Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
File: 3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json)
Hash identifier: 8pOTc6UvRiprMt5z7z0TywtISmNZ/yuVcCJfKPdTkNY=
Subject key identifier: 67:19:CD:CD:66:E0:93:76:2B:5E:DE:5F:24:33:C7:4F:20:70:98:8A
Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
Certificate issuer: /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Certificate serial: 01A140155A652B0A11AD9C6AC7CE5CE9F04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
Manifest number: 17B3
Signing time: Thu 15 Oct 2026 15:01:43 +0000
Manifest this update: Thu 15 Oct 2026 15:01:43 +0000
Manifest next update: Fri 16 Oct 2026 15:01:43 +0000
Files and hashes: 1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: 5up/ZqV840MbodgD04+NFPXE4HJ/gmXq33fU5P9Awt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:5a:65:2b:0a:11:ad:9c:6a:c7:ce:5c:e9:f0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Validity
Not Before: Oct 15 15:01:43 2026 GMT
Not After : Oct 16 15:01:43 2026 GMT
Subject: CN=6719cdcd66e093762b5ede5f2433c74f2070988a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:c2:64:08:3e:38:59:d7:7e:4f:3f:a9:4d:
7f:1f:d3:83:9e:0c:23:c2:75:8d:70:d3:01:9b:ed:
ed:be:e0:bc:11:f3:e1:79:82:de:48:8e:7c:14:2a:
cb:cf:b5:8b:e9:ce:73:07:6c:45:44:64:45:bc:50:
26:6c:e3:60:82:48:4b:c0:eb:8e:6a:00:c3:b1:98:
ba:31:3d:ed:3d:e4:27:1a:8a:59:38:25:04:db:6d:
9b:80:d1:aa:e4:d0:2c:ec:37:ed:5e:d6:8d:0f:72:
bb:df:eb:cf:55:d0:89:aa:9f:bd:81:b4:46:91:a8:
ce:8d:03:16:83:59:70:53:fc:84:64:fb:c0:ae:d3:
cf:d3:41:84:5b:69:f5:a3:ca:4d:4d:0f:73:a3:88:
c3:3b:ab:0e:40:1b:6a:82:ad:a7:e6:92:f9:49:df:
e4:72:ae:77:03:e9:1a:69:ca:dd:08:27:93:6e:ae:
88:bd:28:50:e4:79:c1:a3:f3:7a:c6:2b:29:c1:87:
53:59:fa:6b:45:f1:bb:69:d2:02:f5:6d:26:71:c7:
fe:98:7c:f1:05:37:f2:ba:9a:23:95:85:86:82:07:
fa:48:e7:39:a6:1d:48:be:96:24:ee:c7:d2:0c:18:
c5:6a:bc:00:23:90:60:c8:90:4f:7a:dc:86:7c:39:
fc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:19:CD:CD:66:E0:93:76:2B:5E:DE:5F:24:33:C7:4F:20:70:98:8A
X509v3 Authority Key Identifier:
keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:99:c7:b9:01:56:d5:22:47:de:53:3f:f5:ad:a7:c3:08:2b:
d6:be:ee:57:06:a7:b5:02:19:3e:0c:e3:72:c5:be:d0:cc:a2:
e2:58:6f:15:0e:7e:4b:03:d5:77:11:b1:2e:a2:36:e7:4d:1f:
18:21:64:f3:c8:b7:ec:e6:5f:1d:eb:64:0a:61:58:05:05:87:
0b:27:3a:bf:25:c0:bc:4a:82:df:20:2f:bf:b8:87:43:3f:83:
48:6c:3b:5f:3f:af:e7:74:8d:e5:d2:43:08:29:5e:10:9f:a0:
40:a6:ea:84:76:6f:a0:c2:27:7e:e5:a2:8b:fd:6b:06:42:16:
91:04:aa:d7:5a:fa:9d:3a:43:74:2c:80:5b:5d:38:3a:2c:a2:
e8:d0:14:3d:da:e8:08:d6:33:f0:3e:37:1f:ba:0c:96:37:dd:
5c:4c:6e:3d:61:15:67:23:57:87:a5:26:ec:e0:4d:f9:9a:01:
f3:f9:83:b2:b1:70:a6:bd:da:6a:49:e7:c3:6c:0e:b0:4e:3e:
00:7c:5c:8d:c3:9b:1c:36:87:1f:c5:14:8e:c4:6e:c2:16:ec:
8a:5c:3c:ae:2b:71:ff:0a:15:da:2e:34:8c:77:2d:dd:14:b6:
7e:fc:d9:5a:7b:ab:7c:41:5b:55:e9:d3:1f:cd:68:d7:81:ff:
6f:ad:56:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:52:19 2026 by rpki-client