Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
File: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft (raw, json)
Hash identifier: BH1I2yJVzm4mtVhpJKjnfRMsncm1cN1dNJordKnpWyI=
Subject key identifier: 68:EA:CC:F0:00:D8:5E:D0:4D:3F:76:D5:99:9C:7E:95:7D:B4:7C:93
Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
Certificate issuer: /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Certificate serial: 019E1C7E1D9DA4AE48FEABA4B8025BC69BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
Manifest number: 17BD
Signing time: Tue 12 May 2026 14:01:27 +0000
Manifest this update: Tue 12 May 2026 14:01:27 +0000
Manifest next update: Wed 13 May 2026 14:01:27 +0000
Files and hashes: 1: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl (hash: SXESTM9KKQp/8qjw68K6DcKDfvihJW/D9VcU+ZQkfkA=)
2: AmRr-NsaiHfyuDev91oo1Zo4i14.asa (hash: flczz05UDoBZbjGuSiDnaa69UqT7dfOGNjaT7YBFlc8=)
3: FNdC6V014hPt1Cj_9ePfXPj82Z8.roa (hash: me6C5aY++lhd9zOBr03z1dtrXd+vXTlDDm5g9m7Go/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7e:1d:9d:a4:ae:48:fe:ab:a4:b8:02:5b:c6:9b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Validity
Not Before: May 12 14:01:27 2026 GMT
Not After : May 13 14:01:27 2026 GMT
Subject: CN=68eaccf000d85ed04d3f76d5999c7e957db47c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:41:ea:93:8b:56:ed:63:e0:3b:cf:63:c0:
e4:47:9e:70:be:8f:51:cc:98:86:6e:ef:6d:83:b8:
0b:79:aa:df:7f:1b:5d:f5:bd:33:61:6a:78:01:42:
6b:1f:54:3e:85:11:75:0a:c9:3d:96:51:58:ee:13:
bc:a4:eb:11:89:a7:16:13:7b:37:f9:2d:76:14:8c:
da:04:3b:3d:d7:5f:f6:45:17:91:1f:50:ca:0b:a6:
45:06:9f:ae:82:b2:05:c0:a6:cc:92:96:fc:12:31:
7c:ca:78:bb:5e:e3:6e:67:7b:14:a4:45:2e:9e:57:
c0:a0:d9:35:ad:6a:4e:42:6e:e4:dc:7c:26:54:c8:
2c:d7:56:1f:ae:90:4b:55:8f:c0:3e:4f:b9:e7:6e:
1f:60:df:e7:09:60:10:2c:f3:4a:bb:39:2d:5f:7c:
a4:c2:08:4f:25:12:05:c5:b0:af:0a:ee:1f:b9:48:
48:9c:33:70:5e:70:40:10:24:2e:87:6d:e3:1e:e6:
41:5a:f2:0c:2b:a7:e7:7a:38:c5:ca:11:0a:88:53:
02:f2:f0:2a:7f:41:1e:e3:48:94:81:72:e4:e1:ec:
e7:36:41:34:ee:7c:46:02:9b:76:40:bf:47:92:61:
e3:92:79:93:6c:88:4a:b8:c6:28:0c:58:99:56:32:
90:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EA:CC:F0:00:D8:5E:D0:4D:3F:76:D5:99:9C:7E:95:7D:B4:7C:93
X509v3 Authority Key Identifier:
keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:84:83:ae:4b:f7:35:af:65:00:c5:79:f9:c7:83:c6:4a:45:
b6:88:a9:dc:36:e3:36:89:97:f8:6b:ca:49:97:98:67:53:e6:
89:ae:7e:d6:86:41:3f:5c:a3:9e:cc:4f:19:bd:5a:28:b4:9d:
bf:5c:92:c8:3f:d0:66:b4:3a:b7:a9:20:99:7a:75:98:73:bc:
0d:9d:d7:a6:91:bc:05:8e:34:ab:61:3a:d6:ac:45:4a:8e:3a:
6e:21:b5:17:e6:23:34:86:09:86:42:49:82:70:1e:55:87:a4:
6e:9d:0d:13:30:21:9a:c6:4d:77:49:88:3b:28:b3:eb:1a:d3:
38:54:8c:ca:f7:5d:86:7d:82:10:1d:91:2f:9e:3e:59:f1:cb:
27:fd:8e:db:8d:17:93:e1:15:56:da:c2:d6:ec:0f:ed:9b:0e:
60:6b:19:8c:cd:e4:12:f3:bc:0f:7e:bb:81:95:60:d1:e5:89:
b1:56:6a:85:6c:27:e0:7d:8d:e2:93:e8:26:70:6b:90:ba:f2:
2b:55:37:7e:15:b3:e2:d7:6d:4c:a4:ef:da:7c:04:7b:14:3e:
ae:37:10:f1:b6:f0:ec:c8:39:c6:89:1f:84:dc:cd:49:75:be:
c5:a2:8f:32:8e:8a:c0:53:f3:78:84:15:76:63:fc:49:92:50:
14:43:f6:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfh2dpK5I/qukuAJbxpv6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMmMyZmVmOWM4Y2FmOGYyZjA4MjExZWYwMmMzZDBhZDM0
NzQ5MTcwHhcNMjYwNTEyMTQwMTI3WhcNMjYwNTEzMTQwMTI3WjAzMTEwLwYDVQQD
Eyg2OGVhY2NmMDAwZDg1ZWQwNGQzZjc2ZDU5OTljN2U5NTdkYjQ3YzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucFB6pOLVu1j4DvPY8DkR55wvo9R
zJiGbu9tg7gLearffxtd9b0zYWp4AUJrH1Q+hRF1Csk9llFY7hO8pOsRiacWE3s3
+S12FIzaBDs911/2RReRH1DKC6ZFBp+ugrIFwKbMkpb8EjF8yni7XuNuZ3sUpEUu
nlfAoNk1rWpOQm7k3HwmVMgs11YfrpBLVY/APk+5524fYN/nCWAQLPNKuzktX3yk
wghPJRIFxbCvCu4fuUhInDNwXnBAECQuh23jHuZBWvIMK6fnejjFyhEKiFMC8vAq
f0Ee40iUgXLk4eznNkE07nxGApt2QL9HkmHjknmTbIhKuMYoDFiZVjKQLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjqzPAA2F7QTT921ZmcfpV9tHyTMB8GA1UdIwQY
MBaAFNwsL++cjK+PLwghHvAsPQrTR0kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0N3djc1eU1yNDh2Q0NFZThDdzlDdE5IU1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wODUzMWItYmQ2Ni00ZmNlLWE1Njkt
ODY0NGM1ODE0YzlhLzEvM0N3djc1eU1yNDh2Q0NFZThDdzlDdE5IU1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8wODUzMWItYmQ2Ni00ZmNlLWE1NjktODY0NGM1ODE0Yzlh
LzEvM0N3djc1eU1yNDh2Q0NFZThDdzlDdE5IU1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4SDrkv3
Na9lAMV5+ceDxkpFtoip3DbjNomX+GvKSZeYZ1Pmia5+1oZBP1yjnsxPGb1aKLSd
v1ySyD/QZrQ6t6kgmXp1mHO8DZ3XppG8BY40q2E61qxFSo46biG1F+YjNIYJhkJJ
gnAeVYekbp0NEzAhmsZNd0mIOyiz6xrTOFSMyvddhn2CEB2RL54+WfHLJ/2O240X
k+EVVtrC1uwP7ZsOYGsZjM3kEvO8D367gZVg0eWJsVZqhWwn4H2N4pPoJnBrkLry
K1U3fhWz4tdtTKTv2nwEexQ+rjcQ8bbw7Mg5xokfhNzNSXW+xaKPMo6KwFPzeIQV
dmP8SZJQFEP2ng==
-----END CERTIFICATE-----
Generated at Tue May 12 21:37:12 2026 by rpki-client