Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
File: 3cf_z32PTDOExrKNBKESsh8jeRA.mft (raw, json)
Hash identifier: EeLB9tlGnU0UKXBNwmqW/yTdc+9x12VIMhYTvS9QmjU=
Subject key identifier: 93:F9:7D:28:BE:32:FA:5C:FE:25:B0:FB:EB:50:F1:49:DB:BB:CA:D3
Authority key identifier: DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
Certificate issuer: /CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Certificate serial: 01A0D3B89B3C26E6169DE2E4880146074493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
Manifest number: 0281
Signing time: Thu 24 Sep 2026 14:01:25 +0000
Manifest this update: Thu 24 Sep 2026 14:01:25 +0000
Manifest next update: Fri 25 Sep 2026 14:01:25 +0000
Files and hashes: 1: 3cf_z32PTDOExrKNBKESsh8jeRA.crl (hash: HNuW1yVscLW+mUEC/RxWBm22tAXL7pfYASR0NecT9H4=)
2: BX4ECMa5PSwMxBNsjfnl8GRXj1s.asa (hash: wiV7d2L86p523gY92Ip5gfxBxVerpTdBSH5xKncDAqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:9b:3c:26:e6:16:9d:e2:e4:88:01:46:07:44:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Validity
Not Before: Sep 24 14:01:25 2026 GMT
Not After : Sep 25 14:01:25 2026 GMT
Subject: CN=93f97d28be32fa5cfe25b0fbeb50f149dbbbcad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:38:9f:f5:4d:8e:bd:f2:c8:ef:14:c8:7a:
7a:f7:02:93:0c:fe:a5:a6:63:27:8e:49:dc:7f:0e:
d0:7c:2b:9c:e2:be:64:bc:66:f8:4d:76:2f:3e:ce:
c7:41:7f:02:d4:c7:bd:63:9a:3f:a7:c6:44:dc:c2:
29:df:69:d3:c9:0e:cf:6d:2e:87:53:57:dc:3a:00:
bf:56:ba:db:60:f0:96:29:43:40:dd:d1:72:91:10:
95:ce:dc:7d:6b:8e:78:53:ee:b1:16:3c:28:63:1b:
29:48:03:68:01:6a:fc:d8:70:9a:3a:9a:0a:1c:8c:
f3:41:49:49:6d:1d:ad:75:74:82:d1:aa:70:1f:a1:
f1:e4:26:fc:2e:4a:0a:f7:28:f0:ae:ce:22:f0:75:
7e:08:d9:77:b7:eb:20:1b:c0:5b:e0:5f:84:d5:bc:
12:ec:6b:96:6e:5d:40:03:10:c2:bc:20:38:3f:34:
84:d1:28:ca:9d:16:6d:85:4b:d2:b4:a2:4d:45:55:
1d:f1:e1:96:ce:82:24:1e:6e:e1:42:18:08:06:c7:
30:88:89:59:eb:54:76:fb:8d:0d:97:84:52:77:5f:
b4:b7:bb:97:5a:c9:11:ef:cc:49:4e:a4:f6:6a:8e:
a9:3f:38:f6:6c:86:22:54:6e:b3:69:32:c6:b4:de:
94:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F9:7D:28:BE:32:FA:5C:FE:25:B0:FB:EB:50:F1:49:DB:BB:CA:D3
X509v3 Authority Key Identifier:
keyid:DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:17:fd:b6:ba:83:0e:97:e8:e8:cc:71:8e:aa:e9:0e:91:27:
e8:d2:4d:ad:a9:c4:cd:c8:92:ba:5f:24:dc:a8:dd:c6:67:b4:
f5:6e:80:5d:9e:13:58:c0:24:6e:b5:3e:29:1f:7c:53:7c:f2:
73:54:fe:c8:01:3a:31:3d:62:13:79:52:96:4f:de:8a:06:3f:
90:f4:fa:2b:bc:59:e7:c5:20:be:dd:85:c7:eb:44:b8:0e:76:
a4:7b:ea:d8:db:6f:52:1d:08:ba:af:05:ad:82:77:48:ab:71:
8b:5a:43:6a:b9:0a:46:75:95:59:3d:d0:05:6f:69:0d:6d:5d:
06:49:a6:1b:4e:a0:97:3b:ff:f8:40:0a:47:69:d0:74:38:d1:
2e:85:d5:df:2e:af:9f:43:2a:9c:ba:4e:23:7c:85:30:5f:ee:
14:80:2a:bd:87:42:75:6e:e7:f7:05:e8:91:86:58:ac:31:ea:
09:7d:34:ca:19:84:11:c6:4d:5e:85:1b:a4:cc:da:4d:2d:c4:
da:28:f9:47:fd:3f:d9:b3:10:00:cd:b4:56:16:27:7a:06:e6:
dd:f2:49:5a:f0:65:bc:71:77:3f:68:f6:7e:17:c0:84:a3:41:
87:1f:3a:09:76:15:3b:5c:40:b3:28:90:ba:c6:3e:79:33:35:
d4:65:e4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:03:26 2026 by rpki-client