Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: W67K/a+3kRbTR50AzOlrXW1YXeu7vG0BA1LIZBxqvus=
Subject key identifier: CA:84:28:0F:9D:B0:D3:5C:FC:34:12:E7:15:D6:15:79:87:34:CF:2B
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 019F8FEC707C5A75855DAD25B7CB4060F47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 17:01:04 +0000
Manifest this update: Thu 23 Jul 2026 17:01:04 +0000
Manifest next update: Fri 24 Jul 2026 17:01:04 +0000
Files and hashes: 1: 1TDkQYg3xQsNih1cBCwskUXwxLA.roa (hash: paiy4NkfuCpLerrMoZiJ1VXsmPdd6kHz6S2ynGEROuU=)
2: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: V2RXDoWnPT0FUCpfHTAQFKXU5nU4bjro2QAMP52jVqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:70:7c:5a:75:85:5d:ad:25:b7:cb:40:60:f4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Jul 23 17:01:04 2026 GMT
Not After : Jul 24 17:01:04 2026 GMT
Subject: CN=ca84280f9db0d35cfc3412e715d615798734cf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:d3:80:f3:05:1b:b4:8e:a0:e0:e8:a6:68:
7a:ba:6e:ab:f6:16:07:47:ff:b2:cf:d7:71:60:e1:
82:3d:f5:7e:eb:72:dd:3d:7b:0b:d5:84:c4:ef:06:
1a:5d:1e:fc:37:ec:33:2c:f3:50:69:8e:55:fd:fa:
c5:b7:d1:f1:f9:6c:ae:d9:50:b5:a8:17:f5:53:1d:
fd:50:bf:7d:4c:8a:12:f1:9a:d1:31:a6:4c:94:54:
85:ec:89:89:ab:56:5b:af:93:9f:1b:98:65:26:0c:
a9:ff:52:ec:16:92:a4:8d:d9:3e:b6:5e:bb:e4:ac:
29:e6:9f:f4:f7:b4:95:1e:29:9f:26:30:0a:8f:c9:
75:b4:c7:03:8b:df:7b:3a:bd:52:f3:ab:80:d8:2f:
70:c4:6c:41:a6:2e:5c:bb:6d:35:1e:64:1d:d1:dc:
54:3e:25:95:d0:4f:6f:2b:bd:6e:f0:5d:e1:79:af:
15:5c:32:41:ed:cf:93:5b:c9:43:10:c8:1e:1e:b7:
96:9f:7e:7c:9e:db:49:3d:53:86:5a:5c:07:81:61:
c3:b0:28:b7:0e:27:80:ff:a2:78:ba:f3:40:a7:d0:
b8:52:bd:5e:52:e9:7c:ce:5f:9f:25:0d:d0:06:68:
07:36:f3:87:db:d7:d2:8c:3d:8e:de:a4:58:5a:66:
58:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:84:28:0F:9D:B0:D3:5C:FC:34:12:E7:15:D6:15:79:87:34:CF:2B
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:90:76:37:50:93:bb:c6:c8:bc:0c:6d:c4:94:49:a2:40:37:
a4:c3:72:14:dc:3a:95:27:35:ee:a7:4c:39:01:b1:49:7d:cb:
fc:b9:24:4d:47:56:75:9e:a2:56:86:be:18:a3:aa:f3:8b:46:
35:1c:80:ec:40:ba:ef:b6:29:3b:41:81:b0:c3:81:c8:db:1f:
cb:0c:38:47:97:ba:b7:f9:13:b9:b4:81:d5:4d:e1:01:90:56:
bc:0e:bc:fe:61:6b:c5:9a:bc:13:4e:f9:21:79:97:fe:3f:09:
20:27:6f:02:41:38:23:a4:6a:4c:83:16:70:28:d1:11:85:2b:
90:cf:47:96:98:6a:91:0e:bc:79:6d:b0:a7:9c:fe:b5:80:0f:
3f:d9:ce:c6:ad:a0:97:97:22:22:bc:27:3f:97:cd:6e:0c:51:
bf:35:6a:61:f1:ff:83:f9:01:db:9d:13:8f:91:c9:89:9d:99:
af:5f:77:9f:70:f5:71:a5:a9:45:c2:f3:22:40:3a:87:8b:51:
06:30:16:d7:29:c4:26:51:46:6b:c4:50:c5:76:06:e1:b1:70:
52:e7:8d:f5:9e:0e:cf:01:16:7a:52:43:75:85:02:0f:71:13:
af:f3:46:19:33:5f:29:bd:42:1f:0e:70:4b:c2:5f:49:9b:87:
7b:c6:a5:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7HB8WnWFXa0lt8tAYPR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMjczZTFlMjE4NDFjZTJjMzM1ZmUxYzk2MWNlNzY4MDE3
ZWVlMjkwHhcNMjYwNzIzMTcwMTA0WhcNMjYwNzI0MTcwMTA0WjAzMTEwLwYDVQQD
EyhjYTg0MjgwZjlkYjBkMzVjZmMzNDEyZTcxNWQ2MTU3OTg3MzRjZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+7TgPMFG7SOoODopmh6um6r9hYH
R/+yz9dxYOGCPfV+63LdPXsL1YTE7wYaXR78N+wzLPNQaY5V/frFt9Hx+Wyu2VC1
qBf1Ux39UL99TIoS8ZrRMaZMlFSF7ImJq1Zbr5OfG5hlJgyp/1LsFpKkjdk+tl67
5Kwp5p/097SVHimfJjAKj8l1tMcDi997Or1S86uA2C9wxGxBpi5cu201HmQd0dxU
PiWV0E9vK71u8F3hea8VXDJB7c+TW8lDEMgeHreWn358nttJPVOGWlwHgWHDsCi3
DieA/6J4uvNAp9C4Ur1eUul8zl+fJQ3QBmgHNvOH29fSjD2O3qRYWmZYPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqEKA+dsNNc/DQS5xXWFXmHNM8rMB8GA1UdIwQY
MBaAFNwnPh4hhBziwzX+HJYc52gBfu4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iNGE3MWEtZWIzNy00NjlhLThiYjUt
Mjc4NDFmNTA3NzM1LzEvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iNGE3MWEtZWIzNy00NjlhLThiYjUtMjc4NDFmNTA3NzM1
LzEvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZB2N1CT
u8bIvAxtxJRJokA3pMNyFNw6lSc17qdMOQGxSX3L/LkkTUdWdZ6iVoa+GKOq84tG
NRyA7EC677YpO0GBsMOByNsfyww4R5e6t/kTubSB1U3hAZBWvA68/mFrxZq8E075
IXmX/j8JICdvAkE4I6RqTIMWcCjREYUrkM9HlphqkQ68eW2wp5z+tYAPP9nOxq2g
l5ciIrwnP5fNbgxRvzVqYfH/g/kB250Tj5HJiZ2Zr193n3D1caWpRcLzIkA6h4tR
BjAW1ynEJlFGa8RQxXYG4bFwUueN9Z4OzwEWelJDdYUCD3ETr/NGGTNfKb1CHw5w
S8JfSZuHe8alvw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:29 2026 by rpki-client