Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
File: 3cf_z32PTDOExrKNBKESsh8jeRA.mft (raw, json)
Hash identifier: 3jjpzx+pGqb37Tq9ofP54CKPHxkr7cI9RQWWIqnAQDA=
Subject key identifier: C5:2F:5D:43:AD:7F:90:EC:F4:8F:E8:46:E8:34:45:AA:7E:66:29:AE
Authority key identifier: DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
Certificate issuer: /CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Certificate serial: 019D32D0DB9EFC0F6FBDDCD168B7E4486BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
Manifest number: A0
Signing time: Sat 28 Mar 2026 05:00:41 +0000
Manifest this update: Sat 28 Mar 2026 05:00:41 +0000
Manifest next update: Sun 29 Mar 2026 05:00:41 +0000
Files and hashes: 1: 3cf_z32PTDOExrKNBKESsh8jeRA.crl (hash: uzhoSHYZD17yK8lQfmCAdpx2B+jSBMUCBTjJ7olrHWY=)
2: BX4ECMa5PSwMxBNsjfnl8GRXj1s.asa (hash: wiV7d2L86p523gY92Ip5gfxBxVerpTdBSH5xKncDAqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:db:9e:fc:0f:6f:bd:dc:d1:68:b7:e4:48:6b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Validity
Not Before: Mar 28 05:00:41 2026 GMT
Not After : Mar 29 05:00:41 2026 GMT
Subject: CN=c52f5d43ad7f90ecf48fe846e83445aa7e6629ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:c2:98:9c:ec:c8:4d:41:87:d6:3a:f3:00:
6b:aa:a6:a1:36:24:b4:06:92:02:13:43:b5:89:71:
8c:14:29:49:52:6a:02:d2:12:50:82:dc:24:aa:28:
d4:61:69:57:71:5f:55:c4:3c:bc:d4:a9:28:f9:bc:
ed:58:07:63:e9:44:66:8a:2f:0b:ba:86:20:18:5e:
74:91:7e:36:99:1c:1c:7b:fc:95:0a:8f:8d:f2:d4:
6f:22:b4:cc:75:c0:fd:de:df:e8:59:7b:ea:0b:a4:
3c:8c:88:2d:3b:80:a0:bd:9d:5b:18:cf:f3:82:3f:
d8:86:8a:e4:d7:e4:b1:94:97:ae:bf:7f:fe:a3:f3:
0a:c7:e0:6a:64:5f:8f:6a:9c:06:b0:42:3b:4c:32:
af:55:36:92:d1:92:17:e7:48:97:1d:25:aa:de:9b:
86:a6:4a:36:a6:ba:cf:8f:d9:6b:b6:0c:6c:18:4d:
a0:59:98:eb:a6:3d:1f:ba:9d:65:77:e0:3d:b4:4f:
57:1e:ff:c2:e2:a0:22:d0:3e:76:33:f1:fd:e3:4b:
eb:e6:b7:a7:55:11:0d:fe:a0:5f:e1:a9:e8:b5:76:
19:00:32:b8:ef:d9:1b:b9:ca:36:eb:cf:81:fd:8b:
14:9b:90:d1:67:5c:35:d7:53:13:bf:80:1b:d7:5c:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2F:5D:43:AD:7F:90:EC:F4:8F:E8:46:E8:34:45:AA:7E:66:29:AE
X509v3 Authority Key Identifier:
keyid:DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3d:4d:ab:30:63:9d:1b:18:c7:20:de:3c:6e:c0:26:ba:55:
5c:90:f3:dd:84:b8:6f:de:da:65:7e:a4:56:90:0e:d9:1a:de:
e1:79:b7:e5:d7:6a:3b:67:a9:5b:4e:02:38:eb:d7:58:f4:5f:
b2:eb:f9:bd:3b:90:44:ae:24:f4:9c:8c:aa:38:c3:d4:f9:1e:
90:00:b6:e5:20:e2:d9:51:d1:ba:69:43:af:53:23:8d:69:e9:
75:06:4e:fd:df:ed:83:08:0a:55:9b:37:30:27:20:d6:79:d5:
bf:57:c0:7b:63:36:a7:aa:57:80:80:69:1e:21:28:90:22:0e:
7a:a3:ec:4f:96:75:38:29:9a:c0:fe:2f:ed:23:e7:4c:20:60:
35:ef:03:5b:7c:73:14:58:6b:27:94:26:79:e0:be:9b:b3:29:
ab:ab:bc:5f:e1:cc:e5:65:91:99:ed:0e:ad:ca:27:0f:4e:8a:
d6:60:a4:0a:77:10:26:eb:86:87:3b:e6:8f:73:89:ec:a0:fe:
92:ce:31:3c:58:50:c0:2f:2c:e4:d8:4b:b9:87:8c:35:e5:cf:
ea:30:4c:52:89:5c:24:9c:5c:c0:c6:48:7a:ed:75:4b:0e:8c:
af:ec:9a:46:b3:42:af:cb:d5:33:34:ed:2e:9d:d7:d9:37:55:
06:8d:24:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:48:58 2026 by rpki-client