Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
File: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft (raw, json)
Hash identifier: AoUrBztWIKFtdnCxAw8pNO1CjipFVaewDiN5jOSzRbQ=
Subject key identifier: A0:7E:04:7C:DA:1C:D7:D6:AF:7F:C8:CE:2B:FC:47:DC:74:97:BE:6E
Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
Certificate issuer: /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Certificate serial: 019D389C3AC0493CB8E0076F78021697C6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
Manifest number: 1747
Signing time: Sun 29 Mar 2026 08:00:55 +0000
Manifest this update: Sun 29 Mar 2026 08:00:55 +0000
Manifest next update: Mon 30 Mar 2026 08:00:55 +0000
Files and hashes: 1: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl (hash: PW/lABt1m9OhVAvnkS5ILG7M/2HttXIGE7ILsVZR07E=)
2: AmRr-NsaiHfyuDev91oo1Zo4i14.asa (hash: flczz05UDoBZbjGuSiDnaa69UqT7dfOGNjaT7YBFlc8=)
3: FNdC6V014hPt1Cj_9ePfXPj82Z8.roa (hash: me6C5aY++lhd9zOBr03z1dtrXd+vXTlDDm5g9m7Go/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3a:c0:49:3c:b8:e0:07:6f:78:02:16:97:c6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Validity
Not Before: Mar 29 08:00:55 2026 GMT
Not After : Mar 30 08:00:55 2026 GMT
Subject: CN=a07e047cda1cd7d6af7fc8ce2bfc47dc7497be6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:85:2f:2d:6e:13:e4:1e:dc:20:42:f8:3a:e5:
cf:92:6b:9b:08:11:91:87:04:c1:8d:93:fc:43:2a:
70:4f:64:4c:c4:e8:09:44:aa:6c:f0:3e:36:82:d3:
56:2b:53:df:e1:08:fe:4f:e7:3f:3f:1e:f1:7e:1a:
2e:42:aa:7c:45:e8:ca:de:9e:c0:9f:07:51:69:cd:
02:64:9c:a1:9b:d4:d5:2a:ad:33:7a:f7:5a:63:e2:
e5:a7:b6:db:79:63:01:e2:28:05:89:c7:a5:3b:06:
e8:5f:42:a8:fd:48:59:02:4f:bc:f3:8e:2a:df:ca:
4b:55:df:9e:f5:3b:fc:e2:bd:c9:36:60:b2:86:08:
b7:d6:35:db:d1:8c:e7:fa:2f:d8:af:a4:3f:60:83:
97:20:43:f1:ee:31:5e:e7:8e:23:27:e1:74:cf:d6:
21:87:23:81:ed:84:67:d3:62:87:60:33:7a:c3:57:
3c:14:31:bc:4c:2b:67:9c:3c:82:85:83:dc:7c:37:
03:50:35:a1:3d:d8:e1:fb:89:66:49:9b:78:31:65:
50:77:1b:a8:52:d3:3b:fd:1d:7d:9f:19:5c:76:a4:
8b:c2:44:91:94:da:3d:34:e7:da:91:5d:e6:b6:08:
3e:fa:af:96:ae:53:71:7d:89:5b:c6:e3:84:a7:75:
18:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7E:04:7C:DA:1C:D7:D6:AF:7F:C8:CE:2B:FC:47:DC:74:97:BE:6E
X509v3 Authority Key Identifier:
keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:76:c3:89:32:a9:0f:fa:7c:9b:74:67:2d:dc:4d:ca:99:c0:
24:77:31:d9:bf:60:0e:cb:e7:3d:26:a1:8f:f6:d5:ba:30:73:
ca:69:07:d8:2c:97:5d:ca:8b:e8:a1:1b:63:59:8d:d3:9d:08:
f7:38:9d:4f:c5:5b:91:df:94:b3:d0:03:08:cc:73:83:9b:e6:
8e:bd:52:9a:c4:59:45:62:d4:93:43:cf:9b:39:38:22:5d:23:
04:02:f1:84:16:b1:77:bc:77:8e:9c:1f:6d:b0:fd:11:2e:03:
1b:9a:52:2b:8a:3a:1d:89:fb:db:d0:27:f7:7d:db:68:3a:8b:
47:db:05:39:61:24:04:80:2d:b7:fc:04:e2:cd:45:de:96:c6:
11:68:5a:db:91:b7:a1:c9:51:4d:c9:97:d0:c0:f2:21:8c:7e:
7f:1a:eb:af:22:91:27:f6:e2:42:24:50:df:03:7c:2b:87:a7:
0b:34:9e:ee:2c:5a:c5:38:98:ca:78:b5:9e:20:6c:48:ba:0b:
42:0b:5b:06:8a:06:48:d6:63:80:5a:cf:6b:d6:b0:f5:07:89:
6c:b2:b7:72:b6:01:db:30:82:80:7f:af:fe:8e:c5:94:4b:b9:
79:ba:4f:62:83:0e:cf:f6:7e:e1:c7:c2:a2:c4:8f:50:11:12:
4a:1c:66:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:03 2026 by rpki-client