Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
File: 3cwuYUgshl3CU8D6lD49os6X2gU.mft (raw, json)
Hash identifier: S406pyOcOCy+GRlfYpdZbk81/NqgR0qpUPBixm8tWAE=
Subject key identifier: A6:A3:8D:9E:E4:EE:28:E9:61:D4:1F:A8:5B:EE:EB:3E:84:27:49:FB
Authority key identifier: DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
Certificate issuer: /CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Certificate serial: 019D37C0517795EFACFB26EA1874DAF53674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
Manifest number: 0813
Signing time: Sun 29 Mar 2026 04:00:43 +0000
Manifest this update: Sun 29 Mar 2026 04:00:43 +0000
Manifest next update: Mon 30 Mar 2026 04:00:43 +0000
Files and hashes: 1: 3cwuYUgshl3CU8D6lD49os6X2gU.crl (hash: Rv+hJJhV/RfD45rMP6LTU9R78wGhMjoHRlU3KsMaQf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:51:77:95:ef:ac:fb:26:ea:18:74:da:f5:36:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Validity
Not Before: Mar 29 04:00:43 2026 GMT
Not After : Mar 30 04:00:43 2026 GMT
Subject: CN=a6a38d9ee4ee28e961d41fa85beeeb3e842749fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:18:9d:53:d8:84:cc:85:71:34:51:1a:37:
e0:ac:2f:eb:d8:3c:04:19:b0:8d:8d:c4:b8:c3:16:
17:c7:4b:0b:e8:f2:bf:b9:6a:16:9a:9c:e9:2f:ac:
08:02:ed:8b:a5:4c:75:a4:6f:ca:f7:1e:4d:3a:c2:
f7:4f:e3:96:07:10:68:e0:e8:9a:0e:31:e2:3b:72:
b7:53:64:3a:6a:ec:e1:ad:a2:55:7a:05:4e:1c:e6:
81:4c:15:27:3c:c0:dc:cd:c7:9b:24:10:9f:72:c7:
7f:96:93:ae:60:1e:6a:1b:59:d5:47:c3:7e:7f:c5:
ec:96:8e:13:8a:b0:d6:ca:16:c4:19:d6:9c:89:82:
1d:f9:b4:48:85:87:ef:fe:b0:c6:db:ca:bd:2f:11:
72:e4:02:79:3c:c8:c5:74:0f:0a:b4:5d:bf:a4:70:
fc:5f:95:4c:58:ec:8f:2e:24:be:4a:1f:64:37:e1:
44:c9:99:0b:72:61:c4:74:7f:d5:a9:f0:c2:70:5e:
74:b6:9e:79:b4:b2:b1:09:3f:f6:ca:b3:ee:77:8b:
21:07:e7:14:05:1d:34:af:4d:e0:c5:de:77:08:e9:
3c:59:f7:c2:c1:b8:77:a5:98:34:21:5f:75:c3:3f:
26:9a:2e:69:ff:1b:f1:11:f8:8a:bf:2a:3d:b5:25:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A3:8D:9E:E4:EE:28:E9:61:D4:1F:A8:5B:EE:EB:3E:84:27:49:FB
X509v3 Authority Key Identifier:
keyid:DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9c:e9:37:04:01:be:87:85:5d:21:b7:e8:c3:58:cc:9e:1b:
9f:18:97:8a:df:65:36:c3:a8:7f:c1:ca:d6:ab:90:46:10:b8:
65:e5:d6:0b:0c:95:20:4b:a3:53:b5:72:ac:e0:a7:28:51:5f:
2e:c4:1a:e7:e7:97:7f:29:df:c1:15:fc:d6:34:e3:14:23:b9:
92:76:35:46:89:d8:97:84:9b:c9:b5:4d:e1:ca:11:69:f1:e0:
66:4d:bf:21:f6:d9:40:14:39:45:ce:bf:ac:22:03:ba:5c:54:
a1:b4:8b:53:43:41:e2:eb:e1:0c:92:1c:ba:93:8c:a0:e1:95:
00:c3:cf:f2:16:c3:ac:95:46:bb:14:98:7c:11:b7:3a:fa:09:
52:eb:e7:b8:59:17:a1:3e:14:13:36:89:42:14:8e:91:b0:4b:
7a:a5:e6:8c:62:37:3a:f3:14:68:a2:9f:79:e0:4b:1a:85:48:
9c:2c:a3:8f:0b:b9:ba:5f:a7:2e:40:17:d7:9e:75:41:7c:fe:
b3:0a:23:c6:55:ff:62:d5:9e:b7:f7:c7:00:e8:aa:8b:d9:3a:
6f:da:61:e5:9b:6b:cc:5d:ac:c9:a5:6d:d1:55:87:d7:43:ee:
1c:07:ac:63:1e:74:0f:38:e2:f7:68:e1:33:e6:e7:c7:48:28:
67:98:6e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:20 2026 by rpki-client