Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
File: 3cf_z32PTDOExrKNBKESsh8jeRA.mft (raw, json)
Hash identifier: RZupmVLK+wDk7rWd4apeeHfQ86IDyoHT6O4JzcPmIGo=
Subject key identifier: 90:F3:82:64:76:D1:51:28:6B:3D:6B:5E:9B:74:45:9A:52:FE:60:3B
Authority key identifier: DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
Certificate issuer: /CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Certificate serial: 01A0E51A0ABA2ED27BE3C6D253F81DC11C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
Manifest number: 028A
Signing time: Sun 27 Sep 2026 23:01:24 +0000
Manifest this update: Sun 27 Sep 2026 23:01:24 +0000
Manifest next update: Mon 28 Sep 2026 23:01:24 +0000
Files and hashes: 1: 3cf_z32PTDOExrKNBKESsh8jeRA.crl (hash: 4JzVn3HrLfDiXLda+oFImpg8VtsLi/fPs/2cvpSxC34=)
2: BX4ECMa5PSwMxBNsjfnl8GRXj1s.asa (hash: wiV7d2L86p523gY92Ip5gfxBxVerpTdBSH5xKncDAqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:1a:0a:ba:2e:d2:7b:e3:c6:d2:53:f8:1d:c1:1c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Validity
Not Before: Sep 27 23:01:24 2026 GMT
Not After : Sep 28 23:01:24 2026 GMT
Subject: CN=90f3826476d151286b3d6b5e9b74459a52fe603b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:55:22:e7:ef:59:98:9e:c2:32:bf:67:69:
24:b4:81:2b:ef:3a:1b:0a:e1:23:c5:49:15:cd:b1:
6d:77:d1:f1:61:d6:f8:81:3c:1c:d0:07:88:f4:71:
1d:e9:49:f7:e9:eb:37:3b:b4:4e:9f:19:34:6d:a3:
f6:18:e3:a8:88:28:78:ca:be:9b:b1:26:ec:01:95:
c8:5f:48:ed:08:f0:4b:e1:b7:20:97:d2:ba:69:59:
7e:9d:2a:60:fa:d0:24:5d:69:11:55:90:fc:7f:d2:
6e:41:e9:75:81:ff:db:fa:8c:72:2d:d2:2d:57:d0:
19:b8:89:24:86:54:2c:80:91:08:5b:f3:c2:fb:cf:
2b:17:41:fe:7e:d5:ea:dd:2d:70:9f:7e:2d:ba:bd:
42:51:14:08:c8:f9:16:a9:d0:93:53:76:07:8d:39:
5d:27:16:a0:bf:fe:9d:4a:59:d0:af:63:a0:8d:49:
87:ed:f2:7d:50:fd:01:ec:ae:31:88:39:e3:a6:b0:
20:c0:5a:e3:2a:97:c8:ac:e1:32:4b:03:d1:be:c4:
9d:f0:dd:d4:8a:4a:28:8b:13:ae:9e:7c:3a:5b:96:
78:21:01:46:df:b8:21:52:2f:a8:0d:6e:34:57:23:
6e:f1:4e:b6:86:1f:f2:6a:71:eb:74:ab:80:ad:ad:
18:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F3:82:64:76:D1:51:28:6B:3D:6B:5E:9B:74:45:9A:52:FE:60:3B
X509v3 Authority Key Identifier:
keyid:DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:24:a8:4d:a8:12:1e:3b:3f:cc:e0:7f:e9:56:14:c4:90:13:
91:59:63:7f:6f:e9:ae:6f:6f:cd:9c:2a:11:16:2b:b1:81:a1:
52:06:0c:f6:7d:12:c8:99:39:b4:95:05:86:8b:92:b3:86:50:
22:96:ca:67:ee:d2:db:53:ed:5a:a1:a8:79:2b:4f:04:18:f6:
e9:0c:14:b7:33:0d:06:ed:d4:c6:7c:96:ba:a4:f9:c6:40:0e:
26:46:3a:9f:59:95:91:d2:e7:62:46:61:db:b1:c7:85:78:4e:
d6:cc:24:3b:9e:6c:36:e6:20:7b:1c:95:08:ab:81:cb:21:4a:
06:15:01:a0:dc:bf:32:0b:fb:6b:d0:93:23:fc:65:ab:f9:03:
32:ec:5e:82:fd:d5:47:69:45:9a:e5:89:57:3b:e2:c7:de:8b:
12:d1:29:48:66:89:c8:fa:f3:3b:28:a4:25:6a:85:3f:db:aa:
da:28:dd:da:90:96:e8:ae:1d:6b:0c:b2:0e:cd:2a:13:0f:98:
11:66:fb:3f:c6:a8:73:21:87:0e:df:0c:03:86:54:c7:08:ca:
79:4b:43:f2:d3:4f:1d:e9:42:35:38:4a:d2:e5:b6:09:1f:05:
33:77:a5:cc:52:e2:22:1f:c2:04:76:51:57:dc:44:52:3f:a3:
27:77:96:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 03:35:53 2026 by rpki-client