Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
File: 3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json)
Hash identifier: azp7vNaM/Md6N1BmqOK+6tIxaMnm9LbVEDDP+AmZBWI=
Subject key identifier: 2E:74:4D:35:72:CE:A5:18:53:33:C0:2C:07:D5:32:55:B1:96:3E:B9
Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
Certificate issuer: /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Certificate serial: 019D258354478C7C638E6FFA0524AF19D268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
Manifest number: 1593
Signing time: Wed 25 Mar 2026 15:00:56 +0000
Manifest this update: Wed 25 Mar 2026 15:00:56 +0000
Manifest next update: Thu 26 Mar 2026 15:00:56 +0000
Files and hashes: 1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: ioFPl6T60QtVIqks1olT0AR4kt27aRY4PgAbORPpEvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:54:47:8c:7c:63:8e:6f:fa:05:24:af:19:d2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Validity
Not Before: Mar 25 15:00:56 2026 GMT
Not After : Mar 26 15:00:56 2026 GMT
Subject: CN=2e744d3572cea5185333c02c07d53255b1963eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d4:8d:56:3c:2e:3f:30:22:7b:cc:b6:96:48:
87:b6:30:70:a0:3d:01:4e:85:67:cd:0b:70:c1:0b:
34:30:e6:ad:8c:24:a6:4c:54:8e:2a:d6:48:cc:6d:
7d:c8:4a:5b:5a:74:30:c5:e2:53:e2:19:5f:e7:31:
40:a4:ee:93:66:75:04:53:c9:41:53:29:b3:f1:07:
78:ac:fb:f6:21:b3:6a:81:03:5f:69:f2:71:4e:58:
50:a7:6f:2a:7a:70:99:3c:21:10:21:00:74:ec:5d:
18:83:3e:22:bc:23:93:81:70:3c:12:b6:c6:a5:26:
4c:27:88:06:92:fd:09:bd:b1:01:46:70:ed:28:89:
f2:99:4b:02:2a:e4:3f:ca:ab:aa:ff:c9:96:48:9c:
55:50:92:72:89:1f:00:b7:85:ef:8f:62:56:f6:8d:
36:d4:67:73:42:09:fb:d7:f5:65:83:22:08:31:4a:
44:c3:90:40:a9:47:f6:31:fa:b3:88:3a:b6:0c:9a:
54:68:99:86:bd:00:f4:2e:3a:07:5f:64:cc:a8:30:
23:1c:68:15:33:6a:64:90:59:ed:f1:c9:33:e5:72:
ee:38:57:00:1d:93:1d:48:6e:f7:30:e8:2c:8b:92:
83:54:ef:21:69:6e:35:5f:a2:bb:70:ff:a1:41:f5:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:74:4D:35:72:CE:A5:18:53:33:C0:2C:07:D5:32:55:B1:96:3E:B9
X509v3 Authority Key Identifier:
keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:58:71:f4:b8:cf:30:e9:a3:ac:2c:ab:50:01:23:0b:f3:88:
62:cf:b2:02:11:86:66:ec:64:d5:88:9f:89:1e:fa:9c:29:45:
19:ef:e4:86:dc:3a:8a:bf:c4:a1:62:fc:43:bc:ca:f2:65:13:
c1:9d:9e:53:b3:70:be:16:4f:34:3e:08:a0:23:ce:a6:07:b9:
12:24:f2:ea:30:3b:19:5e:56:42:92:31:50:25:94:7e:8a:10:
5d:d3:88:6a:dd:46:07:4e:4f:98:87:ce:85:5c:da:f2:be:4a:
c9:cc:29:54:19:7b:6b:80:a2:94:87:7e:b8:7f:e0:95:59:cc:
8d:14:24:8f:59:4c:83:eb:87:34:45:54:0a:9d:37:70:a1:7d:
18:a3:04:0a:73:2c:b0:ee:ef:a3:31:93:4a:f0:30:73:52:36:
01:e9:f5:7f:29:1e:7e:ca:f3:ac:81:cb:09:ad:eb:1d:82:2c:
93:0b:cc:a3:ec:9f:83:77:93:fa:7a:24:54:42:9e:3d:69:6c:
8f:a0:e3:08:aa:16:6f:d9:19:18:58:03:42:78:71:07:3f:5b:
72:f9:84:39:70:bf:b5:f2:b4:ff:16:e9:a4:4e:f2:f6:5e:f7:
a8:37:6a:fb:10:a2:dc:13:d8:23:0e:aa:ba:1f:34:66:11:99:
a1:7f:01:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:10 2026 by rpki-client