Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: meQBIzlwv+Nv3fZvwdy/Nxvak2Yxba36OCVlAhqDylk=
Subject key identifier: AE:22:3B:9B:D9:7D:D4:EB:B2:36:1D:28:B0:0A:7B:DF:39:3A:20:76
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 019D99D0757542A998A4E176A1FC41ABA3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 05:01:08 +0000
Manifest this update: Fri 17 Apr 2026 05:01:08 +0000
Manifest next update: Sat 18 Apr 2026 05:01:08 +0000
Files and hashes: 1: 1TDkQYg3xQsNih1cBCwskUXwxLA.roa (hash: paiy4NkfuCpLerrMoZiJ1VXsmPdd6kHz6S2ynGEROuU=)
2: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: i31Aejyvy6BDHqlDV55vADwbTxcSbrtzCEpuS7vu/bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:75:75:42:a9:98:a4:e1:76:a1:fc:41:ab:a3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Apr 17 05:01:08 2026 GMT
Not After : Apr 18 05:01:08 2026 GMT
Subject: CN=ae223b9bd97dd4ebb2361d28b00a7bdf393a2076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:6e:51:95:1d:36:3b:cd:7c:20:b3:a0:06:
2b:2c:93:aa:07:91:ba:d2:94:f9:14:83:4b:3c:75:
2f:1a:36:f6:15:01:e0:b9:0a:5b:1d:18:9d:f2:0c:
a8:77:56:e5:c4:43:c7:38:49:22:8e:2d:14:8e:fe:
f5:c4:cd:ad:3e:f5:75:39:bd:b8:38:cd:ea:d4:cc:
9f:c3:35:a6:73:8c:03:9a:7c:f2:1a:fa:69:e4:ae:
14:de:10:07:66:a6:99:87:99:f4:d0:45:2c:fe:ec:
fa:fb:bc:bb:8f:3c:1a:7b:4d:6f:25:d7:2f:86:c1:
f9:c4:a8:7e:54:e6:33:fb:b3:1c:80:1b:77:86:6a:
0e:ec:6f:22:02:c2:41:6e:2b:d7:be:dd:a7:4a:68:
68:47:5c:5d:88:4c:38:c4:59:e7:97:42:0d:01:63:
4c:49:bc:0a:74:e4:1c:d2:15:bd:1a:ca:1f:d3:7b:
e9:ae:2b:e2:d3:e5:fa:f4:93:e9:65:12:70:1f:38:
d6:cb:77:09:76:04:2a:bc:8c:2c:bb:54:df:e4:ae:
22:00:99:1d:23:bb:16:53:e3:d8:0e:87:b9:a1:79:
f5:a7:01:4f:09:3b:8c:75:f1:84:f9:54:99:0b:3a:
84:89:c8:53:b8:37:9c:c8:f9:87:f3:5f:e9:cd:64:
e4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:22:3B:9B:D9:7D:D4:EB:B2:36:1D:28:B0:0A:7B:DF:39:3A:20:76
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:29:1e:40:2d:84:7b:27:fd:d8:c2:92:20:9f:92:a4:e9:fb:
4a:b7:36:b3:28:c6:1c:a2:0e:ac:92:56:83:9a:dc:70:eb:cc:
73:45:cf:76:a3:e7:56:32:3c:f1:a4:c9:63:e3:35:c3:69:7a:
80:75:c2:05:a7:1e:cd:ae:54:85:66:e0:ba:7c:35:d8:ec:75:
8a:2b:7c:fc:a8:de:09:86:21:fd:dc:b6:72:90:a0:c4:54:8c:
39:cc:16:aa:3a:24:07:f7:82:26:e8:6c:97:89:a4:d9:59:dd:
28:a4:fe:ba:52:c7:95:56:c2:7d:3b:d5:5e:29:a1:d0:94:0d:
84:91:01:06:e7:8d:ff:eb:05:fa:cf:58:6f:88:69:c5:18:5e:
cd:73:5a:61:77:c2:2b:cb:97:8f:51:a8:3d:78:0d:9d:f4:71:
53:37:99:7e:55:fe:5a:b2:49:38:b9:c2:af:da:23:88:71:68:
eb:f4:be:36:b4:a9:87:27:9d:35:34:81:1e:b2:b8:5a:66:87:
a4:b8:5c:79:03:1b:a4:3a:93:d1:50:a1:a0:30:cb:b0:4f:d5:
77:31:8b:fa:5d:93:a2:bc:0a:3b:ef:02:56:4d:99:fa:20:2d:
72:42:e5:67:86:f0:2d:ec:b4:1e:fb:e5:57:c6:f1:83:ac:72:
99:eb:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:53 2026 by rpki-client