Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
File: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft (raw, json)
Hash identifier: bXB2bfhu7HJp/jmgPYlnBo3CX/+tCPmN90x43YxPRJU=
Subject key identifier: 53:00:E9:33:ED:45:B2:99:F3:E9:64:4A:72:BD:DE:0F:01:AA:FB:09
Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
Certificate issuer: /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Certificate serial: 01A0CA0FE3E01B9EDECBF543F51A752A8D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
Manifest number: 1920
Signing time: Tue 22 Sep 2026 17:00:33 +0000
Manifest this update: Tue 22 Sep 2026 17:00:33 +0000
Manifest next update: Wed 23 Sep 2026 17:00:33 +0000
Files and hashes: 1: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl (hash: drUaD5cWU/1rRA6mkJjoc9L0ulxiNsCdDFPs6HsRaGI=)
2: AmRr-NsaiHfyuDev91oo1Zo4i14.asa (hash: flczz05UDoBZbjGuSiDnaa69UqT7dfOGNjaT7YBFlc8=)
3: FNdC6V014hPt1Cj_9ePfXPj82Z8.roa (hash: me6C5aY++lhd9zOBr03z1dtrXd+vXTlDDm5g9m7Go/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:e3:e0:1b:9e:de:cb:f5:43:f5:1a:75:2a:8d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Validity
Not Before: Sep 22 17:00:33 2026 GMT
Not After : Sep 23 17:00:33 2026 GMT
Subject: CN=5300e933ed45b299f3e9644a72bdde0f01aafb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1c:44:d6:36:68:1c:c8:82:14:d1:f7:54:d9:
ce:bb:2e:4c:f7:d9:5e:25:6b:68:10:9d:f0:d8:2c:
a1:bd:8d:32:3d:f9:a2:91:26:c5:ec:f5:9e:64:67:
e0:50:26:56:06:94:3e:ea:62:86:80:6f:a2:ee:64:
c0:d5:aa:8b:b9:6b:56:ef:64:8d:78:5e:55:85:39:
e0:3e:a2:9c:fd:5b:ba:49:7f:22:a3:2e:58:b9:36:
ab:28:fa:94:6e:1d:5a:0e:4b:d8:1c:55:bc:3f:30:
f0:82:59:58:39:5e:58:fd:91:6c:7c:0e:2a:e2:12:
f6:ac:98:82:97:38:f8:a7:ba:12:d1:6e:68:36:9c:
c3:59:76:d3:16:46:46:2e:a9:6a:93:3f:e2:12:fa:
a7:8b:67:44:0d:c9:55:ed:a7:2f:12:e2:b8:a2:1a:
be:51:6e:07:66:f2:c2:f4:0e:3a:0b:05:ae:81:c3:
7a:ef:fc:70:4a:83:13:9e:5e:c7:94:6f:36:09:d2:
7f:d6:55:69:1a:52:48:6b:da:78:a0:21:c4:6c:aa:
b5:5b:d9:74:c0:a0:57:e4:f9:34:bd:28:9b:0b:0d:
4f:dd:61:8c:9d:1f:82:5f:3c:76:7c:96:d7:19:d6:
1c:66:52:1c:48:ab:f3:8b:49:2c:93:03:fb:30:ed:
7e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:00:E9:33:ED:45:B2:99:F3:E9:64:4A:72:BD:DE:0F:01:AA:FB:09
X509v3 Authority Key Identifier:
keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1b:8e:e2:91:a1:de:5e:4a:66:f7:7d:6e:1b:0d:2e:17:e3:
fc:6d:2a:73:3d:17:17:bd:55:a5:d9:87:88:40:ab:ff:62:a6:
d7:08:96:ab:20:f8:56:be:49:39:ab:e4:10:d9:c9:be:d0:3a:
51:1f:e2:5f:2c:41:56:71:e9:1a:e3:73:90:38:54:03:13:5a:
85:b0:98:de:a0:ba:16:80:f9:41:38:c2:d5:60:64:b7:34:a0:
44:16:54:ab:5a:64:44:19:81:2c:27:a7:e2:f5:de:2b:b5:9a:
0f:58:e3:5e:4a:bc:ba:70:d3:53:9e:95:24:64:45:61:45:f4:
33:b3:1d:77:1d:a5:78:e6:c9:5a:13:78:37:10:29:10:96:4b:
62:8b:28:fa:15:a4:23:a2:85:8e:57:4f:9c:f6:62:d7:f3:60:
d4:96:e3:69:a6:c2:72:c1:a1:00:3d:e2:14:64:94:63:38:83:
3e:83:14:2f:e9:6e:80:53:74:33:d7:70:d7:cb:a9:05:35:0a:
44:e1:cf:25:77:9c:56:30:ee:33:32:43:c5:9b:6a:62:72:c7:
8f:32:e8:ce:05:02:19:d3:58:13:be:5a:53:5f:63:a1:30:62:
b2:21:ec:a4:de:85:5b:5c:38:ae:57:ad:ed:19:ea:c9:7e:86:
7f:15:28:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:32:50 2026 by rpki-client