Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
File: 3cf_z32PTDOExrKNBKESsh8jeRA.mft (raw, json)
Hash identifier: VEFRBP8A2QCvNll5HV0xiHlVU/GDjkaFXbPZTNLnB0M=
Subject key identifier: 22:0E:23:55:A5:82:D9:80:F8:EE:FD:E3:D6:32:ED:B6:5D:12:8C:A3
Authority key identifier: DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
Certificate issuer: /CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Certificate serial: 019E1E6C4A85622BEE08F02762F07F083FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
Manifest number: 011A
Signing time: Tue 12 May 2026 23:01:13 +0000
Manifest this update: Tue 12 May 2026 23:01:13 +0000
Manifest next update: Wed 13 May 2026 23:01:13 +0000
Files and hashes: 1: 3cf_z32PTDOExrKNBKESsh8jeRA.crl (hash: /Sw/nj+DwPDvysPV+8k5Q+lfBSI0laTpMQZfPZraLLc=)
2: BX4ECMa5PSwMxBNsjfnl8GRXj1s.asa (hash: wiV7d2L86p523gY92Ip5gfxBxVerpTdBSH5xKncDAqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:4a:85:62:2b:ee:08:f0:27:62:f0:7f:08:3f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Validity
Not Before: May 12 23:01:13 2026 GMT
Not After : May 13 23:01:13 2026 GMT
Subject: CN=220e2355a582d980f8eefde3d632edb65d128ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:b6:0d:f5:79:6c:3d:0c:ce:fc:71:3b:a7:
2c:85:bf:8f:95:f6:e9:16:53:3c:fc:8a:70:6d:fe:
6f:16:3c:26:d7:12:36:e5:ae:b3:70:32:25:99:04:
53:61:4f:e0:2f:df:b2:b3:d1:18:f3:f3:c4:ef:3f:
e8:53:77:4b:80:ce:10:71:19:ea:f7:7c:b8:ec:e3:
22:01:47:b2:d3:97:38:2a:f6:51:55:2d:2d:f9:d7:
fd:f1:78:0b:5d:1e:c3:84:f3:74:95:d6:5b:25:d9:
13:b2:39:33:8a:18:27:97:c6:3c:a9:e7:ca:01:6c:
87:a2:89:92:bc:70:c1:d9:41:68:6f:e5:f3:1f:42:
66:55:39:66:87:79:78:4b:be:4a:6f:23:04:49:ea:
6a:69:ca:13:25:3e:1c:b7:4d:ed:63:b2:83:0a:b5:
64:07:a7:a3:24:aa:ad:a0:20:e7:5b:5f:c6:ac:66:
68:65:22:a4:c6:28:cd:18:c9:4d:e2:22:2a:a8:54:
5d:5a:c1:26:0c:be:b4:55:e0:d9:33:ae:cb:b7:e5:
3e:58:38:aa:36:1c:ac:ae:77:e9:95:b0:17:b0:a5:
7c:b9:c5:7f:27:ac:bb:8e:b2:ef:1e:ae:88:5c:9f:
bc:6c:0b:9e:3e:75:1d:cb:f1:fd:bb:7b:33:c0:ff:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0E:23:55:A5:82:D9:80:F8:EE:FD:E3:D6:32:ED:B6:5D:12:8C:A3
X509v3 Authority Key Identifier:
keyid:DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b3:11:be:2f:38:9c:8d:39:7e:55:4c:81:88:9e:eb:32:bd:
8f:5b:ef:0b:76:0f:83:20:0a:32:e6:5f:ae:7c:1b:f3:76:af:
87:69:3c:77:e7:e7:6f:12:fc:d9:a9:20:2d:fc:66:bd:6a:02:
9b:78:c7:97:a4:00:12:2d:81:85:59:3f:06:51:3a:fe:6e:1a:
cb:c1:07:4e:8e:0e:7e:41:29:73:bb:0f:b6:7c:b7:d8:2f:91:
8e:2e:1a:1c:c1:07:e9:aa:8e:98:76:5f:2f:1d:fb:37:fe:86:
b5:e3:74:02:37:a2:c4:27:e6:b5:63:0f:02:c2:08:3a:40:3c:
01:60:ca:8b:f2:fa:85:2d:9f:6f:db:cb:ad:04:3f:a5:7d:df:
b3:c9:e5:88:e9:6c:25:7f:8d:8a:4d:ec:62:2d:d3:d0:a6:12:
3c:de:09:ca:d8:9d:2e:63:94:73:d6:79:ef:a6:81:53:91:e3:
3e:3e:8a:a9:ff:52:d3:75:31:11:c7:f2:00:6f:0b:3c:d1:bd:
fe:7d:7e:b8:db:25:75:8f:6a:78:e0:c7:47:4e:e2:9d:53:12:
ca:d7:13:e4:0f:60:cd:7f:40:2b:1e:95:ef:85:f9:02:79:72:
30:09:34:4d:4d:9c:e4:9d:a6:8f:5a:07:d2:96:65:c3:2e:40:
ae:6a:f0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:42:08 2026 by rpki-client