Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: b7akXaSei9XT2oRju0WVFrQobL1taNU1YfHxv64mWF4=
Subject key identifier: 7A:97:06:7E:34:BC:84:47:CF:B6:42:57:91:B1:87:12:28:07:80:DE
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 019CAC478A6BF82F607893DD5C6323961C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 02:01:35 +0000
Manifest this update: Mon 02 Mar 2026 02:01:35 +0000
Manifest next update: Tue 03 Mar 2026 02:01:35 +0000
Files and hashes: 1: 1TDkQYg3xQsNih1cBCwskUXwxLA.roa (hash: paiy4NkfuCpLerrMoZiJ1VXsmPdd6kHz6S2ynGEROuU=)
2: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: 1G9QFAAcYXFYIio/E6aj/iRRFHe+wa67sFKmXYjMpos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:8a:6b:f8:2f:60:78:93:dd:5c:63:23:96:1c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Mar 2 02:01:35 2026 GMT
Not After : Mar 3 02:01:35 2026 GMT
Subject: CN=7a97067e34bc8447cfb6425791b18712280780de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:9b:95:3f:7e:f9:15:45:8d:02:e3:f1:df:
29:6c:3f:9e:bd:a1:92:82:ab:2b:64:27:6a:32:71:
1b:fb:bc:aa:ea:53:6c:21:f6:2d:82:5c:81:38:60:
e1:2c:20:83:34:93:9b:93:3f:be:54:2a:cd:d2:ec:
00:df:f0:4d:c4:13:4e:04:9b:d3:e5:63:14:74:16:
3d:f1:7f:43:34:01:9d:b4:39:96:a0:a3:45:f8:d0:
4f:bb:03:c0:60:da:97:9f:45:e0:40:78:14:17:0f:
5b:12:e0:38:a3:06:95:7e:cc:5d:ef:b5:41:c7:f4:
71:17:f0:72:51:67:00:a3:ae:94:5f:3f:78:ca:26:
3a:f6:20:d4:bf:e7:6f:4f:e2:fd:41:02:47:97:70:
00:1b:65:a0:cf:43:ff:b2:0a:60:79:7a:7c:4c:1c:
a7:f2:96:96:b6:09:ea:6d:64:48:1a:7c:9f:a1:e1:
20:29:cf:fd:67:08:99:1b:89:fe:54:27:c8:6e:14:
30:6b:8d:89:d8:ac:69:dc:47:82:58:65:04:fc:bc:
3a:4a:bb:83:d9:ae:b9:ba:d9:81:46:00:44:db:7d:
33:50:84:dc:89:39:e1:d1:08:00:ca:3a:b7:e4:ec:
69:dc:a7:2b:74:95:c5:c7:63:27:14:78:31:ff:d0:
9b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:97:06:7E:34:BC:84:47:CF:B6:42:57:91:B1:87:12:28:07:80:DE
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:84:75:45:b1:86:bd:c9:9f:f2:3b:bf:cf:b7:53:99:e4:77:
11:ae:d9:b3:c3:97:2f:2d:8d:bf:66:ee:d5:8a:54:1e:da:0b:
d9:7d:1e:53:2b:5f:59:6e:c1:57:ff:81:60:ca:d3:7c:d8:8c:
93:cb:fc:1c:38:f9:77:6d:dc:dd:61:82:15:89:ae:94:fd:61:
c9:7c:d7:f9:d5:82:0e:27:b9:c0:6e:64:47:b3:d5:d8:00:70:
26:72:eb:51:d8:27:b8:47:9e:36:9c:01:a5:1e:63:62:5a:2e:
4f:75:8d:15:63:37:11:79:b0:66:ac:14:a8:aa:d6:2c:29:0c:
0f:af:d5:4d:d9:2a:a2:6e:0e:77:ca:1d:16:9b:9f:09:42:1b:
7b:4f:1b:0b:f9:ae:fc:59:4e:80:27:d2:da:f0:4f:ad:9c:d8:
d6:c3:df:f9:b0:ae:6c:bc:08:d3:ec:e5:8e:ae:05:9b:62:e3:
0e:9b:bc:62:5d:bb:16:77:1d:22:f7:87:ea:33:b5:61:04:80:
54:a5:ca:d5:43:31:a9:a2:e0:9c:fa:f6:eb:99:fd:14:89:91:
5a:ba:15:f8:fe:08:37:e8:98:84:41:be:6c:26:74:3e:33:fc:
4f:df:b3:4a:0e:61:bd:80:59:bb:2d:f3:a5:3e:a4:a0:4e:30:
67:bc:de:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR4pr+C9geJPdXGMjlhw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMjczZTFlMjE4NDFjZTJjMzM1ZmUxYzk2MWNlNzY4MDE3
ZWVlMjkwHhcNMjYwMzAyMDIwMTM1WhcNMjYwMzAzMDIwMTM1WjAzMTEwLwYDVQQD
Eyg3YTk3MDY3ZTM0YmM4NDQ3Y2ZiNjQyNTc5MWIxODcxMjI4MDc4MGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8KblT9++RVFjQLj8d8pbD+evaGS
gqsrZCdqMnEb+7yq6lNsIfYtglyBOGDhLCCDNJObkz++VCrN0uwA3/BNxBNOBJvT
5WMUdBY98X9DNAGdtDmWoKNF+NBPuwPAYNqXn0XgQHgUFw9bEuA4owaVfsxd77VB
x/RxF/ByUWcAo66UXz94yiY69iDUv+dvT+L9QQJHl3AAG2Wgz0P/sgpgeXp8TByn
8paWtgnqbWRIGnyfoeEgKc/9ZwiZG4n+VCfIbhQwa42J2Kxp3EeCWGUE/Lw6SruD
2a65utmBRgBE230zUITciTnh0QgAyjq35Oxp3KcrdJXFx2MnFHgx/9CbbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqXBn40vIRHz7ZCV5GxhxIoB4DeMB8GA1UdIwQY
MBaAFNwnPh4hhBziwzX+HJYc52gBfu4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iNGE3MWEtZWIzNy00NjlhLThiYjUt
Mjc4NDFmNTA3NzM1LzEvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iNGE3MWEtZWIzNy00NjlhLThiYjUtMjc4NDFmNTA3NzM1
LzEvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYR1RbGG
vcmf8ju/z7dTmeR3Ea7Zs8OXLy2Nv2bu1YpUHtoL2X0eUytfWW7BV/+BYMrTfNiM
k8v8HDj5d23c3WGCFYmulP1hyXzX+dWCDie5wG5kR7PV2ABwJnLrUdgnuEeeNpwB
pR5jYlouT3WNFWM3EXmwZqwUqKrWLCkMD6/VTdkqom4Od8odFpufCUIbe08bC/mu
/FlOgCfS2vBPrZzY1sPf+bCubLwI0+zljq4Fm2LjDpu8Yl27FncdIveH6jO1YQSA
VKXK1UMxqaLgnPr265n9FImRWroV+P4IN+iYhEG+bCZ0PjP8T9+zSg5hvYBZuy3z
pT6koE4wZ7zeYg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:39 2026 by rpki-client