Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: ZaceXNpzlo1+To6aLHw4DdCyTCye5ytOuEoEq9EVdMs=
Subject key identifier: 9B:B0:D2:96:1A:76:6C:49:86:94:59:F9:6E:F1:84:AF:A6:76:AE:2C
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 019F17F9F1B58BA987FB464C16BF2F6B0E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 157F
Signing time: Tue 30 Jun 2026 10:01:24 +0000
Manifest this update: Tue 30 Jun 2026 10:01:24 +0000
Manifest next update: Wed 01 Jul 2026 10:01:24 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: b1XmGS51qPg4xMufhcOw4DqOzHedoiS59kOuYAPw4u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:f1:b5:8b:a9:87:fb:46:4c:16:bf:2f:6b:0e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Jun 30 10:01:24 2026 GMT
Not After : Jul 1 10:01:24 2026 GMT
Subject: CN=9bb0d2961a766c49869459f96ef184afa676ae2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:9f:24:89:0b:da:47:f5:56:64:5e:6d:94:
5b:e7:69:aa:b3:7c:c9:0e:bb:c6:7b:7c:91:f8:b4:
5d:59:d8:8e:48:34:a8:9c:a1:42:76:77:26:b6:b3:
ee:35:f7:38:10:27:a1:87:11:34:9e:19:70:68:a5:
ee:fd:50:43:c5:75:96:b3:30:de:c0:33:b9:12:66:
9b:df:15:4e:01:b0:5d:e7:a0:23:83:b0:55:62:a2:
a9:b6:b0:c9:17:bc:02:41:3e:87:b4:01:b0:93:d5:
b2:2d:d6:f1:22:c2:11:85:35:bb:45:00:90:7d:ff:
f6:5a:d7:96:4b:6f:58:cf:b3:e3:78:8b:03:3d:90:
d8:26:63:54:62:ae:d5:27:90:55:9e:0f:3e:73:a7:
a8:09:19:db:44:37:ef:b0:e8:70:d8:05:2c:2c:6d:
e4:26:74:05:ba:8f:cc:f1:bc:91:4a:48:ea:09:d1:
36:5f:45:ab:88:01:ee:ab:8c:5f:cc:2c:bf:b1:01:
a1:6b:f3:a7:7b:43:68:c6:a9:15:b9:96:e8:90:95:
93:6b:75:2f:23:94:e1:d6:fd:f0:80:5f:75:26:d8:
d8:0b:3b:73:b5:41:67:52:87:70:c8:e6:e0:46:6b:
e0:01:17:29:60:97:5c:b7:38:b4:10:e3:f8:46:d8:
a0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B0:D2:96:1A:76:6C:49:86:94:59:F9:6E:F1:84:AF:A6:76:AE:2C
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:19:27:77:55:f7:0b:b0:9c:1c:99:ab:a4:f0:b8:3a:8e:26:
50:ff:33:4b:d6:ea:b7:38:cb:aa:62:e0:95:94:35:26:a4:b0:
95:c2:8d:75:08:dc:9f:ff:5e:cb:ac:0c:41:6b:b2:8b:b0:e7:
ca:43:15:59:4b:e8:67:0c:ab:68:66:8e:70:ce:84:e8:fc:a1:
5b:de:b7:bb:2c:12:f5:eb:bc:36:4c:09:c1:15:d9:20:39:bc:
d1:85:48:02:8a:d2:52:70:e0:b1:84:17:4c:2b:14:de:b6:4e:
25:6d:e2:f6:4e:d1:2a:50:b1:42:01:ef:3c:70:0e:63:ac:be:
0d:e0:9b:d4:0f:b5:9e:40:15:6f:2a:e2:a1:b1:d3:a6:f0:82:
c9:f2:e1:8c:6b:a3:41:eb:d3:e3:3f:f2:46:15:a7:8c:8d:1b:
ce:d4:4b:85:e5:dc:f3:89:a6:e8:a5:a8:3f:2e:53:a7:9e:f6:
00:24:a0:c7:31:62:b3:cd:12:b4:2e:f6:aa:14:95:c4:f6:f3:
79:17:58:03:e4:26:79:13:bf:f6:35:43:fc:66:43:d2:28:cf:
96:0b:d1:2e:b8:d9:81:15:3b:dd:54:29:5a:b4:f8:a8:2e:97:
68:ca:3b:6a:02:29:7c:15:e7:cc:d3:65:14:7b:1f:af:b7:5e:
5f:b3:89:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:15 2026 by rpki-client