Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: LGTFFNb6rmTk3/yL8IBY8tjxhmtrL6VjPNfR/UbQFDI=
Subject key identifier: 4C:FB:41:A2:EE:D1:9C:33:B7:29:B5:75:7E:EC:BE:16:91:FA:4B:FD
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 01A0D426B0B3EAC18900F2943CA47349D093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 1665
Signing time: Thu 24 Sep 2026 16:01:40 +0000
Manifest this update: Thu 24 Sep 2026 16:01:40 +0000
Manifest next update: Fri 25 Sep 2026 16:01:40 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: TPUc671hzKUzmTFw1m0jyHboqROslGG71uXfQP9cWdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:b0:b3:ea:c1:89:00:f2:94:3c:a4:73:49:d0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Sep 24 16:01:40 2026 GMT
Not After : Sep 25 16:01:40 2026 GMT
Subject: CN=4cfb41a2eed19c33b729b5757eecbe1691fa4bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:a0:92:9c:a8:22:23:eb:ea:9d:02:4d:b9:
99:46:39:0d:2d:41:cb:36:90:7f:3b:7d:b7:4f:6d:
a1:95:d1:e9:f0:b3:02:88:00:a2:18:c4:7d:bd:13:
b8:3c:23:2f:74:ca:80:0f:a4:6f:99:27:1f:17:8e:
08:5c:06:09:d4:20:96:fc:0c:6e:01:24:67:43:eb:
37:a7:41:d5:9f:af:b1:d9:4e:71:75:cc:aa:e1:de:
a3:b2:ed:31:28:4e:b4:bf:d4:ae:ee:86:5f:60:bb:
72:88:2f:ef:1b:97:2e:3c:0e:0a:40:d7:df:f5:35:
59:47:7c:20:65:e3:22:b7:d0:f6:c5:8b:7f:bb:d2:
34:3e:f8:1c:8b:cb:da:8c:60:c2:6d:62:1f:1d:28:
de:71:f0:c1:b1:b3:d5:7f:b0:23:e9:75:23:36:59:
02:f8:ee:b6:14:2e:f7:cb:45:fc:9f:03:b6:0f:e5:
7e:95:3e:1f:d0:20:06:34:7d:c7:da:e9:17:41:64:
fa:f1:25:97:2e:04:b6:36:e2:33:22:36:b6:42:dc:
bc:b2:76:96:c4:7f:69:5d:f0:67:0c:2f:90:82:60:
06:b6:d3:9d:fb:07:d8:75:14:c1:f5:3b:af:1b:68:
75:13:d8:f3:ff:8a:7e:fc:4c:dc:88:a9:3e:b3:02:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FB:41:A2:EE:D1:9C:33:B7:29:B5:75:7E:EC:BE:16:91:FA:4B:FD
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:97:0e:f0:40:c5:f4:df:ba:59:e0:d0:6b:49:95:b9:01:c0:
11:75:17:91:49:80:c7:b1:56:6f:37:dd:ed:3a:10:11:83:f4:
05:64:2f:57:05:dd:82:82:c1:f4:8d:31:37:e5:ac:16:96:8d:
f5:f8:7f:cc:9f:a6:b7:ed:37:6f:fb:c6:b4:f1:75:08:c9:6a:
df:69:a3:e5:10:10:05:1c:31:bf:72:2e:ff:a0:2d:e1:f3:3a:
91:75:83:9b:72:13:5e:14:dd:42:2f:4b:46:a7:cf:78:44:8e:
62:c5:37:7e:a1:02:f5:e1:a9:c1:c3:84:39:78:ce:00:a2:16:
87:f3:4f:21:0d:7e:3d:25:c4:76:0e:20:d0:e5:3f:f6:41:69:
1a:29:68:9c:69:c8:cc:4d:6f:e2:c8:a8:77:7c:7b:e7:8d:13:
fb:16:01:80:16:24:7c:9c:bc:f5:12:58:5c:03:3c:64:3c:25:
bb:3c:db:9f:d9:66:aa:cc:ab:11:0e:ec:01:93:fc:62:77:bb:
a2:84:9a:f2:96:29:d3:61:d4:63:47:7f:15:93:e9:93:8b:0b:
38:5c:5c:e8:55:0f:c9:95:78:eb:1e:5a:73:66:8d:19:5c:d0:
94:a9:03:01:08:2d:2b:6a:ee:cf:79:2f:6b:f3:1a:c2:c6:4a:
b5:ce:9f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:43:38 2026 by rpki-client