Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
File: 3cf_z32PTDOExrKNBKESsh8jeRA.mft (raw, json)
Hash identifier: 0ts1w7A9ExWw3GykBZlREhoHWCQb0cdPm64b9kLoT9I=
Subject key identifier: 0D:60:8A:2E:72:58:0E:A9:C2:06:CA:A3:B9:09:9E:45:0B:AA:67:AA
Authority key identifier: DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
Certificate issuer: /CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Certificate serial: 019F8F477A9ABA1270A0AA40B6A447981298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
Manifest number: 01D9
Signing time: Thu 23 Jul 2026 14:00:54 +0000
Manifest this update: Thu 23 Jul 2026 14:00:54 +0000
Manifest next update: Fri 24 Jul 2026 14:00:54 +0000
Files and hashes: 1: 3cf_z32PTDOExrKNBKESsh8jeRA.crl (hash: Ey9LFgokqg4Sz2GvGGVOI1d7NMvqNOIGPZMmZfa62h4=)
2: BX4ECMa5PSwMxBNsjfnl8GRXj1s.asa (hash: wiV7d2L86p523gY92Ip5gfxBxVerpTdBSH5xKncDAqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:7a:9a:ba:12:70:a0:aa:40:b6:a4:47:98:12:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Validity
Not Before: Jul 23 14:00:54 2026 GMT
Not After : Jul 24 14:00:54 2026 GMT
Subject: CN=0d608a2e72580ea9c206caa3b9099e450baa67aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:6d:59:da:b4:6d:3d:49:b0:59:8d:45:3c:
34:8b:07:39:a7:55:64:82:9c:c1:35:79:09:8b:1c:
da:72:b5:bb:01:39:2f:a3:c8:61:5a:31:a7:d0:05:
2f:5c:39:dd:0e:bb:2c:f7:45:34:21:9b:6b:73:ca:
3f:cd:f7:4d:51:c1:9e:11:ef:63:08:c0:0c:77:6e:
e5:33:e5:ea:81:95:96:72:1a:b1:47:f9:e7:a4:94:
0d:ea:4f:cd:5d:0e:83:59:71:27:f7:4d:4b:cc:cf:
52:57:40:0a:ad:39:7a:76:86:65:b1:69:21:71:63:
de:93:56:e1:d0:54:cb:05:2b:f3:2c:6a:d9:c7:b1:
96:c9:7d:71:ce:28:f9:41:d4:1f:e2:a5:be:e6:92:
e2:14:e0:84:07:79:60:4d:a2:c0:3a:93:b9:d8:52:
28:d8:e2:bb:0a:57:45:6c:29:94:72:63:b3:f9:69:
1b:45:4f:cc:54:a5:05:bd:e8:de:99:d9:dc:5b:85:
17:5d:b4:3a:f5:92:0d:43:96:43:c9:bd:fd:b9:58:
e8:ce:07:4b:1f:06:47:73:0d:10:37:4f:c7:04:03:
0f:db:c3:30:da:a8:85:6e:10:e2:ac:86:c7:e1:dc:
2c:b2:d6:11:6e:90:6c:21:34:c6:6c:c7:d9:b3:c3:
8e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:60:8A:2E:72:58:0E:A9:C2:06:CA:A3:B9:09:9E:45:0B:AA:67:AA
X509v3 Authority Key Identifier:
keyid:DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cf:cc:16:b0:af:68:77:66:8a:23:4d:9a:b9:8c:00:aa:0e:
03:48:95:25:9f:7e:74:14:25:da:19:9b:26:16:a0:6b:b9:96:
a1:9c:84:52:cd:fb:41:cc:17:20:6d:08:76:e3:2e:02:21:13:
f0:87:39:4c:c3:6e:f1:db:57:fb:28:93:1b:8b:85:02:5f:03:
1d:9c:ca:1f:77:56:62:ee:9a:34:67:ff:de:fa:66:67:9d:c4:
26:2d:5e:20:ea:97:e8:53:5e:76:40:07:af:0b:94:71:48:18:
08:28:27:d5:5c:92:3c:e4:d5:87:71:fa:20:42:33:81:aa:ee:
0d:09:bb:3a:e6:f6:f9:8c:94:03:d6:2c:dd:68:06:71:86:72:
4a:90:c7:ea:b5:c5:61:90:10:d2:ce:ee:6f:ad:89:b3:b9:b7:
35:94:ad:c1:af:a1:99:94:24:30:24:0c:31:1b:61:66:e0:39:
19:50:d3:98:0d:b3:b4:2f:5d:c5:c4:22:b5:6f:73:c2:54:2f:
0a:69:f3:b8:93:89:38:b1:44:17:ff:76:79:95:87:d7:d0:0d:
37:d5:fa:13:2d:f5:1c:51:54:0a:47:aa:ee:07:88:17:43:a4:
fd:f1:88:64:f5:81:ff:5d:56:6b:a7:a4:a4:1b:25:d5:68:15:
5f:5e:70:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:21 2026 by rpki-client