Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: mE6+Nza7zi++RDMbVArqi1chME+5OisftQOA1vfKEAI=
Subject key identifier: 84:51:90:DF:27:4D:6F:C7:15:88:40:9C:24:33:35:C0:D5:12:C2:18
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 019D2B84F8EDBA853272358744DC6D5A773D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 1480
Signing time: Thu 26 Mar 2026 19:00:27 +0000
Manifest this update: Thu 26 Mar 2026 19:00:27 +0000
Manifest next update: Fri 27 Mar 2026 19:00:27 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: Mrf3RgHfb7+izIi1O3kDIIXJObowJ5uJdujBSKVOeuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:84:f8:ed:ba:85:32:72:35:87:44:dc:6d:5a:77:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Mar 26 19:00:27 2026 GMT
Not After : Mar 27 19:00:27 2026 GMT
Subject: CN=845190df274d6fc71588409c243335c0d512c218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:3d:5c:99:f6:0c:37:d3:5a:17:bf:c3:eb:
6b:bd:55:02:70:7f:f3:91:c5:62:97:d8:bc:37:75:
ff:0e:75:6c:ce:df:c1:41:ac:8e:34:fb:d2:f6:a3:
cc:f8:85:72:25:b7:d9:cd:db:3b:43:46:45:5e:5b:
02:d9:8a:05:69:7b:36:41:ae:4f:7e:e4:e0:cd:e3:
7c:b9:7a:7d:5c:14:0c:19:d2:c2:1f:5b:c6:c4:6f:
55:64:dc:9a:a1:b2:dc:60:48:cc:d6:95:08:d1:f3:
c5:d2:6a:26:2a:f2:af:bf:d2:79:f3:07:8d:ec:4b:
d5:fa:d3:0c:7f:1f:e5:eb:1a:e7:06:03:53:20:03:
c0:d8:4e:52:26:c2:5f:22:a5:40:9f:4d:c4:8d:d9:
a9:70:2f:9a:1d:4e:02:0c:99:c7:27:4c:e0:d2:ac:
14:5a:40:0d:e6:db:b2:82:87:f0:4f:79:9d:6c:b7:
eb:74:2d:49:99:a2:36:72:91:b3:6f:77:56:92:c6:
fd:16:ad:5d:ea:2f:7b:b2:ce:40:62:81:b7:e7:f9:
8d:3f:b1:6f:80:a8:4d:4a:46:ed:b0:f5:41:c3:94:
06:fe:a9:04:66:07:d2:3f:b8:cb:83:20:ec:78:be:
3a:14:ea:38:70:b5:50:dd:84:fd:b9:d5:31:e5:5c:
c3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:51:90:DF:27:4D:6F:C7:15:88:40:9C:24:33:35:C0:D5:12:C2:18
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8c:dc:79:2a:00:66:be:a0:65:5f:b2:61:cf:59:5a:b1:f8:
06:b4:c5:ee:12:78:9b:c3:df:56:ef:43:57:f8:73:eb:6e:5e:
1a:87:b0:35:67:fc:95:26:dd:8a:af:06:94:f3:c6:17:21:b9:
8b:06:f0:34:22:f3:ab:48:c3:d7:51:3e:e6:b5:fc:d8:a5:6d:
1f:c4:ba:8f:e4:d4:98:25:1a:21:06:10:8d:25:a2:c5:67:84:
60:89:d5:e1:0e:cc:72:98:e2:4a:b0:62:bb:b6:94:ca:92:0f:
18:db:7f:0c:9e:e9:0f:38:25:4b:44:0f:ab:bf:2d:10:86:c9:
b0:ca:ef:b8:44:ea:97:b7:2c:2e:a4:f3:d2:23:8e:1f:48:33:
13:f8:96:2a:89:a6:b0:6a:1e:55:7e:77:90:11:bd:33:07:7a:
82:38:bc:df:f2:06:26:03:a4:7c:e7:a1:ef:fc:76:86:08:01:
55:6d:7b:d3:67:d8:ba:b4:1a:f2:7e:39:2a:91:37:49:ca:79:
2d:d2:a7:98:28:83:f1:ab:ab:95:ea:28:25:3d:07:c7:83:d9:
09:40:03:b2:ff:48:61:ed:07:05:0f:40:7c:dd:0b:fa:1f:2d:
7c:59:fc:08:dd:29:11:e5:af:c7:f6:72:92:63:40:b0:6f:e7:
bc:b8:e5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:05:22 2026 by rpki-client