Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
File: 3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json)
Hash identifier: N4UWFtdiMlQJAHJtUcfHwpBIayf0gf2B+f7yaM3DAog=
Subject key identifier: A3:97:F9:92:F4:DC:1C:11:AC:51:75:3D:C7:47:CB:DF:A5:48:03:33
Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
Certificate issuer: /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Certificate serial: 01A0016FB6576FE5183696809DF42FECA124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
Manifest number: 170E
Signing time: Fri 14 Aug 2026 18:01:33 +0000
Manifest this update: Fri 14 Aug 2026 18:01:33 +0000
Manifest next update: Sat 15 Aug 2026 18:01:33 +0000
Files and hashes: 1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: olSUOXJ/wNsX2dOa5Urk8I7Gr1cPFcaQB29U/o7YSFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:b6:57:6f:e5:18:36:96:80:9d:f4:2f:ec:a1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Validity
Not Before: Aug 14 18:01:33 2026 GMT
Not After : Aug 15 18:01:33 2026 GMT
Subject: CN=a397f992f4dc1c11ac51753dc747cbdfa5480333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:16:78:e4:8f:2a:ff:f4:6d:39:23:da:38:
da:d7:04:f1:00:db:64:a3:79:50:34:54:87:b0:8e:
47:16:d5:57:58:7e:24:88:fd:d5:3e:d2:b1:03:47:
1b:58:81:8b:12:39:ba:08:80:c1:bb:87:21:f5:70:
83:51:d0:9b:e8:af:b2:da:60:ea:dc:1f:b5:83:a0:
fc:71:a2:01:eb:25:63:91:b7:53:52:2e:c5:9e:60:
a1:4c:08:86:fc:df:8e:37:9b:fb:5a:86:22:ac:b6:
53:78:3c:7e:8a:bc:c9:2b:a2:8c:b1:cf:51:03:11:
67:10:20:4f:54:89:23:98:79:27:4d:ea:ac:c5:46:
5a:0c:99:f8:55:9c:12:a5:10:01:af:3f:b4:20:f6:
76:29:24:ec:cc:8e:c7:24:b3:7c:21:86:39:4a:0b:
1a:79:72:6d:a0:48:95:19:72:7c:24:b8:ad:d0:c7:
d3:99:00:13:0a:7c:f0:98:ee:f5:a1:c8:e5:d1:76:
9e:00:6f:39:a2:75:9a:f0:0e:d4:27:87:00:a2:bb:
57:66:67:57:68:b9:21:5b:b9:ed:d0:37:b3:b8:73:
9a:7b:61:de:bd:c0:35:f2:4b:d3:a2:13:82:59:b4:
d9:ca:e4:b3:d3:61:82:a6:12:8f:0e:7f:e8:ef:7b:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:97:F9:92:F4:DC:1C:11:AC:51:75:3D:C7:47:CB:DF:A5:48:03:33
X509v3 Authority Key Identifier:
keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4c:0d:45:b5:76:1c:31:96:f9:2e:48:71:b6:3f:ab:75:9c:
33:c5:f5:01:81:97:d1:ed:ac:8b:92:7a:80:ee:20:d2:2b:f1:
f5:64:50:aa:f4:36:b5:fc:d1:ed:d4:11:66:ec:ac:d1:a5:f7:
26:f3:9f:01:a3:31:68:14:e9:7d:64:00:09:e3:de:dd:fd:5a:
fe:92:1d:a2:e2:ba:10:4e:14:6a:ea:bd:b1:db:01:d7:47:56:
1d:be:05:9b:90:3a:2b:71:b0:ae:0a:2b:f2:1e:37:22:86:e3:
02:ef:18:7e:a4:8a:24:d3:ec:f4:2a:53:a2:9a:45:dc:59:3a:
9d:a3:e5:18:f7:b3:dd:63:ef:ab:9c:f9:b7:b1:ce:cd:b3:58:
b1:5c:a7:0a:ca:a3:e6:74:13:c3:24:46:c6:84:9a:d8:32:f9:
d5:c4:0c:a5:13:72:67:f0:fc:85:32:8d:1f:66:bb:40:03:2e:
19:b2:68:21:9f:03:9b:31:74:7e:61:da:cc:2e:23:47:e5:f9:
4d:f8:4f:41:69:98:5c:83:58:dd:4e:77:41:8a:20:f7:3b:ef:
b2:1b:1c:52:06:f8:f2:c9:83:c3:33:fc:fc:43:d1:f7:74:4e:
fd:1e:b0:9b:b2:05:eb:0c:8d:b5:32:88:1a:a5:6f:7d:c8:ff:
4d:91:0e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:38 2026 by rpki-client