Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: IobZhPaDdJoVwRYjvV/xAK+7ZMFIlK7rtGoYM+nsGvY=
Subject key identifier: 2B:A1:B5:39:90:FE:10:7E:DC:95:7C:09:25:5F:4E:71:1D:89:D6:27
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 019E1CEB8853A74DDCE1A96B23AD682374E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 14FD
Signing time: Tue 12 May 2026 16:00:58 +0000
Manifest this update: Tue 12 May 2026 16:00:58 +0000
Manifest next update: Wed 13 May 2026 16:00:58 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: Ivf3rJMYZ/lr1HD/LnlwkbVcX6K5kBPXI6e7mxTEALk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:88:53:a7:4d:dc:e1:a9:6b:23:ad:68:23:74:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: May 12 16:00:58 2026 GMT
Not After : May 13 16:00:58 2026 GMT
Subject: CN=2ba1b53990fe107edc957c09255f4e711d89d627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:59:5b:43:68:ce:b8:b7:95:ae:17:2a:dc:
c9:3e:14:1a:67:42:87:b5:e1:72:43:7f:7c:38:df:
7e:2b:ff:b1:91:cf:ea:37:3b:30:2a:77:82:2d:af:
b8:44:cf:28:03:09:84:ca:e9:7f:29:e2:e7:70:14:
2c:fb:31:5b:33:a7:fb:40:c0:dd:99:0c:62:0b:98:
9c:79:4e:62:07:8c:0a:8f:0c:08:e6:46:f2:38:7f:
10:66:7e:81:94:bb:45:d5:95:6f:d3:bb:6c:e3:cd:
b9:d6:02:0b:9e:94:24:cc:43:7c:ca:ba:4a:f6:da:
a7:02:56:ba:88:55:1d:95:a5:c2:e4:ed:fb:d2:be:
33:dc:07:c8:8b:9f:13:16:74:6a:3c:94:a8:aa:b4:
0a:17:5a:03:35:14:06:40:7a:83:25:3c:fc:b1:b1:
08:99:08:8c:51:75:9c:d0:62:ee:4a:8e:6f:6c:b9:
44:fd:dc:61:b8:d3:d3:fa:af:9c:53:19:96:6d:f6:
97:8c:1b:fb:40:f4:05:a7:ea:33:fd:1a:53:32:ea:
fb:35:a2:b6:30:20:51:3a:db:b8:d4:ea:d2:5d:43:
b5:7c:05:b2:cb:bd:a1:1c:39:75:f9:61:c9:33:55:
69:4d:22:ed:64:73:1b:40:42:71:67:e1:e6:04:2f:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A1:B5:39:90:FE:10:7E:DC:95:7C:09:25:5F:4E:71:1D:89:D6:27
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:17:15:f3:4f:85:a6:43:a6:ed:e9:01:d1:ba:c2:5a:42:ab:
56:e5:e7:8c:b7:a1:24:41:66:d7:ff:e4:8a:1d:d3:55:20:a8:
55:33:bb:b2:c7:6e:c4:54:43:af:d1:4d:47:32:0c:1a:be:5d:
f3:af:8b:9a:6b:47:4c:7f:1a:57:e0:52:3c:b4:6a:ed:de:c6:
ae:03:27:70:d1:c8:0f:61:cc:db:97:22:10:87:e2:2f:b8:c6:
af:62:5d:3e:06:5f:c8:69:8a:31:63:a1:63:1f:4e:51:f0:ea:
ce:42:37:c7:1b:89:c2:4a:ff:64:bb:44:0f:3f:c7:1e:d7:1a:
9f:cb:06:4f:2d:6f:10:a6:79:fd:7b:04:13:7d:dd:00:14:4c:
4d:68:10:9c:49:09:67:9b:ca:98:97:ae:76:bc:d7:ed:7c:e8:
8b:53:23:95:02:bc:63:3f:ea:03:55:b8:12:2a:e6:44:32:e6:
02:1a:d5:db:7a:11:8a:b9:87:37:06:6e:76:29:21:2b:83:3b:
fd:31:4b:7e:29:99:39:f0:7d:ef:f7:d5:4d:7a:7d:94:14:ed:
d3:eb:c6:fc:74:dc:22:8f:b0:87:d1:ef:f9:c0:44:7b:83:38:
99:12:50:46:a5:e7:0f:df:d8:1f:6c:56:ce:5f:be:6e:db:f3:
2f:41:54:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:55 2026 by rpki-client