Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: zQIsr+q9WfgjSwwv4BXv7Mn4SYkubfCUIrsXMdbE/Ew=
Subject key identifier: BC:07:F8:F5:A7:94:C0:E4:17:34:EA:C5:1D:C2:60:A2:01:C2:DD:2F
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 019D29CE70ACD6C24898652E4A48227DCD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 11:01:28 +0000
Manifest this update: Thu 26 Mar 2026 11:01:28 +0000
Manifest next update: Fri 27 Mar 2026 11:01:28 +0000
Files and hashes: 1: 1TDkQYg3xQsNih1cBCwskUXwxLA.roa (hash: paiy4NkfuCpLerrMoZiJ1VXsmPdd6kHz6S2ynGEROuU=)
2: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: NNRR/BkeqSEziSkz+ESq2aICkxlv4jEOQaPaOr4qGCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:70:ac:d6:c2:48:98:65:2e:4a:48:22:7d:cd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Mar 26 11:01:28 2026 GMT
Not After : Mar 27 11:01:28 2026 GMT
Subject: CN=bc07f8f5a794c0e41734eac51dc260a201c2dd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:11:e9:3d:2b:67:cb:a3:70:0c:21:df:07:
5c:3a:af:69:6a:1e:9a:b5:75:0f:07:13:6e:68:b8:
8d:c2:97:a8:e7:e4:c3:b6:7c:b9:be:ed:58:09:74:
b8:cf:95:50:b4:ac:5c:d9:80:32:bb:0b:77:da:38:
63:92:45:d1:46:3a:47:c2:45:ae:67:6c:7f:17:d8:
0e:d7:80:68:f7:be:c6:f3:bb:c6:f2:f2:47:14:7d:
ce:5a:b6:21:9d:95:ca:97:74:3e:ee:18:64:9c:ab:
d0:0b:af:2f:c4:a7:89:a6:57:48:d6:82:54:81:f5:
ac:5e:6b:fb:61:af:8f:40:43:f2:0a:7d:5b:e0:d6:
a6:b1:d1:44:0a:61:1c:aa:c2:7b:62:26:3b:1a:20:
92:89:91:e1:46:63:5f:52:a4:4b:77:61:d0:ae:e2:
17:22:4d:16:04:0f:63:18:00:de:11:dc:1a:c3:5a:
ae:e5:8e:4f:f8:b5:40:8e:8f:28:cb:fd:b4:99:b2:
b1:2e:07:a6:6e:79:b6:ed:14:ac:f4:d2:aa:97:ca:
62:d8:a0:99:e1:8c:de:a2:ed:05:9f:5b:15:29:87:
d4:5b:f4:24:b6:79:f1:a2:be:69:48:83:72:d8:ee:
a9:a0:a0:7e:ab:b8:fd:58:e1:45:cc:ad:13:75:5e:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:07:F8:F5:A7:94:C0:E4:17:34:EA:C5:1D:C2:60:A2:01:C2:DD:2F
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f4:5c:50:20:50:a9:f0:53:f6:4e:f2:0e:ef:f6:8c:eb:19:
0f:27:28:76:93:2f:d5:34:14:08:31:a3:4d:03:46:0f:15:c3:
57:af:5f:09:5d:21:98:cd:09:6b:a2:90:63:65:15:ad:65:1f:
cd:c8:46:66:60:02:93:76:ed:f7:5f:be:ce:7b:1f:68:09:3e:
73:e1:ed:63:af:f4:08:a0:fd:05:39:96:a5:e0:de:d1:33:a6:
e9:c5:ce:24:af:b6:8a:d8:b5:92:6a:d4:79:ad:12:93:14:77:
15:c1:12:b4:b6:ca:c6:03:e7:d4:29:b1:83:cc:8d:b8:bb:fa:
fb:8c:3c:69:09:69:bc:b7:45:ff:2c:2d:9b:1b:51:d8:c7:a3:
65:d8:ac:91:4d:1a:f4:06:1b:28:bf:09:c4:8f:63:88:b7:85:
71:00:eb:7b:32:3e:8f:86:38:f8:79:1e:7e:6c:61:49:a0:73:
3d:39:dc:84:d0:f7:34:eb:a1:ae:7f:1b:5e:5e:e0:cf:d5:8f:
61:e5:30:0f:4c:a3:99:98:be:89:99:14:2e:6c:df:4d:ec:26:
74:74:c2:3f:aa:5b:ee:68:ec:d6:47:18:5a:7d:27:32:fb:a1:
37:4e:f3:0f:20:b5:38:81:38:5e:bb:07:e2:e3:a1:8d:f9:1e:
e6:b0:75:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:54 2026 by rpki-client