Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: 9Bboy84RCVHbSwEaZtvoAS0g1bd1f86M17Ov7UBZoQk=
Subject key identifier: 3C:3D:93:21:D4:B7:FF:5E:59:95:21:3D:E1:46:70:C6:69:8E:95:A1
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 019FA9075E847D3F47304D15EB0F96DB4E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 14DA
Signing time: Tue 28 Jul 2026 14:01:00 +0000
Manifest this update: Tue 28 Jul 2026 14:01:00 +0000
Manifest next update: Wed 29 Jul 2026 14:01:00 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: yCzwN5bNQw1kX3ivoOI2HmR/EKQQoI7VYnFfKWQRjkE=)
2: H6HTDOjZlQ2VG-BteD4I1nTRn4k.roa (hash: a6IB6fLHDx6lViiB0ReUyYalYXgmOEaBsh6fJ2aLk04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:5e:84:7d:3f:47:30:4d:15:eb:0f:96:db:4e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Jul 28 14:01:00 2026 GMT
Not After : Jul 29 14:01:00 2026 GMT
Subject: CN=3c3d9321d4b7ff5e5995213de14670c6698e95a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:1e:c3:b8:3f:dd:fd:1b:99:dd:73:88:79:
50:7a:3d:3c:0d:c2:74:0e:15:87:52:83:c5:c0:b0:
c9:6c:ab:61:4f:5e:cf:f8:ae:f9:fb:e6:05:e3:ec:
69:e9:39:df:b5:e2:16:f2:6c:51:c5:c1:37:b4:68:
cd:73:2f:95:15:30:e7:91:7c:6e:3b:33:af:3f:22:
c7:0d:f7:35:76:8d:bf:06:6c:0b:61:80:b8:89:6e:
50:7e:b6:ca:a1:0c:f4:f4:2e:5d:11:dc:e5:a0:ff:
ba:78:da:b6:10:a1:1c:e3:b1:d0:e5:54:a9:8f:ca:
a9:c7:17:7c:0a:93:12:f7:e5:d9:1a:f4:e8:77:b1:
77:44:0e:91:f8:3e:20:2d:b4:5e:11:10:97:45:22:
49:49:97:42:49:00:94:cc:f8:4d:f1:b1:fe:1a:5b:
0f:d8:e2:14:80:0f:cb:5b:46:0f:c3:31:a1:46:1b:
e7:af:1d:ed:85:38:b0:51:c9:73:2c:de:c6:ae:77:
93:3d:ba:a9:c7:92:b8:4f:54:96:40:b8:76:c5:ba:
e9:22:b2:bc:20:7c:3a:0d:ab:be:32:a0:26:86:7b:
ce:3f:f1:2f:4f:24:ef:8c:88:88:0d:d4:a4:ec:ef:
36:71:25:88:4e:ec:fe:95:77:96:1d:96:66:9c:93:
a4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3D:93:21:D4:B7:FF:5E:59:95:21:3D:E1:46:70:C6:69:8E:95:A1
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d6:a1:31:26:d9:08:fd:9b:7b:f7:1b:d1:1d:6f:64:23:dd:
05:c8:a7:9e:9f:5a:d7:c5:06:88:4c:e7:04:40:87:2a:d8:06:
7c:4f:94:e4:a5:c5:92:a3:ad:6e:81:0b:40:5b:57:50:e8:f9:
47:20:cc:8a:a4:4e:0b:00:a9:e3:b6:de:c2:6d:f4:e2:32:84:
98:76:8f:26:74:4f:ed:97:85:08:c6:11:0f:b9:70:b7:5e:ac:
02:38:01:71:c9:cc:e1:d2:74:77:0a:f5:b7:aa:6d:f4:f4:90:
24:46:b4:cf:34:65:87:a5:d7:fa:3e:b7:be:24:50:8a:bb:2d:
62:1b:49:78:ca:82:ad:0a:55:c2:ea:a6:d9:91:10:43:69:6d:
29:f9:22:c2:65:b3:3e:34:0b:b8:9a:3a:d2:cc:a8:56:32:46:
ef:d0:07:d5:d5:14:a3:38:88:cb:b5:31:cd:ed:1c:61:5a:96:
81:c0:82:63:25:46:ac:48:d5:6a:2e:cd:d6:ad:a8:73:59:c3:
02:b1:34:30:ae:7c:dd:7b:22:68:6b:11:71:0f:86:f1:e2:4e:
ae:1e:e3:c6:45:ff:c9:ee:d0:0e:6c:c9:6b:41:46:9d:44:50:
d8:78:86:66:85:ee:36:37:3b:19:8a:14:77:10:14:32:b1:2d:
ef:7e:29:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:33 2026 by rpki-client