Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: qlp7NPCWJHJe3ZVDaaMXtX5se5iYe3hZHuX3gnfcRXg=
Subject key identifier: F1:0B:A5:02:5F:B6:6B:17:6B:FC:99:CF:D4:15:F2:FB:B1:8E:9D:78
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 019E303B70685123AD56431B7CC84080F30E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 1507
Signing time: Sat 16 May 2026 10:01:02 +0000
Manifest this update: Sat 16 May 2026 10:01:02 +0000
Manifest next update: Sun 17 May 2026 10:01:02 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: tw83+uI/ooogus3oadXxRosFrkeb/f/7X615aYcsUOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:70:68:51:23:ad:56:43:1b:7c:c8:40:80:f3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: May 16 10:01:02 2026 GMT
Not After : May 17 10:01:02 2026 GMT
Subject: CN=f10ba5025fb66b176bfc99cfd415f2fbb18e9d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:9c:24:5a:02:1e:96:fb:d9:59:11:af:76:
81:f5:c7:ce:a9:85:14:f0:f1:ae:8f:60:09:6a:5f:
79:dc:35:0e:25:90:50:16:20:7d:d4:31:33:02:3b:
9b:79:bb:02:5d:55:d2:89:67:f3:2b:84:63:c1:8f:
f3:85:10:bd:28:27:97:b7:da:69:37:bd:ab:c6:da:
8e:d2:ea:2f:ab:60:42:c5:f5:4d:9d:6c:62:f5:d8:
e0:aa:21:ff:3e:4b:03:96:3c:8e:d8:f1:00:ff:a4:
69:53:5b:d0:f0:23:f6:b1:a1:90:99:13:51:e4:f3:
fb:0f:17:42:7b:68:e7:45:b3:8a:91:2c:7b:13:45:
71:6a:b0:7a:41:0e:9a:57:3f:03:de:db:e8:bf:a5:
81:4c:21:ab:b9:bb:3e:ac:f7:41:f2:2e:d8:18:67:
3e:42:5d:eb:c4:a0:c1:02:8b:4b:09:c4:2a:f2:1e:
f6:67:c9:f7:03:09:04:6e:c5:6d:d6:bc:55:ad:26:
4a:db:ab:46:fd:4f:10:ae:14:59:86:1e:cf:3c:aa:
1d:4b:37:16:8a:6f:81:56:e0:61:06:99:93:d4:56:
0b:cb:3d:96:2d:bc:23:0d:10:b2:55:c3:fb:68:ac:
94:23:9a:f0:dc:9d:4b:78:81:2e:d0:72:da:27:4f:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0B:A5:02:5F:B6:6B:17:6B:FC:99:CF:D4:15:F2:FB:B1:8E:9D:78
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:78:5f:2d:a4:7b:a9:3c:97:fa:62:78:15:dd:6c:55:20:73:
4b:a5:41:39:ee:3b:58:28:8c:04:0b:63:fe:4a:5e:aa:f9:96:
e5:6a:4b:b9:68:ed:3c:3c:dc:87:fc:de:48:30:92:db:1b:6b:
b2:73:82:a3:6d:08:d3:6d:9a:a1:aa:1f:c5:0a:2c:b5:b2:be:
3f:30:04:53:8e:71:8a:31:6c:18:30:fc:ca:69:88:a9:73:ac:
e3:33:03:06:5c:2d:8e:bc:5d:b9:e7:cf:a3:b0:5a:7e:8d:42:
d2:aa:90:cb:4d:9f:d5:34:7c:dc:3d:67:72:d5:e7:a7:eb:53:
48:67:de:ae:e7:ec:b2:9d:4d:e0:7f:a4:3c:50:68:0d:27:35:
43:e5:4f:4c:29:83:08:44:12:60:09:39:de:1e:85:59:b4:9d:
89:5f:64:5b:e8:09:0a:55:d5:d4:60:92:1e:90:28:d1:ac:0c:
b7:fb:fd:7d:7b:4f:59:a1:76:17:8b:95:e4:96:74:cd:94:e9:
31:cd:48:78:01:9d:2a:92:29:e9:0c:f2:fc:56:45:4b:1b:3e:
3c:d7:cb:3b:3d:5b:a5:8a:af:f9:6d:ef:11:d8:ce:c6:28:62:
38:26:b6:52:c1:21:63:c8:7a:06:98:50:97:3d:08:da:5b:65:
12:6e:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:23 2026 by rpki-client