Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
File: 3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json)
Hash identifier: caQp6zXofRdrSQX7EPeEjggGtN5iJ3NSd4hZpj2gh90=
Subject key identifier: EE:E0:4C:2C:22:C0:30:77:55:55:C1:55:05:99:67:1B:21:AB:CC:EA
Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
Certificate issuer: /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Certificate serial: 01A0D011DC759642659AFDE982DEB6538B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
Manifest number: 1779
Signing time: Wed 23 Sep 2026 21:00:26 +0000
Manifest this update: Wed 23 Sep 2026 21:00:26 +0000
Manifest next update: Thu 24 Sep 2026 21:00:26 +0000
Files and hashes: 1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: KnAnETgsBlaA65XvNPPIRNEbE7JeAn6KBJJD0lCT92I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:dc:75:96:42:65:9a:fd:e9:82:de:b6:53:8b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Validity
Not Before: Sep 23 21:00:26 2026 GMT
Not After : Sep 24 21:00:26 2026 GMT
Subject: CN=eee04c2c22c030775555c1550599671b21abccea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:a8:25:19:a0:67:41:fe:6e:41:c9:50:40:
c9:ac:87:83:9b:d7:10:50:91:b5:6e:f4:6a:9d:05:
9b:b7:7c:b7:33:04:8a:d2:f7:da:6f:35:73:8e:48:
1d:3f:44:34:87:13:8e:b7:47:82:b4:1b:c0:9d:7c:
e7:c3:e0:59:50:bc:ad:e0:54:23:19:9a:17:e2:29:
31:7a:90:10:7c:4b:61:73:5e:33:d8:1f:79:d6:8f:
d8:16:0b:f0:26:47:eb:d8:2f:26:ea:47:e2:99:84:
58:2b:d8:bc:d4:bf:1c:43:69:ad:6d:12:66:52:42:
28:75:ce:17:fe:4a:f2:15:15:58:a6:26:66:b6:aa:
b8:99:fa:9d:8c:4c:3a:b0:21:d6:2e:18:6b:47:07:
60:c6:6d:5c:10:4b:60:e7:80:7b:a2:19:49:ff:8a:
a5:32:94:b4:c5:b3:e8:42:ab:f4:02:ff:4a:59:65:
7c:9c:98:2c:b8:40:4a:52:d0:f4:c8:d7:6e:16:12:
df:ed:c0:fc:20:97:86:e0:91:2e:b4:a1:1d:28:e3:
80:90:8c:1d:0a:47:ce:24:fa:97:d8:7c:55:f7:bc:
62:fe:08:8d:f7:9c:48:bb:23:a8:9c:2d:6a:fd:3f:
3b:c4:c0:3e:83:ec:d5:9b:db:e1:f1:58:4f:0a:65:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E0:4C:2C:22:C0:30:77:55:55:C1:55:05:99:67:1B:21:AB:CC:EA
X509v3 Authority Key Identifier:
keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f8:3c:64:c5:cf:36:65:05:a5:79:74:f8:cd:8f:8a:be:0b:
7f:5d:ec:db:e7:7e:88:7c:5c:25:33:2b:0d:bd:3b:77:63:56:
b7:1d:b6:e8:d7:05:52:b9:4a:21:a6:01:05:a2:f9:f6:c1:65:
d0:fb:9f:2c:1b:96:1e:c9:69:aa:cc:4b:a3:e8:a5:e4:d2:e1:
b9:8c:4f:cc:95:f7:e9:81:9b:d3:f0:a6:4b:b6:dd:35:9a:22:
3f:e0:24:e7:56:ed:f8:e3:1b:6a:a2:23:f1:b5:b6:fb:ed:25:
2c:56:49:0b:ee:16:36:fb:a3:63:f8:6c:43:f0:a0:30:79:bf:
28:ef:cb:98:57:ef:c7:64:35:3f:98:6a:e8:b7:f7:e3:8e:ec:
f5:b0:96:94:4c:a3:24:42:70:30:f8:1c:3d:a9:09:1c:ef:b5:
fa:34:85:75:5d:87:58:8a:3c:d1:f0:6a:f6:ef:51:48:6f:b5:
23:48:3c:72:e1:8b:99:14:41:29:8e:d8:cf:a3:f3:e1:ec:26:
4a:0c:8d:e4:95:36:c7:3d:ad:6b:c4:e4:d1:07:13:de:bd:a7:
e3:48:72:91:24:98:b7:0a:d2:a0:9b:58:09:41:ff:cb:5f:47:
0a:58:d5:82:4e:c4:c0:ad:36:f9:45:8d:61:cb:d6:0c:f5:1e:
2c:30:cc:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEdx1lkJlmv3pgt62U4tuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMmYwODc1NmY1NGVjZDcyODBkMWVhY2NmODc4YWViM2Yy
OGFjNGYwHhcNMjYwOTIzMjEwMDI2WhcNMjYwOTI0MjEwMDI2WjAzMTEwLwYDVQQD
EyhlZWUwNGMyYzIyYzAzMDc3NTU1NWMxNTUwNTk5NjcxYjIxYWJjY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsaoJRmgZ0H+bkHJUEDJrIeDm9cQ
UJG1bvRqnQWbt3y3MwSK0vfabzVzjkgdP0Q0hxOOt0eCtBvAnXznw+BZULyt4FQj
GZoX4ikxepAQfEthc14z2B951o/YFgvwJkfr2C8m6kfimYRYK9i81L8cQ2mtbRJm
UkIodc4X/kryFRVYpiZmtqq4mfqdjEw6sCHWLhhrRwdgxm1cEEtg54B7ohlJ/4ql
MpS0xbPoQqv0Av9KWWV8nJgsuEBKUtD0yNduFhLf7cD8IJeG4JEutKEdKOOAkIwd
CkfOJPqX2HxV97xi/giN95xIuyOonC1q/T87xMA+g+zVm9vh8VhPCmUwnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7gTCwiwDB3VVXBVQWZZxshq8zqMB8GA1UdIwQY
MBaAFNwvCHVvVOzXKA0erM+Hius/KKxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0M4SWRXOVU3TmNvRFI2c3o0ZUs2ejhvckU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zODk0NzctNTg3MC00ZTJkLWFjODct
Y2M2YmM5NDUzOGZhLzEvM0M4SWRXOVU3TmNvRFI2c3o0ZUs2ejhvckU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zODk0NzctNTg3MC00ZTJkLWFjODctY2M2YmM5NDUzOGZh
LzEvM0M4SWRXOVU3TmNvRFI2c3o0ZUs2ejhvckU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPg8ZMXP
NmUFpXl0+M2Pir4Lf13s2+d+iHxcJTMrDb07d2NWtx226NcFUrlKIaYBBaL59sFl
0PufLBuWHslpqsxLo+il5NLhuYxPzJX36YGb0/CmS7bdNZoiP+Ak51bt+OMbaqIj
8bW2++0lLFZJC+4WNvujY/hsQ/CgMHm/KO/LmFfvx2Q1P5hq6Lf3447s9bCWlEyj
JEJwMPgcPakJHO+1+jSFdV2HWIo80fBq9u9RSG+1I0g8cuGLmRRBKY7Yz6Pz4ewm
SgyN5JU2xz2ta8Tk0QcT3r2n40hykSSYtwrSoJtYCUH/y19HCljVgk7EwK02+UWN
YcvWDPUeLDDMYg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:43:47 2026 by rpki-client