Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
File: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft (raw, json)
Hash identifier: l2Hd2ed1KABFB4qR1iwYmPSMD3dhPn/H0gDF8Q6Uf4Q=
Subject key identifier: F2:37:DD:AF:11:B5:EA:5F:9B:E7:CA:11:CA:2C:5A:45:46:7F:05:C5
Authority key identifier: DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
Certificate issuer: /CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Certificate serial: 01A08C0DBEA6259D1002A99BC995C98DFB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
Manifest number: 0260
Signing time: Thu 10 Sep 2026 16:01:46 +0000
Manifest this update: Thu 10 Sep 2026 16:01:46 +0000
Manifest next update: Fri 11 Sep 2026 16:01:46 +0000
Files and hashes: 1: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl (hash: p8mfM3//zY+rVGpCl1HJl6GetevOB/I2IFRbwKvZDSQ=)
2: VGuckUmXD3FffNojHBh4mr4L2f8.roa (hash: 8TbPfvVyzj3G5WKw2nSbHXcBZE5w35KkZHPmx5cAQsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:be:a6:25:9d:10:02:a9:9b:c9:95:c9:8d:fb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Validity
Not Before: Sep 10 16:01:46 2026 GMT
Not After : Sep 11 16:01:46 2026 GMT
Subject: CN=f237ddaf11b5ea5f9be7ca11ca2c5a45467f05c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:5e:86:c3:e2:d9:d2:31:f4:ce:f3:04:ce:
63:8d:55:47:69:5f:d6:93:2b:4b:b0:2a:a5:f7:b5:
99:5b:38:84:83:9a:ad:8d:3c:b5:af:40:ac:ab:88:
48:9e:c4:d7:ef:4c:73:fa:6f:36:7d:09:bf:10:76:
42:75:0f:ff:2f:69:06:f0:a4:2a:1c:06:58:d2:9a:
b3:be:ef:74:63:db:e5:b9:6e:13:01:4a:b1:e3:da:
47:d5:90:c5:54:e6:3e:aa:d7:61:de:23:18:34:2e:
cf:b0:64:81:34:36:a3:27:95:2b:43:85:e8:52:2b:
07:49:d2:f1:8a:60:5f:fa:ec:b4:ac:95:5c:8a:0e:
8f:52:d2:41:79:e2:01:09:7a:ab:cb:fa:66:77:d9:
41:e5:91:ce:6a:40:af:94:97:86:ea:26:f9:ff:bd:
98:c3:a2:60:e5:22:3b:17:ff:8b:a3:01:4b:89:a9:
84:2d:85:b8:a9:8c:1b:62:70:f6:0e:f5:4d:fd:36:
d5:98:23:05:f9:2f:0b:18:ab:71:04:cc:1c:19:ce:
10:f6:f1:72:b0:20:87:2c:34:43:43:24:1d:e0:ee:
46:13:94:86:b6:e3:06:3a:e3:03:ef:6e:94:98:8e:
60:8a:91:92:5a:29:a4:d2:b0:99:70:56:4e:dd:c3:
6c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:37:DD:AF:11:B5:EA:5F:9B:E7:CA:11:CA:2C:5A:45:46:7F:05:C5
X509v3 Authority Key Identifier:
keyid:DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fd:60:cf:c8:59:2e:4f:ac:3b:9d:dd:83:e5:d5:f1:d8:2b:
bb:80:42:1f:ba:4a:eb:6d:07:36:17:a1:9f:43:e4:95:ac:53:
17:3b:d6:51:40:0e:2a:f4:16:1c:6c:75:bb:e8:fe:4e:05:2b:
aa:0b:7d:b9:a0:a9:2c:63:4d:a1:81:54:d4:ad:70:e8:e5:18:
03:8e:b0:64:7a:5c:b0:47:2f:55:cb:d4:a1:83:1d:6f:94:a0:
89:ac:46:08:94:f5:25:f1:28:34:06:95:5e:a6:87:a4:be:c6:
f5:5b:43:dc:eb:08:63:4d:cf:9a:d2:2e:0b:10:4f:a0:16:d4:
cf:0f:bf:bb:4d:3c:a7:01:11:62:a7:01:27:b5:78:b4:a0:e3:
07:9f:72:9a:ce:fd:33:c2:7c:3b:1a:1f:fe:f3:86:08:16:95:
82:46:c9:a9:8a:e1:4e:85:d6:7e:5f:03:ff:45:5d:f4:be:3e:
9f:90:d3:51:6b:57:0b:8d:0d:bf:48:01:20:d9:3c:37:95:9a:
2c:79:5a:d9:2d:3d:19:82:53:40:e8:76:63:c5:8c:b3:69:0f:
0a:1b:cd:26:9e:c3:7b:b9:c5:a7:11:e6:e8:35:24:f3:a5:ef:
a3:29:64:ba:1f:51:28:57:af:9b:2f:74:0f:95:80:44:cb:de:
8f:94:f5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:38:58 2026 by rpki-client