Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
File: 3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json)
Hash identifier: ZhgtyURq1PQf2RuwMGBQXEZTEHMFpU5JGaF1sot6prY=
Subject key identifier: 07:90:94:5E:A4:7C:23:2B:E1:CA:A9:DA:51:D1:E4:88:E8:2C:12:B8
Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
Certificate issuer: /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Certificate serial: 019F916CE195A96BC8434819B43F40F82985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
Manifest number: 16D4
Signing time: Fri 24 Jul 2026 00:00:59 +0000
Manifest this update: Fri 24 Jul 2026 00:00:59 +0000
Manifest next update: Sat 25 Jul 2026 00:00:59 +0000
Files and hashes: 1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: SWEvmSz6GlKhESpxEmLTbSDTydPe7j2m+W+Qacaa0ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:e1:95:a9:6b:c8:43:48:19:b4:3f:40:f8:29:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Validity
Not Before: Jul 24 00:00:59 2026 GMT
Not After : Jul 25 00:00:59 2026 GMT
Subject: CN=0790945ea47c232be1caa9da51d1e488e82c12b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:7c:a5:cf:31:44:f4:1c:83:bb:cf:6c:fc:
cb:89:e2:f2:c6:8f:04:6f:83:a1:db:5b:9d:70:99:
2d:c5:69:c8:21:95:71:e2:fb:50:8a:3b:13:68:db:
a2:c7:9e:86:cc:9d:3d:33:0e:5e:cb:e4:a2:f2:ee:
39:66:a3:8e:dd:f9:01:52:f2:39:18:db:50:d2:49:
cc:67:cc:cf:75:ea:67:96:13:75:c8:c5:89:66:70:
91:be:5a:47:9c:04:31:6e:ed:f2:a2:85:aa:3e:ba:
d4:a8:2f:2f:81:47:78:49:46:60:cf:f2:dd:cf:9f:
22:36:79:6e:13:e9:3a:d9:15:2c:1d:b3:86:fe:1d:
bc:de:c0:85:dc:8e:03:a7:b8:97:c5:6b:04:85:71:
52:9b:d7:a3:85:10:62:8b:d5:0e:36:ff:e3:e0:62:
46:24:7a:85:87:b8:e7:b0:00:2a:62:65:24:d5:e5:
a4:1e:3e:7e:12:c8:b2:9e:9d:24:03:4b:38:f0:0e:
4e:21:4a:63:a2:52:43:31:05:2b:bb:f8:27:b2:7e:
e6:95:ef:80:a0:0c:6e:83:43:7e:1c:73:03:f9:74:
26:ec:ce:68:33:de:cd:2e:37:c3:7f:ea:09:d0:44:
af:36:72:a3:b6:75:02:ae:a6:05:d5:25:cf:dc:60:
4f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:90:94:5E:A4:7C:23:2B:E1:CA:A9:DA:51:D1:E4:88:E8:2C:12:B8
X509v3 Authority Key Identifier:
keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c7:d9:59:6d:54:df:cd:a0:f4:63:fb:01:73:60:ca:b3:45:
73:15:09:f7:f1:a8:ac:65:ae:9d:bf:21:cd:40:de:29:61:dc:
7c:63:88:52:54:5f:12:7a:78:3d:fb:d0:29:80:fa:85:da:0f:
f2:79:f1:c8:8a:25:12:93:1c:b0:92:69:94:67:d0:9d:77:4a:
52:bc:03:0f:c9:f3:68:4a:dd:79:d9:c2:91:7d:50:17:1b:cb:
cf:d5:cb:36:bf:a2:de:cc:d0:f4:7f:f7:fb:60:48:9f:a1:8e:
f1:80:51:f7:ec:d6:64:59:26:0a:d1:7e:62:f9:47:08:1d:95:
d4:82:61:19:ee:ab:58:9f:e5:39:d2:cd:df:0f:5e:48:0d:54:
5b:7c:9d:67:bb:e4:f9:24:ed:b0:6c:8a:8d:89:82:92:62:17:
df:53:c1:c3:0e:98:23:13:6b:d9:c2:9a:74:0f:ef:a1:d5:0b:
f0:6b:1a:af:eb:35:f6:33:56:b4:77:05:f6:50:9c:70:46:80:
1b:fc:0c:1a:5c:f6:54:ce:dd:99:39:f4:6a:fb:cf:ff:53:22:
5c:e7:3f:14:56:b4:9b:01:4a:3b:40:33:da:df:9d:8e:17:41:
69:f0:73:5e:02:4c:cb:be:49:c3:82:ff:0a:4d:5c:ee:f1:f1:
cc:30:08:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:32 2026 by rpki-client