Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.mft
File: 3c1w0wQbbgS5xjyGZoEGCHnzPDM.mft (raw, json)
Hash identifier: 4EdUHDMEliEPlA1xRXrBUNbA37EjU3nbZTb2ffxu1cs=
Subject key identifier: F5:85:87:31:B4:60:55:C3:DF:D2:8F:54:64:41:EC:3D:F0:A7:FA:73
Authority key identifier: DD:CD:70:D3:04:1B:6E:04:B9:C6:3C:86:66:81:06:08:79:F3:3C:33
Certificate issuer: /CN=ddcd70d3041b6e04b9c63c866681060879f33c33
Certificate serial: 01A0D8DEC85C917DB1B70A455C6F23DDB262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c1w0wQbbgS5xjyGZoEGCHnzPDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.mft
Manifest number: 0212
Signing time: Fri 25 Sep 2026 14:01:13 +0000
Manifest this update: Fri 25 Sep 2026 14:01:13 +0000
Manifest next update: Sat 26 Sep 2026 14:01:13 +0000
Files and hashes: 1: 3c1w0wQbbgS5xjyGZoEGCHnzPDM.crl (hash: hoP7SQQ82gXi7QQwkSuLzekzZL+0RMlR/cIq7OJqecM=)
2: nJP4E1BCewAFvyQ9khu6K5PbIao.roa (hash: ECxIOroPlkk1P7RKbeML7Eha9aF0iyIC+Cc+BENCAT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3c1w0wQbbgS5xjyGZoEGCHnzPDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:c8:5c:91:7d:b1:b7:0a:45:5c:6f:23:dd:b2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcd70d3041b6e04b9c63c866681060879f33c33
Validity
Not Before: Sep 25 14:01:13 2026 GMT
Not After : Sep 26 14:01:13 2026 GMT
Subject: CN=f5858731b46055c3dfd28f546441ec3df0a7fa73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:58:bc:a3:ef:1b:51:bb:fd:e6:01:d8:68:d7:
50:5c:a7:a6:78:03:60:3a:2a:d2:59:4f:32:0a:f0:
33:f0:8b:a2:31:e8:d6:10:f4:8b:96:7d:fb:7a:f8:
ba:ad:5c:2c:ce:90:5a:a0:75:c5:1d:d3:3a:4a:79:
ec:a6:08:a4:4b:c9:10:0e:9b:65:f7:62:e2:19:37:
28:04:53:5e:9e:5c:52:07:24:97:e1:69:fa:d9:e6:
92:82:b5:f5:10:f5:a0:63:cc:5b:7d:8e:64:b0:fa:
63:91:10:6d:58:4c:a9:20:e3:e9:39:45:24:d5:12:
7e:65:47:7e:1c:3e:3b:4b:a5:1a:a1:9b:97:e3:20:
b4:54:5d:75:f3:22:60:f4:ac:c8:b3:0c:2b:9d:14:
2f:28:14:d7:59:a7:db:c3:75:0a:c9:d0:e7:48:6d:
be:24:2c:b4:c0:b6:49:10:48:98:44:ba:3e:79:db:
92:48:dc:b4:b8:e9:2c:95:e9:52:51:d9:cc:31:f1:
a1:38:55:3d:a2:47:7f:d7:e0:da:1d:0c:31:f3:22:
d6:7c:35:04:e9:ad:6d:46:d8:df:7c:4c:c3:b6:28:
12:13:91:80:ad:ba:49:03:e0:66:d1:83:c5:27:e1:
4d:d7:6b:48:b6:4b:1f:84:ed:b5:b3:c1:2d:b1:19:
46:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:85:87:31:B4:60:55:C3:DF:D2:8F:54:64:41:EC:3D:F0:A7:FA:73
X509v3 Authority Key Identifier:
keyid:DD:CD:70:D3:04:1B:6E:04:B9:C6:3C:86:66:81:06:08:79:F3:3C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c1w0wQbbgS5xjyGZoEGCHnzPDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ad:e2:21:f0:67:dc:f1:9e:ce:f2:d7:68:b2:19:29:7b:8a:
e5:85:a6:b1:84:49:c8:e3:c7:01:59:ea:35:d3:0e:7e:3e:fb:
62:8c:84:a9:67:90:07:31:d2:79:63:24:17:6f:45:b0:d1:10:
49:4d:d3:de:e7:31:ca:2f:c3:fb:52:05:4d:f1:11:68:4b:2b:
89:18:53:52:58:5f:1c:7a:5d:02:d1:03:3a:45:84:89:66:83:
3f:07:9a:6a:51:48:e0:5e:8c:a2:ae:42:c5:f2:2a:6a:ba:6b:
24:6a:60:4b:2b:16:73:24:b8:e6:7b:cb:31:94:4d:ec:89:21:
30:e2:24:39:a5:20:5c:87:7c:88:50:2f:cc:40:a8:7b:75:3b:
90:c5:3a:1b:19:49:80:69:3f:2d:6a:34:d6:1c:47:07:ab:b7:
a3:58:4f:ff:f9:78:92:ac:d2:45:b6:4f:2f:e8:60:87:ab:4d:
aa:dd:20:88:2a:b1:2e:11:b8:c7:1f:74:8d:a2:90:18:e2:b3:
a7:31:8d:fc:f8:8b:22:57:8d:a9:8f:9e:d0:56:ed:1c:18:f3:
1b:72:c3:56:9c:7a:64:f6:76:cd:a0:e9:a4:e1:7e:a8:83:74:
42:8f:75:8d:a7:0c:fe:25:dc:f8:02:b2:20:1b:65:c4:b6:b1:
9a:d3:88:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY3shckX2xtwpFXG8j3bJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkY2Q3MGQzMDQxYjZlMDRiOWM2M2M4NjY2ODEwNjA4Nzlm
MzNjMzMwHhcNMjYwOTI1MTQwMTEzWhcNMjYwOTI2MTQwMTEzWjAzMTEwLwYDVQQD
EyhmNTg1ODczMWI0NjA1NWMzZGZkMjhmNTQ2NDQxZWMzZGYwYTdmYTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7li8o+8bUbv95gHYaNdQXKemeANg
OirSWU8yCvAz8IuiMejWEPSLln37evi6rVwszpBaoHXFHdM6SnnspgikS8kQDptl
92LiGTcoBFNenlxSBySX4Wn62eaSgrX1EPWgY8xbfY5ksPpjkRBtWEypIOPpOUUk
1RJ+ZUd+HD47S6UaoZuX4yC0VF118yJg9KzIswwrnRQvKBTXWafbw3UKydDnSG2+
JCy0wLZJEEiYRLo+eduSSNy0uOkslelSUdnMMfGhOFU9okd/1+DaHQwx8yLWfDUE
6a1tRtjffEzDtigSE5GArbpJA+Bm0YPFJ+FN12tItksfhO21s8EtsRlG7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWFhzG0YFXD39KPVGRB7D3wp/pzMB8GA1UdIwQY
MBaAFN3NcNMEG24EucY8hmaBBgh58zwzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2MxdzB3UWJiZ1M1eGp5R1pvRUdDSG56UERNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hM2IzYmUtOTU3ZC00Nzc3LTliNjQt
ZDcwNmJkMGE2YmVkLzEvM2MxdzB3UWJiZ1M1eGp5R1pvRUdDSG56UERNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hM2IzYmUtOTU3ZC00Nzc3LTliNjQtZDcwNmJkMGE2YmVk
LzEvM2MxdzB3UWJiZ1M1eGp5R1pvRUdDSG56UERNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPK3iIfBn
3PGezvLXaLIZKXuK5YWmsYRJyOPHAVnqNdMOfj77YoyEqWeQBzHSeWMkF29FsNEQ
SU3T3ucxyi/D+1IFTfERaEsriRhTUlhfHHpdAtEDOkWEiWaDPweaalFI4F6Moq5C
xfIqarprJGpgSysWcyS45nvLMZRN7IkhMOIkOaUgXId8iFAvzECoe3U7kMU6GxlJ
gGk/LWo01hxHB6u3o1hP//l4kqzSRbZPL+hgh6tNqt0giCqxLhG4xx90jaKQGOKz
pzGN/PiLIleNqY+e0FbtHBjzG3LDVpx6ZPZ2zaDppOF+qIN0Qo91jacM/iXc+AKy
IBtlxLaxmtOIYQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:07:19 2026 by rpki-client