Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: S1UX3EBNb4ghHe8nZeDTFh8KAnZukWmcxxjgm/nVdvg=
Subject key identifier: 04:C2:78:05:DB:AC:4D:E3:02:F1:81:FA:C2:03:2B:A0:16:23:3A:DE
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 01A0CCA3641E7F1CCC223A8168553A2D5EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 05:00:55 +0000
Manifest this update: Wed 23 Sep 2026 05:00:55 +0000
Manifest next update: Thu 24 Sep 2026 05:00:55 +0000
Files and hashes: 1: 1TDkQYg3xQsNih1cBCwskUXwxLA.roa (hash: paiy4NkfuCpLerrMoZiJ1VXsmPdd6kHz6S2ynGEROuU=)
2: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: M6BCcp+wr623OKmZBjdGpOyC+vThwfk/mLt12kqGEW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:64:1e:7f:1c:cc:22:3a:81:68:55:3a:2d:5e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Sep 23 05:00:55 2026 GMT
Not After : Sep 24 05:00:55 2026 GMT
Subject: CN=04c27805dbac4de302f181fac2032ba016233ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:e8:f6:8e:c5:22:99:dc:6f:2a:84:b7:0a:
16:45:b0:be:20:52:90:a1:59:3a:6d:17:27:8d:16:
cb:43:0a:5e:16:82:8c:c6:6d:39:1b:90:f4:e8:0d:
30:30:38:be:1c:b2:31:13:cc:2b:85:95:79:41:4d:
86:6d:48:c5:d5:fe:60:3f:da:2a:21:d5:1f:ed:0a:
1f:71:89:17:24:39:97:8b:ae:3f:74:96:d7:db:cc:
63:63:8b:42:bd:81:99:8a:91:06:a1:c9:27:43:a6:
e5:a1:d7:f9:6e:56:79:71:03:7a:fe:53:47:5c:ad:
ec:00:a4:f5:63:85:0f:6f:2e:bb:3d:ed:77:ac:1e:
ae:6c:d6:dd:e9:d2:9d:ff:a9:f1:fe:94:fd:33:b8:
7b:bc:fd:0c:de:5f:97:11:8f:90:4e:dd:7a:c8:d4:
59:27:32:7d:1a:28:77:e3:60:ab:94:b9:b8:a6:3f:
53:fc:25:45:1a:2f:1b:66:98:f3:be:e8:6a:2b:66:
35:0b:4f:79:b9:5b:28:2a:97:32:cd:c0:c6:5a:29:
51:cb:86:b6:db:ee:d3:19:ef:8d:66:a6:7b:0f:9b:
a7:ff:39:24:53:2d:11:0e:d4:15:8e:91:14:b6:4d:
a1:d3:71:e6:f4:7b:a7:a8:42:bf:66:66:5e:3a:f2:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C2:78:05:DB:AC:4D:E3:02:F1:81:FA:C2:03:2B:A0:16:23:3A:DE
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:41:62:0d:99:4e:09:8d:7b:dd:49:17:3d:e4:81:84:32:22:
ea:3f:2e:72:e4:f1:23:8c:93:5e:3a:69:63:d3:60:1c:90:0d:
58:bc:7b:21:d8:df:d1:2e:13:fc:83:f0:db:21:a2:cc:ba:4f:
d0:aa:52:c0:f2:01:fa:c9:58:0b:de:ec:aa:4b:84:5e:06:f3:
8b:3b:04:54:56:b2:ea:83:af:8f:95:9d:4f:eb:df:b3:a6:12:
d1:ac:46:26:ad:7d:19:76:3b:54:55:f1:08:57:52:c3:7c:40:
88:90:57:12:1f:f8:b7:fb:92:e8:71:25:24:a6:5c:25:2d:91:
67:68:56:70:ef:64:e4:08:f7:a8:03:c7:dc:4f:18:8a:a1:19:
40:52:41:3c:79:2d:4c:56:e4:41:9e:51:8d:27:8e:ca:d5:a2:
f5:b2:33:f9:59:65:b3:15:5f:83:3d:81:25:03:59:8b:a5:eb:
dd:b1:d6:a0:db:3f:1f:9c:91:38:a8:94:b7:d0:d3:66:76:f5:
79:42:4a:20:1d:f1:de:86:a4:01:5b:e8:83:ea:bd:eb:61:ea:
3a:fb:24:11:6b:5b:0e:21:02:12:3d:95:d2:9d:7c:38:81:fa:
55:b3:b2:d2:cd:c0:4b:f0:fb:d6:d6:18:8b:b1:c6:5f:d5:4c:
87:c4:b0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:41:31 2026 by rpki-client