:31:eb:
3e:8c:1c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:20:28 2026 by rpki-client