Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: XR5qhvBlWWtVkvpHVrTZoXZZa8O/BZGEg6p15VSoGE4=
Subject key identifier: 74:5B:D9:F3:84:EE:15:B2:F4:97:2B:5B:84:FF:C5:23:A1:39:AA:3C
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 019E1D23424708787972C1305E42C56DB25B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 17:01:50 +0000
Manifest this update: Tue 12 May 2026 17:01:50 +0000
Manifest next update: Wed 13 May 2026 17:01:50 +0000
Files and hashes: 1: 1TDkQYg3xQsNih1cBCwskUXwxLA.roa (hash: paiy4NkfuCpLerrMoZiJ1VXsmPdd6kHz6S2ynGEROuU=)
2: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: yPU29d1CJwermixEyA0Bbw2QZ5LQywexA4oXcDYDRDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:42:47:08:78:79:72:c1:30:5e:42:c5:6d:b2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: May 12 17:01:50 2026 GMT
Not After : May 13 17:01:50 2026 GMT
Subject: CN=745bd9f384ee15b2f4972b5b84ffc523a139aa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:57:80:8d:b9:db:ee:2a:08:59:f9:cd:c9:
59:a5:da:fe:9a:2c:3d:3a:26:9f:c9:e2:89:51:4f:
5b:5a:08:20:2a:78:92:e7:aa:fc:fa:6c:60:b7:ad:
9d:bf:aa:23:75:d4:40:a7:04:0c:6a:5b:1d:1e:fc:
63:fb:d7:40:d5:37:45:02:da:c2:79:e5:42:c2:51:
63:ee:74:66:3f:bb:c7:e1:d0:41:7f:b6:69:f0:03:
c3:ea:18:05:e5:81:6c:3f:9d:e1:82:2d:4f:16:3c:
c4:90:d0:19:30:d9:fc:2b:21:8c:93:03:c8:20:05:
f8:7b:fe:a2:fe:38:e4:36:d6:fc:6f:f1:72:f1:e7:
13:ac:70:7c:33:68:17:86:60:5d:fc:ab:93:17:74:
07:88:a3:3b:9e:f4:71:43:a5:f5:e9:f9:e5:f2:3e:
85:e5:19:42:29:8d:95:2f:90:01:5e:2d:71:c3:59:
f9:0c:c1:96:50:f9:ff:c8:06:89:48:94:20:29:e6:
69:ef:51:26:f4:85:0f:01:fd:72:74:1d:64:96:18:
f6:45:ac:b0:70:ce:2c:d0:f2:d1:6e:59:a8:37:38:
01:5b:53:7a:94:9e:b7:f1:3c:15:0b:7b:44:23:55:
1a:0b:d4:74:bb:db:31:34:11:2b:22:b8:d0:21:fd:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5B:D9:F3:84:EE:15:B2:F4:97:2B:5B:84:FF:C5:23:A1:39:AA:3C
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6c:65:24:56:65:0c:63:0c:17:8e:44:e0:63:bc:96:ff:f8:
a0:c4:e1:f5:1d:4f:06:1c:91:12:13:3a:a4:69:87:51:42:d3:
43:f1:7e:64:95:95:10:2c:0d:93:67:9f:e4:2c:88:4b:90:2d:
fe:e4:04:da:8d:f9:33:42:f4:ed:63:80:9d:17:54:0e:9b:b9:
ee:95:1a:2e:45:56:09:d5:87:df:a2:2a:6f:da:03:11:13:03:
4a:68:1c:28:04:56:9c:6b:44:4d:7c:32:9c:f6:70:16:78:56:
eb:29:50:01:e1:78:c6:83:c8:39:a7:7c:07:d5:82:9e:a7:9e:
ae:a5:7b:b0:5f:2e:68:db:01:0f:aa:40:f3:90:37:57:db:26:
51:6b:4e:a3:b9:92:6a:f3:65:7f:d5:27:41:ec:32:3c:09:da:
fc:45:52:36:0c:95:9c:d7:02:c8:c0:93:5e:86:6b:b8:c7:b5:
66:f9:ac:30:a8:c7:3f:6e:54:d0:58:97:c8:f2:93:d7:34:55:
db:ce:9d:38:d5:90:c4:fa:1a:32:af:47:ee:ff:e4:09:a9:47:
44:12:b8:33:1b:8e:41:99:bd:dc:e0:84:5a:f8:35:65:23:69:
d4:cd:c5:c7:36:8b:b6:54:23:ca:a3:5e:95:4c:33:e3:1a:39:
31:cf:61:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:23 2026 by rpki-client