Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: hbj033PgVX3gbHAaePV74Bvrm84Z6YlbACZSUVxZWAA=
Subject key identifier: 30:E8:62:F2:48:E2:C3:16:EE:DC:F5:8D:A0:81:4C:51:91:D7:D7:F2
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 019FA9077F855B064F02AB30EAC9C4C775D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 14:01:08 +0000
Manifest this update: Tue 28 Jul 2026 14:01:08 +0000
Manifest next update: Wed 29 Jul 2026 14:01:08 +0000
Files and hashes: 1: 1TDkQYg3xQsNih1cBCwskUXwxLA.roa (hash: paiy4NkfuCpLerrMoZiJ1VXsmPdd6kHz6S2ynGEROuU=)
2: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: coNSRxJz5qE1ZRHkFzVdFt5zCcmblcTtFIcgBPqxIFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:7f:85:5b:06:4f:02:ab:30:ea:c9:c4:c7:75:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Jul 28 14:01:08 2026 GMT
Not After : Jul 29 14:01:08 2026 GMT
Subject: CN=30e862f248e2c316eedcf58da0814c5191d7d7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c6:16:0b:56:88:bc:16:5b:be:42:20:de:0a:
fe:6d:f6:19:52:ed:d1:83:d6:4a:e4:99:94:56:a1:
22:4d:91:fe:e4:6c:d3:e1:07:13:31:c2:89:c3:72:
8b:a7:bb:f2:1f:f4:51:f3:82:86:88:5b:f5:e3:77:
c5:6a:d3:4b:a1:cf:21:05:fa:b3:a7:a4:6b:29:ea:
7b:01:64:f5:19:fc:64:14:ed:db:dd:17:de:55:11:
d4:ef:a1:f3:2a:58:b0:49:ca:ce:a7:aa:aa:a9:33:
be:9e:b6:29:e9:63:ae:21:dd:d3:52:56:63:bf:80:
31:74:e3:5f:cb:d2:44:cf:6e:42:09:6f:f3:aa:9d:
6c:84:b4:42:2b:c4:99:8d:16:c0:d4:ef:7e:7b:45:
6a:75:f8:b7:03:da:43:12:86:45:81:38:6b:67:ac:
85:a1:dc:cf:0e:d1:b2:e3:a6:14:bb:c6:db:b9:62:
b4:e9:63:50:2b:5f:de:7b:51:8a:33:83:8f:15:d3:
af:5c:e6:81:de:6d:67:e6:e5:23:87:e2:59:61:94:
e8:42:bf:96:25:ad:21:d2:b7:bd:26:5c:9a:ff:2d:
3a:43:b2:13:1c:62:ca:20:dc:06:d4:25:af:7e:59:
aa:47:cc:06:3b:25:14:65:07:c8:18:73:bd:f4:7b:
52:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E8:62:F2:48:E2:C3:16:EE:DC:F5:8D:A0:81:4C:51:91:D7:D7:F2
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b6:77:6d:2e:34:58:42:f6:de:b9:7f:4c:09:9c:6a:26:f4:
6b:32:44:3d:91:6b:27:f9:41:16:24:ab:58:81:43:03:b8:07:
36:b1:83:34:a0:61:6c:66:4b:0b:95:d3:94:8b:8e:d2:5a:ed:
d1:1d:90:f5:12:1d:21:af:81:81:3f:76:f2:f8:38:7c:83:25:
eb:57:4a:4e:a1:34:0d:f8:95:fd:d4:76:c2:1c:80:ae:b2:56:
3d:55:a3:34:d1:08:81:21:94:a0:cd:68:17:ea:42:d2:cb:62:
da:4d:57:61:0d:2f:80:b6:03:67:df:d7:01:36:b7:5f:ac:d1:
6c:e1:41:29:93:5b:f6:14:ea:55:38:06:54:13:3f:8d:02:52:
18:1f:cd:6e:09:3c:c4:19:14:71:2b:a7:ac:69:24:60:b5:02:
5b:c4:ea:e0:d9:1e:19:2d:4d:d3:8a:d6:a5:eb:57:94:01:d9:
52:3f:50:99:ed:c0:57:1f:1f:70:97:b5:2a:01:51:58:e6:bf:
87:a0:77:13:4d:6a:f0:36:85:26:32:61:22:47:59:7e:45:70:
bf:06:01:98:61:d5:77:55:83:ba:84:0c:96:80:1d:70:a6:5b:
4b:fa:38:1e:ff:a7:a4:22:bc:24:b0:36:2a:ca:b1:79:c0:4d:
e0:1c:24:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:04 2026 by rpki-client