Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.mft
File: 3C0fLO003Hbb9H29ywGire36Y2M.mft (raw, json)
Hash identifier: OhfPduIMNjSRgCVHgzT+O+jVEuibgDozW1b1UFRCayg=
Subject key identifier: E8:D3:2F:38:66:F7:9A:44:6A:25:6C:17:51:87:04:26:CF:D9:93:60
Authority key identifier: DC:2D:1F:2C:ED:34:DC:76:DB:F4:7D:BD:CB:01:A2:AD:ED:FA:63:63
Certificate issuer: /CN=dc2d1f2ced34dc76dbf47dbdcb01a2adedfa6363
Certificate serial: 01A0CAEBA185B700D2B40E1D5417F29754B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C0fLO003Hbb9H29ywGire36Y2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.mft
Manifest number: 3E
Signing time: Tue 22 Sep 2026 21:00:34 +0000
Manifest this update: Tue 22 Sep 2026 21:00:34 +0000
Manifest next update: Wed 23 Sep 2026 21:00:34 +0000
Files and hashes: 1: 3C0fLO003Hbb9H29ywGire36Y2M.crl (hash: pOsg0xz7644kTLcMLLpITyZw+hMZmQXoQJBz6P5k/Tc=)
2: Lv4tkrl1ROKeBeNg2OOVq9IR6JM.asa (hash: h80di06neMgZtFFpFKJPRBlRLDBtQUhi6wm+vE3vCF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C0fLO003Hbb9H29ywGire36Y2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:a1:85:b7:00:d2:b4:0e:1d:54:17:f2:97:54:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2d1f2ced34dc76dbf47dbdcb01a2adedfa6363
Validity
Not Before: Sep 22 21:00:34 2026 GMT
Not After : Sep 23 21:00:34 2026 GMT
Subject: CN=e8d32f3866f79a446a256c1751870426cfd99360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:c2:aa:1a:f2:c3:55:6c:21:8b:e9:8f:cd:
25:7e:55:53:02:bf:1b:77:06:54:07:60:c4:77:bc:
81:35:d7:e8:13:f5:88:0c:cb:3c:4e:87:9c:ea:37:
0a:9a:da:cb:c4:a5:a3:f1:56:d6:94:3d:cb:09:36:
6a:61:2c:13:80:b9:c5:49:13:4f:f9:69:4c:5a:12:
89:9f:e1:3b:55:33:a9:b4:e0:09:f9:f6:e3:9b:b6:
d2:98:bf:9e:96:d7:2a:20:ea:fa:66:91:ea:fb:93:
85:85:81:b4:fe:f0:14:53:ef:ba:78:1d:98:39:ab:
04:11:3f:e1:a0:04:78:20:b8:3c:cf:d2:fe:f0:7c:
80:2e:d9:72:3b:e9:b7:b7:7c:d5:7f:7f:67:f6:63:
7b:a6:1c:9e:e2:d9:c1:ff:7d:b7:e7:0e:5a:a8:5f:
c9:4e:33:27:bd:0a:a1:39:92:9e:7f:be:9d:0d:ae:
96:aa:8b:3e:35:5e:44:90:28:ba:c5:41:14:99:46:
52:e6:fb:44:3d:ec:38:93:4d:a5:9d:af:28:f7:88:
8f:bd:5b:9b:11:1e:9a:04:ad:ef:93:b3:ca:ce:64:
cd:5c:45:2d:7b:bd:df:de:36:e7:2e:fe:57:9e:c0:
fb:23:ef:45:59:f1:08:ff:9d:c6:b8:21:7b:84:65:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D3:2F:38:66:F7:9A:44:6A:25:6C:17:51:87:04:26:CF:D9:93:60
X509v3 Authority Key Identifier:
keyid:DC:2D:1F:2C:ED:34:DC:76:DB:F4:7D:BD:CB:01:A2:AD:ED:FA:63:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C0fLO003Hbb9H29ywGire36Y2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:bd:b9:31:bc:2b:4f:04:bf:12:5a:71:40:4e:e1:9e:12:8c:
91:a0:5d:25:7d:95:7c:e3:1e:3f:d4:aa:aa:da:42:64:71:89:
23:9a:3b:eb:d6:95:3e:ed:da:1e:95:86:a3:94:b2:6a:26:5f:
b2:34:91:f9:06:13:ec:d7:61:5e:ac:b4:32:9f:6b:df:b3:21:
31:9e:0a:0c:7a:bf:7f:db:2f:20:26:7d:9f:fd:0b:2d:fc:54:
1f:bd:ab:ef:c6:fa:c7:ab:ae:5a:80:9d:3e:ac:64:bb:a1:13:
d3:64:48:d8:a0:91:93:e1:67:65:33:06:78:e5:7b:67:99:12:
3e:f4:9d:5c:d1:23:f1:b7:7c:fc:3c:26:46:56:67:01:84:78:
70:24:51:7e:9f:77:b3:e0:a7:b4:be:40:f3:ec:0a:c5:b0:5b:
f3:41:6e:2f:65:cd:a1:ac:8d:41:11:57:f7:79:e2:5b:ef:e2:
51:5a:0f:4c:48:e8:1a:fe:43:fb:d0:3d:ae:da:a4:04:64:b0:
60:74:75:2f:04:5d:1c:ff:24:cf:f1:48:c0:92:db:ea:71:54:
a8:5d:67:ea:6d:d7:4f:85:36:e2:27:ea:5b:35:c2:e2:df:fa:
ef:2c:4b:64:9e:3f:6d:46:14:64:63:37:a2:64:fe:b7:c8:5f:
2a:27:8b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:16:05 2026 by rpki-client