Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
File: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft (raw, json)
Hash identifier: x/wMKkV+sj8YESbtqbn528xQ4yZ9KNc+k80hsVblXTM=
Subject key identifier: 23:CF:44:5B:8B:34:C5:04:D8:00:C1:97:52:19:CF:4A:20:6A:4E:39
Authority key identifier: DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
Certificate issuer: /CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Certificate serial: 01A0D192B05FAD12926B66045AD1E9D2CA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
Manifest number: 0284
Signing time: Thu 24 Sep 2026 04:00:46 +0000
Manifest this update: Thu 24 Sep 2026 04:00:46 +0000
Manifest next update: Fri 25 Sep 2026 04:00:46 +0000
Files and hashes: 1: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl (hash: i0nOa1CxVu3rWcZO9AsplWmR03TO/si06l04qCqImag=)
2: VGuckUmXD3FffNojHBh4mr4L2f8.roa (hash: 8TbPfvVyzj3G5WKw2nSbHXcBZE5w35KkZHPmx5cAQsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:b0:5f:ad:12:92:6b:66:04:5a:d1:e9:d2:ca:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Validity
Not Before: Sep 24 04:00:46 2026 GMT
Not After : Sep 25 04:00:46 2026 GMT
Subject: CN=23cf445b8b34c504d800c1975219cf4a206a4e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:3a:52:a6:84:3c:72:34:ff:4e:a5:5a:d1:
43:31:1c:be:1f:20:45:1e:2d:5b:5f:f7:e9:a7:d3:
32:76:1c:6a:31:b8:0e:8e:f3:7e:cd:da:05:41:45:
57:01:eb:f8:09:a5:9b:d5:59:7c:bc:3d:1e:23:aa:
c7:b3:8d:f8:ce:b6:88:49:d9:f6:3d:c3:b2:d8:13:
43:31:fb:b5:76:58:cd:c9:07:bc:11:34:d5:9b:69:
ec:a6:a1:8d:eb:e3:68:1f:54:54:65:9a:ac:04:8d:
02:9c:2e:07:47:f4:42:6d:54:74:dc:30:6d:d4:43:
35:69:dd:5b:ba:3b:04:e1:d2:ac:61:b9:42:e3:df:
05:42:dd:ab:8d:5d:0b:10:f4:be:da:b6:d5:54:98:
7b:c7:81:08:5c:74:b9:59:56:ee:10:70:a6:6c:40:
1e:ca:a6:cf:75:b7:f9:b5:8e:7f:b8:56:ae:12:5c:
55:93:10:05:ea:44:2b:71:43:8f:32:1e:09:46:cd:
66:93:18:84:70:15:78:48:a9:ed:46:69:65:c2:10:
ac:4d:1c:a1:48:67:98:29:69:3e:dd:18:6f:f4:bf:
80:9b:a1:5b:0d:a4:c9:5a:cc:bd:bd:bd:0b:d6:f9:
6c:29:91:41:62:52:a7:a7:b7:10:9f:f5:4f:9a:9d:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CF:44:5B:8B:34:C5:04:D8:00:C1:97:52:19:CF:4A:20:6A:4E:39
X509v3 Authority Key Identifier:
keyid:DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e5:4e:6a:b6:7d:eb:82:be:37:2d:f8:1c:14:20:6e:65:51:
40:36:b6:23:71:fb:86:26:fa:d3:49:05:f2:df:4d:5a:7f:b5:
94:bf:e3:79:b6:dd:ee:5d:57:b9:38:3a:a4:42:cb:d0:44:65:
5c:c5:aa:65:bf:29:39:14:9d:06:c3:e6:ef:fc:ef:33:fc:dc:
8e:89:ba:b8:8a:4a:e7:35:82:fd:f3:3d:1d:79:fb:8f:22:3a:
39:16:e7:77:4c:3d:19:32:51:ed:f1:28:eb:f6:f7:da:21:6b:
1f:58:41:b8:a1:37:e0:b1:9a:e6:d2:1c:0e:51:86:15:54:fd:
bf:b3:91:ee:a5:04:5b:3f:48:b0:f2:df:ee:97:32:64:39:7c:
1c:e5:e4:bc:31:39:fc:c3:6f:ff:35:85:65:71:8e:32:ec:05:
0f:0c:75:eb:62:d6:e0:7f:d7:fb:20:a7:23:5b:01:59:0b:b4:
e8:e7:11:e2:1c:70:ff:a4:be:b0:90:c7:92:38:bb:a8:eb:0d:
5a:0b:92:65:6b:d9:d8:41:97:f1:37:56:10:63:c2:10:51:55:
21:4b:90:ae:6f:9a:8a:23:a6:0e:0a:93:56:a5:86:4f:fd:23:
1d:ef:b2:4c:a0:5a:8e:52:29:04:e3:c8:ca:12:88:fd:22:69:
e2:a2:95:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:27:03 2026 by rpki-client