Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: IyXGKjUUC1UUyLVZImKz76q/h882khJlZMcCQ+7J06Y=
Subject key identifier: A4:9A:E5:E4:58:92:C6:BC:FA:5B:AD:49:A4:13:D9:4E:6A:DC:41:A8
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 019D371B32B20650259EA9397F5627F9AC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 1486
Signing time: Sun 29 Mar 2026 01:00:22 +0000
Manifest this update: Sun 29 Mar 2026 01:00:22 +0000
Manifest next update: Mon 30 Mar 2026 01:00:22 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: LZ2Tn3slSbpD2xeIqxnCkqWGG8ImQaWQgpwf8co5NeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:32:b2:06:50:25:9e:a9:39:7f:56:27:f9:ac:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Mar 29 01:00:22 2026 GMT
Not After : Mar 30 01:00:22 2026 GMT
Subject: CN=a49ae5e45892c6bcfa5bad49a413d94e6adc41a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:c5:2b:8c:50:9e:3b:ae:0c:71:a2:16:dd:
a1:76:cc:5a:1b:ac:bf:14:c3:86:84:18:02:04:50:
84:d9:e5:5a:68:60:43:d7:85:24:3c:78:eb:69:f7:
87:94:87:9c:31:6e:1a:43:1c:c2:94:7a:2f:6a:59:
38:8e:8d:63:f1:6f:3f:ce:50:a7:4c:8c:ce:78:96:
3d:7a:f4:ea:37:68:01:fe:7d:f4:f4:9e:d7:dc:4a:
e1:e5:12:23:8f:a8:c2:24:23:37:57:f2:fe:3f:53:
68:ff:44:00:98:ec:04:e4:ba:4e:fb:d8:e5:eb:1e:
9f:7c:c1:5c:52:ca:a0:1f:24:d8:85:12:62:15:95:
f3:1d:62:93:86:f6:cc:f3:3f:6c:22:c5:0a:a1:56:
b9:2d:7c:c1:72:79:4d:cd:33:dd:69:61:99:f7:75:
3c:a9:38:e6:b2:8c:58:cd:98:e4:b3:f8:e4:55:58:
3a:06:ce:09:83:ec:8a:df:90:04:18:c9:ea:e4:8f:
63:6e:aa:db:2e:15:10:ae:15:87:fc:c1:c3:70:3a:
aa:ff:e1:8c:40:82:25:82:14:d4:cc:72:e6:e7:10:
62:24:56:37:3f:2c:92:84:a3:f3:59:44:89:a8:b9:
6f:13:15:e8:a6:69:6f:7b:9e:de:ff:69:b6:d1:ce:
d7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9A:E5:E4:58:92:C6:BC:FA:5B:AD:49:A4:13:D9:4E:6A:DC:41:A8
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8a:3e:06:c2:b3:d7:83:0c:22:04:d9:fa:c7:19:93:d7:d6:
1a:61:e2:46:c1:94:70:a9:0e:26:84:b0:10:4d:39:2d:5e:b6:
95:87:e1:45:8a:7f:8e:2a:dc:ec:68:23:19:41:e5:01:42:f2:
2d:92:6f:08:c7:22:f6:4a:e1:3b:31:7f:a6:a9:7a:ae:dc:ea:
4c:19:b2:bb:c3:ec:9c:4e:cd:1c:89:76:39:e8:ca:38:f9:01:
0c:9d:02:53:4f:e7:92:05:0c:87:a9:67:ef:59:a3:71:83:37:
0a:3e:ba:90:ee:93:ba:a0:68:24:93:32:d5:99:8f:47:42:ad:
86:ff:26:d4:44:78:ef:61:40:e1:8d:3c:23:96:a5:97:82:9c:
0b:00:53:81:9d:92:51:39:24:2f:73:e0:17:65:55:fd:77:28:
0c:92:28:7a:1b:6c:29:12:2f:7f:26:47:92:83:bb:07:aa:17:
4d:d8:a2:04:85:a8:06:d5:50:10:3a:aa:1e:f7:5f:03:de:f0:
a7:25:68:eb:b9:74:f8:10:eb:45:56:34:77:ff:6c:d5:28:f1:
2e:e8:ee:20:31:eb:48:76:18:cc:a4:01:e2:75:bc:20:d1:cb:
ec:5c:67:93:84:a6:28:79:32:c7:8e:ed:3b:ed:13:24:b6:16:
69:8f:db:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:48 2026 by rpki-client