Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
File: 3cf_z32PTDOExrKNBKESsh8jeRA.mft (raw, json)
Hash identifier: CCRvzxWUBWVkT2iSSLTQcsA6+vSaLB+jTGlxbD41eb8=
Subject key identifier: A1:1B:8B:02:F2:30:D9:99:C5:7D:23:ED:65:E2:5E:D1:05:14:0B:ED
Authority key identifier: DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
Certificate issuer: /CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Certificate serial: 019FF5A21EF5C7643F5EBD92E222BA3F83E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
Manifest number: 020E
Signing time: Wed 12 Aug 2026 11:01:10 +0000
Manifest this update: Wed 12 Aug 2026 11:01:10 +0000
Manifest next update: Thu 13 Aug 2026 11:01:10 +0000
Files and hashes: 1: 3cf_z32PTDOExrKNBKESsh8jeRA.crl (hash: Mo4bk4ozhsXt7rBPZQn7lql2lSmSErzOKuy5K6TI8bA=)
2: BX4ECMa5PSwMxBNsjfnl8GRXj1s.asa (hash: wiV7d2L86p523gY92Ip5gfxBxVerpTdBSH5xKncDAqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:a2:1e:f5:c7:64:3f:5e:bd:92:e2:22:ba:3f:83:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Validity
Not Before: Aug 12 11:01:10 2026 GMT
Not After : Aug 13 11:01:10 2026 GMT
Subject: CN=a11b8b02f230d999c57d23ed65e25ed105140bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a3:57:f1:95:3b:74:5b:80:bf:d5:08:cb:bf:
9d:62:10:af:75:bc:6e:0f:56:f0:9e:81:b0:bc:b1:
59:0b:55:40:f9:0e:29:47:94:8a:b7:cf:e7:22:f3:
5d:e9:01:4b:6e:40:8a:7d:b4:c9:8c:1d:9b:03:9b:
74:2e:56:ef:02:f0:45:56:89:a0:d0:06:59:16:da:
2e:71:da:e1:8d:83:7e:06:e6:ad:f4:56:14:ed:b8:
ec:39:d7:2f:ff:9e:68:aa:d2:92:65:f5:7b:b0:48:
db:00:c2:24:d9:63:46:31:5e:7b:64:71:ab:bd:d0:
26:f1:b7:0b:72:0d:04:04:7c:b7:f9:26:c9:68:5e:
00:cc:ac:45:b5:06:56:c2:e0:cb:67:19:0a:45:75:
ea:37:cf:9e:76:32:cb:e6:02:f1:b0:19:5d:26:1d:
02:1e:88:3c:28:e6:91:e2:82:6b:2d:73:8f:bb:d2:
eb:da:5e:9f:ae:15:df:ac:33:18:65:25:7e:b4:45:
c9:23:15:dc:e5:3e:36:98:58:70:4e:97:28:ae:8b:
99:14:f5:e9:89:a5:8d:b8:cf:ba:ff:58:f8:b1:1e:
78:f3:b6:61:73:ba:54:f6:ef:87:47:cc:33:c3:57:
c6:cc:a0:88:17:8b:4a:87:7b:2d:15:f5:38:1a:99:
46:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1B:8B:02:F2:30:D9:99:C5:7D:23:ED:65:E2:5E:D1:05:14:0B:ED
X509v3 Authority Key Identifier:
keyid:DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:43:14:ad:f0:a1:14:fc:a0:5f:6c:46:a8:e3:a6:94:f6:c9:
4b:ab:f6:50:22:d3:e6:5d:58:9d:8f:68:19:7b:b9:22:47:e2:
0a:62:58:e2:21:35:3c:0c:5b:4e:54:ee:6c:c2:87:7f:4c:53:
71:5d:9b:8b:3d:8f:00:a1:d1:7a:22:30:20:51:c6:d4:7d:3e:
11:71:22:97:37:19:7e:47:b9:f3:cc:ae:62:b8:15:5f:99:ee:
53:6c:6f:23:e7:e9:c0:90:cc:ab:51:bb:ec:0f:33:d5:ef:66:
c9:63:48:ac:98:f6:16:86:8d:c9:2f:24:51:4f:7a:98:14:5c:
e0:d3:bb:61:09:65:69:92:fa:cf:bc:a4:63:90:02:b8:e4:b0:
3e:29:30:00:e2:55:20:55:0e:22:90:50:ba:c9:f6:a0:08:b7:
d2:58:05:77:02:38:46:32:e9:7f:86:16:6e:8c:86:ef:a3:7c:
cf:77:e4:7c:10:29:36:91:24:4a:03:8e:fd:fd:d9:14:bf:25:
d1:af:eb:8c:46:67:b9:c8:ab:41:6d:60:61:fd:53:c9:a3:68:
c7:45:a2:b9:60:39:c5:4a:bd:53:f4:77:6e:bb:72:3e:b7:f6:
b7:31:73:36:c9:13:1e:8b:ba:61:22:11:26:fc:99:3f:73:14:
7d:62:40:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:37:01 2026 by rpki-client