Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
File: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft (raw, json)
Hash identifier: fgatGr/tCE+Pe/7LC2+35tV0KhM2RMdYiMInJnFEEnk=
Subject key identifier: BC:FE:77:B2:4C:14:1C:87:A8:46:91:DA:95:49:2D:42:6E:FF:4D:03
Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
Certificate issuer: /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Certificate serial: 019D254CD87C63EA84689BEF3FD230503A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
Manifest number: 173D
Signing time: Wed 25 Mar 2026 14:01:26 +0000
Manifest this update: Wed 25 Mar 2026 14:01:26 +0000
Manifest next update: Thu 26 Mar 2026 14:01:26 +0000
Files and hashes: 1: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl (hash: 16VHgFIst2bd/1S9Kni/+bzupE81aJDuVQwC3IrZfto=)
2: AmRr-NsaiHfyuDev91oo1Zo4i14.asa (hash: flczz05UDoBZbjGuSiDnaa69UqT7dfOGNjaT7YBFlc8=)
3: FNdC6V014hPt1Cj_9ePfXPj82Z8.roa (hash: me6C5aY++lhd9zOBr03z1dtrXd+vXTlDDm5g9m7Go/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:d8:7c:63:ea:84:68:9b:ef:3f:d2:30:50:3a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Validity
Not Before: Mar 25 14:01:26 2026 GMT
Not After : Mar 26 14:01:26 2026 GMT
Subject: CN=bcfe77b24c141c87a84691da95492d426eff4d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:1d:72:b4:ad:21:72:39:81:2f:35:b1:1f:
c3:22:ee:ed:a4:ab:d7:c7:f4:1d:49:d9:a3:53:90:
5d:0a:52:ad:86:48:c2:31:e1:2e:58:56:67:41:0e:
41:e4:54:15:e0:45:0a:51:0d:24:15:c8:7f:1a:83:
fa:93:22:4f:52:d0:b2:77:39:69:ab:f9:92:5f:e3:
a2:f5:7f:f8:02:50:1c:63:e4:4c:df:51:30:d4:b8:
c4:73:ec:4f:ff:e5:6f:67:fa:af:7c:85:cf:31:53:
7b:94:7d:22:71:2a:34:b7:1c:17:29:4a:73:41:48:
6a:28:9f:11:52:11:02:7f:7f:60:95:ff:7c:56:d2:
22:92:3a:b6:7b:22:39:23:e4:11:5d:22:6a:b2:3d:
d9:7e:46:16:82:bb:4d:79:53:0b:e2:00:27:e0:86:
91:65:6b:5a:49:d2:b9:03:e4:b4:75:c1:32:90:15:
9a:15:dd:e1:cc:d9:7d:87:a5:63:bc:64:6d:f0:57:
16:86:ae:22:dc:ed:60:2f:f5:c7:6e:f1:81:44:3f:
80:50:ef:0f:b7:f8:90:b6:bc:f8:67:e3:f2:5e:4d:
de:c0:46:4b:0a:5f:f6:64:a7:60:23:9c:cf:d7:b8:
e4:19:b0:33:8e:1b:5a:db:fa:30:f6:4f:e2:76:c3:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FE:77:B2:4C:14:1C:87:A8:46:91:DA:95:49:2D:42:6E:FF:4D:03
X509v3 Authority Key Identifier:
keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a5:57:e0:e7:ca:26:a9:df:74:67:c2:6b:66:c8:25:58:86:
a6:aa:a4:b6:b3:fd:e2:bb:25:4b:30:6e:16:05:20:05:4b:9c:
21:5a:ae:2e:ba:d9:e7:14:31:78:59:77:fc:16:ce:8e:d7:60:
e4:78:af:9c:71:ff:87:be:7e:9b:3d:b6:4a:37:4b:4e:e4:5f:
e1:ee:44:d4:67:5b:8f:7f:e0:9d:e4:e0:44:ea:b8:ad:71:cd:
24:61:d9:fb:d4:98:ac:fe:65:cc:82:c6:dc:da:3f:fa:36:fa:
7f:9e:69:81:c8:80:a8:35:04:0b:92:2e:73:48:bb:e4:46:03:
eb:f6:da:aa:b8:f3:75:91:70:de:be:51:af:68:52:78:ce:03:
8c:64:09:22:5e:b5:91:46:2d:ae:88:9d:ad:ad:21:29:bc:d5:
66:72:2b:69:7d:dc:4b:83:c7:11:d6:1f:77:b8:bb:64:e1:8d:
8e:46:cc:78:5c:5a:77:05:a1:68:13:4a:fb:40:9c:79:27:ca:
8f:e1:dc:f6:b9:8a:fd:49:5f:d8:06:64:c4:87:a7:8a:9f:c2:
d7:bf:c2:24:d9:84:d8:09:14:cd:7f:41:91:47:b0:2d:d8:a2:
7b:7d:f6:a2:72:d4:7f:e1:ad:64:46:3e:9c:47:14:40:df:a1:
2c:ad:7f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:46 2026 by rpki-client