Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
File: 3cwuYUgshl3CU8D6lD49os6X2gU.mft (raw, json)
Hash identifier: LEBjikOELWI9PsNa2z3dRho8mBrc8EpLsaipHsZcnR8=
Subject key identifier: 79:96:08:E9:1D:DF:EA:19:BE:EC:8F:65:B5:E2:71:86:D3:C9:06:FE
Authority key identifier: DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
Certificate issuer: /CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Certificate serial: 01A0F1C38806E140FD4E2829B10B0D51006E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
Manifest number: 0A01
Signing time: Wed 30 Sep 2026 10:01:58 +0000
Manifest this update: Wed 30 Sep 2026 10:01:58 +0000
Manifest next update: Thu 01 Oct 2026 10:01:58 +0000
Files and hashes: 1: 3cwuYUgshl3CU8D6lD49os6X2gU.crl (hash: Fyr8oJSvmOy88bdajRM0D6l9LSitdCJZ9T7Hi3Swwjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c3:88:06:e1:40:fd:4e:28:29:b1:0b:0d:51:00:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Validity
Not Before: Sep 30 10:01:58 2026 GMT
Not After : Oct 1 10:01:58 2026 GMT
Subject: CN=799608e91ddfea19beec8f65b5e27186d3c906fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:f5:f1:9f:80:25:9c:56:ab:af:58:de:db:
d2:b9:7b:62:98:48:dd:ed:0f:bd:72:dc:ee:45:f7:
b2:64:00:98:15:34:90:a1:50:fa:12:3e:cd:a0:26:
32:7f:27:8d:65:06:6e:d5:9c:28:92:1d:de:c8:09:
05:ea:14:b6:ed:20:64:62:60:9e:4c:8e:0d:40:29:
91:25:03:c5:81:0e:de:b8:50:e3:ff:f2:70:85:e8:
4b:36:f5:41:0b:f9:dd:1f:97:8c:48:84:68:83:e8:
88:fe:ad:ef:63:fd:90:58:b4:d7:40:42:8e:f9:ed:
56:93:3b:36:50:75:d1:40:03:77:7a:44:57:28:32:
be:c5:dc:a5:46:d0:16:32:ae:88:9e:25:14:30:b6:
c1:fb:17:e2:fc:62:6b:76:f5:58:6d:b7:ca:38:b2:
25:50:d1:d0:f2:bb:b1:49:2f:3c:78:58:8a:7c:1c:
ad:b9:10:1a:a0:0e:d5:f4:93:dd:52:2f:b7:56:44:
8f:f8:e9:8b:bc:df:92:b0:b7:d8:e2:54:25:71:41:
28:5c:1d:a6:9c:82:1c:15:7c:cb:0e:35:c8:a8:99:
64:ac:e5:18:12:65:d7:51:60:09:0b:77:51:aa:6e:
9c:8a:c8:80:52:be:bd:7f:d8:ba:6b:90:c6:12:50:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:96:08:E9:1D:DF:EA:19:BE:EC:8F:65:B5:E2:71:86:D3:C9:06:FE
X509v3 Authority Key Identifier:
keyid:DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7c:90:63:c4:4d:78:82:95:10:37:a6:4a:b3:e0:06:46:fa:
db:d0:37:32:69:87:29:62:4c:55:57:07:f6:32:93:13:7a:b9:
40:62:85:0f:61:3f:50:31:d2:d2:6b:91:11:02:12:bd:bd:1d:
21:b6:cd:24:ac:68:7d:6a:c5:14:ee:7a:e2:b3:16:f6:1c:84:
12:fa:ef:d7:33:e2:30:94:53:41:49:8d:58:27:13:95:67:6e:
6e:46:c3:3d:b3:02:b7:80:82:ed:a0:2a:50:ec:2b:55:02:3c:
20:57:8b:e5:7f:35:7c:b6:a5:71:84:39:b7:13:32:b6:62:3f:
16:0b:1e:9f:29:5c:33:ee:41:d7:45:d2:da:0f:b1:0f:63:fb:
9a:59:9c:5d:2a:5f:d5:41:52:b3:86:74:1b:f6:ff:ad:89:32:
ed:68:9a:8c:88:61:05:f2:6d:ee:a1:90:5e:83:cb:b1:ef:5a:
1e:bd:31:65:8f:89:ca:c4:b5:c9:dc:1a:1a:67:d8:e0:88:67:
93:10:8c:6d:33:b9:a3:1f:61:3b:4e:65:83:99:ef:89:36:1d:
ad:f2:da:ed:34:5d:c1:64:fc:84:bf:c0:02:cc:71:00:ba:e2:
bf:29:85:38:9b:da:9c:30:b4:25:67:74:9b:23:b9:9b:57:ed:
40:1c:46:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:00:54 2026 by rpki-client