Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
File: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft (raw, json)
Hash identifier: 3P3EqNjJnQ/TZA87GZIdKCTmn2j+c06yJ9xJTGCWA4U=
Subject key identifier: 46:44:D2:F4:5C:07:C1:9C:3C:0C:36:E8:A0:47:7A:75:49:BF:4B:A9
Authority key identifier: DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
Certificate issuer: /CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Certificate serial: 019CE55B19CD3BC98A12A4F85285590154EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
Manifest number: 7C
Signing time: Fri 13 Mar 2026 04:01:18 +0000
Manifest this update: Fri 13 Mar 2026 04:01:18 +0000
Manifest next update: Sat 14 Mar 2026 04:01:18 +0000
Files and hashes: 1: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl (hash: jwwkuzZlfLYAM3WXoHzO1+kRF3hjvDeBx3+e+S/z0LU=)
2: VGuckUmXD3FffNojHBh4mr4L2f8.roa (hash: 8TbPfvVyzj3G5WKw2nSbHXcBZE5w35KkZHPmx5cAQsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5b:19:cd:3b:c9:8a:12:a4:f8:52:85:59:01:54:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Validity
Not Before: Mar 13 04:01:18 2026 GMT
Not After : Mar 14 04:01:18 2026 GMT
Subject: CN=4644d2f45c07c19c3c0c36e8a0477a7549bf4ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:00:af:27:00:19:29:71:25:e1:47:f1:56:
75:5a:58:c1:81:f9:c6:35:f5:13:d6:f6:6e:08:77:
3d:dc:d8:ce:8b:40:43:ab:3f:6a:db:42:67:56:47:
df:2f:b6:b7:04:39:80:2a:e9:08:56:62:a2:af:be:
67:39:49:a2:ac:58:90:c7:10:cc:ac:5b:cd:e3:3d:
b5:b4:d6:b7:96:c1:9a:e3:96:d4:dc:79:61:61:cc:
43:22:84:01:3d:ae:b7:f8:00:ed:ab:cc:51:c9:85:
b9:06:c8:9c:83:45:ce:68:8c:4f:2b:6f:96:d2:d7:
a9:7b:86:ec:60:85:c9:22:f8:5c:44:aa:42:6b:b6:
3e:4f:b5:47:f0:30:d7:40:77:57:ee:93:2f:43:9c:
f7:d3:c8:54:6e:0e:b9:23:b6:a1:6b:0e:15:7d:02:
54:cc:6a:91:de:38:7b:1c:57:48:7e:4f:a8:ad:cb:
fb:73:f1:6c:0a:6e:a9:45:4d:02:58:f3:51:3b:97:
de:22:96:92:56:bf:86:8a:6d:42:3e:eb:44:6b:98:
06:d9:9b:99:68:b7:77:64:49:d1:5e:cf:69:88:cd:
b5:fd:c5:9c:2a:6e:09:f6:7f:88:df:01:d8:26:36:
65:7b:27:f1:d4:d4:2e:36:15:15:a3:c3:89:c7:f6:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:44:D2:F4:5C:07:C1:9C:3C:0C:36:E8:A0:47:7A:75:49:BF:4B:A9
X509v3 Authority Key Identifier:
keyid:DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0e:e4:b1:c4:36:cc:2e:e8:9f:4f:70:35:34:d8:f9:01:56:
97:27:54:1d:e6:dd:11:ea:78:35:33:fd:8a:a9:cc:55:51:4e:
1a:c9:29:82:0c:4f:80:7c:9c:8d:e2:0e:8c:29:a9:7e:69:94:
1e:83:3f:23:79:1f:22:a6:04:cb:e4:f1:69:f9:18:40:c8:66:
9b:4e:fa:38:81:0f:b3:05:58:d6:bd:e4:f0:89:06:75:b8:91:
4e:94:7b:ae:35:9e:d4:80:2c:42:a6:6b:ac:cb:49:f5:38:70:
f2:83:5e:c9:cf:a8:8c:74:be:51:f9:79:4b:ea:c7:88:5e:65:
5c:1f:ca:19:c9:2f:c5:8c:b5:d6:60:d8:6a:58:6d:90:b2:86:
83:64:9d:a9:64:1b:1f:0a:f2:1e:05:65:eb:72:10:5f:93:38:
ae:19:ed:07:b6:06:71:1b:db:ac:1a:53:19:2d:21:3b:f2:20:
cc:ba:bd:b6:44:91:3a:e9:8c:38:66:c0:ea:f4:c6:1a:8f:73:
81:69:dd:5d:2d:9e:c9:1c:4c:50:48:f7:c0:ce:78:34:d6:23:
64:22:5d:f7:a3:05:cf:03:82:4b:2a:00:e8:55:fb:c6:e3:3a:
d3:44:9a:08:db:fd:04:28:4a:8e:cd:94:96:39:3b:28:9d:56:
7e:f3:93:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:05:20 2026 by rpki-client