Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.mft
File: 3c1w0wQbbgS5xjyGZoEGCHnzPDM.mft (raw, json)
Hash identifier: 2Yr3HefH/npviSIrtIFMbGuYxY+dlktqEIpBl0DrloY=
Subject key identifier: DE:03:BE:02:AE:41:DD:0E:82:9C:09:59:CD:C4:50:C2:0C:36:FB:02
Authority key identifier: DD:CD:70:D3:04:1B:6E:04:B9:C6:3C:86:66:81:06:08:79:F3:3C:33
Certificate issuer: /CN=ddcd70d3041b6e04b9c63c866681060879f33c33
Certificate serial: 01A0404E7F08B4D0783BAE38CB6BAFBB309E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c1w0wQbbgS5xjyGZoEGCHnzPDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.mft
Manifest number: 01C3
Signing time: Wed 26 Aug 2026 23:01:21 +0000
Manifest this update: Wed 26 Aug 2026 23:01:21 +0000
Manifest next update: Thu 27 Aug 2026 23:01:21 +0000
Files and hashes: 1: 3c1w0wQbbgS5xjyGZoEGCHnzPDM.crl (hash: cIm2cPaIZ9ywooXgSsxZxgDMrcUbOWVwnqlO4RAF/3E=)
2: nJP4E1BCewAFvyQ9khu6K5PbIao.roa (hash: ECxIOroPlkk1P7RKbeML7Eha9aF0iyIC+Cc+BENCAT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3c1w0wQbbgS5xjyGZoEGCHnzPDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:7f:08:b4:d0:78:3b:ae:38:cb:6b:af:bb:30:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcd70d3041b6e04b9c63c866681060879f33c33
Validity
Not Before: Aug 26 23:01:21 2026 GMT
Not After : Aug 27 23:01:21 2026 GMT
Subject: CN=de03be02ae41dd0e829c0959cdc450c20c36fb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:fb:a0:0f:8f:f7:45:e3:93:56:e7:94:a9:
3a:85:5d:b1:2a:51:59:1c:0b:ce:ec:3d:79:33:fc:
d1:49:20:b1:7b:3c:4d:a4:29:e7:cd:2d:1c:9d:d4:
58:b1:af:ea:61:5f:54:7c:a6:ec:a7:8b:33:53:76:
26:f3:6a:80:de:1c:71:d7:03:87:b0:03:81:0f:dd:
b4:19:51:71:ea:be:45:1b:59:fc:a5:b4:d5:60:82:
fb:9e:15:cf:43:4e:bf:de:2c:c2:60:c1:13:42:34:
fe:f5:2b:05:d9:d5:54:62:8d:72:d9:4c:a0:b1:59:
f4:6c:5c:1f:b0:97:5b:d9:c0:6c:51:bf:76:36:1b:
17:a0:0d:a9:c5:21:72:77:07:70:38:32:25:23:6d:
dd:d2:50:43:7f:aa:20:58:f9:77:ba:a0:94:c2:fe:
03:79:44:8e:a4:61:e3:4d:b0:58:33:3d:fe:4d:38:
52:77:9d:89:3c:c0:01:3b:15:47:96:4b:f1:74:f4:
e3:55:47:f8:59:c1:43:a8:5d:fb:e5:ad:d5:a2:89:
f3:11:a0:04:4e:ba:f3:08:3b:6c:39:fd:6f:31:e8:
ee:92:ac:39:d0:94:fd:af:f6:5e:05:56:a1:ca:89:
96:32:63:37:b2:4c:95:d3:dd:2e:46:e8:d4:5a:ad:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:03:BE:02:AE:41:DD:0E:82:9C:09:59:CD:C4:50:C2:0C:36:FB:02
X509v3 Authority Key Identifier:
keyid:DD:CD:70:D3:04:1B:6E:04:B9:C6:3C:86:66:81:06:08:79:F3:3C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c1w0wQbbgS5xjyGZoEGCHnzPDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:da:db:34:2d:ac:0c:a5:28:65:a7:8c:62:ec:b8:00:e7:f4:
f8:fe:92:73:88:1d:23:a8:63:11:71:96:3f:ae:72:a3:27:de:
67:de:c3:e8:b3:52:d5:41:b0:3f:bf:fa:27:c1:48:0d:20:6b:
f2:9f:70:9d:42:88:5d:a3:4d:39:5b:75:70:1e:16:01:56:7c:
fe:09:10:c5:e3:72:a2:5e:3d:a2:9f:fd:4e:c3:ee:e4:9f:67:
e2:e2:ac:e5:27:a9:9b:29:b5:74:8a:e2:e7:bc:2c:f9:59:89:
3d:54:43:3f:dd:6f:d9:50:cd:88:40:c5:48:5a:9f:47:26:a6:
6f:ce:ff:17:1d:c1:10:6f:e4:8a:d4:61:72:92:3b:39:a6:d2:
cf:3a:23:b6:b1:0e:8b:f2:7f:99:14:c2:78:e3:ac:d3:50:fb:
e4:f0:9e:0d:d5:79:b7:8d:71:58:4e:11:cc:60:05:df:24:d8:
01:d4:d0:f2:e7:96:84:0d:26:9c:c8:1d:1b:a3:35:56:8c:bb:
d9:6c:c4:ac:d3:29:ae:16:88:2e:a1:4a:35:ce:a0:10:21:57:
da:b5:7b:c3:58:a9:70:75:55:80:00:31:c3:cf:27:0e:64:f0:
57:31:ab:92:93:d9:c9:08:aa:f3:1e:ce:1b:d4:80:33:06:e0:
84:be:e1:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATn8ItNB4O644y2uvuzCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkY2Q3MGQzMDQxYjZlMDRiOWM2M2M4NjY2ODEwNjA4Nzlm
MzNjMzMwHhcNMjYwODI2MjMwMTIxWhcNMjYwODI3MjMwMTIxWjAzMTEwLwYDVQQD
EyhkZTAzYmUwMmFlNDFkZDBlODI5YzA5NTljZGM0NTBjMjBjMzZmYjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrf7oA+P90Xjk1bnlKk6hV2xKlFZ
HAvO7D15M/zRSSCxezxNpCnnzS0cndRYsa/qYV9UfKbsp4szU3Ym82qA3hxx1wOH
sAOBD920GVFx6r5FG1n8pbTVYIL7nhXPQ06/3izCYMETQjT+9SsF2dVUYo1y2Uyg
sVn0bFwfsJdb2cBsUb92NhsXoA2pxSFydwdwODIlI23d0lBDf6ogWPl3uqCUwv4D
eUSOpGHjTbBYMz3+TThSd52JPMABOxVHlkvxdPTjVUf4WcFDqF375a3VoonzEaAE
TrrzCDtsOf1vMejukqw50JT9r/ZeBVahyomWMmM3skyV090uRujUWq3LtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4DvgKuQd0OgpwJWc3EUMIMNvsCMB8GA1UdIwQY
MBaAFN3NcNMEG24EucY8hmaBBgh58zwzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2MxdzB3UWJiZ1M1eGp5R1pvRUdDSG56UERNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hM2IzYmUtOTU3ZC00Nzc3LTliNjQt
ZDcwNmJkMGE2YmVkLzEvM2MxdzB3UWJiZ1M1eGp5R1pvRUdDSG56UERNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hM2IzYmUtOTU3ZC00Nzc3LTliNjQtZDcwNmJkMGE2YmVk
LzEvM2MxdzB3UWJiZ1M1eGp5R1pvRUdDSG56UERNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9rbNC2s
DKUoZaeMYuy4AOf0+P6Sc4gdI6hjEXGWP65yoyfeZ97D6LNS1UGwP7/6J8FIDSBr
8p9wnUKIXaNNOVt1cB4WAVZ8/gkQxeNyol49op/9TsPu5J9n4uKs5Sepmym1dIri
57ws+VmJPVRDP91v2VDNiEDFSFqfRyamb87/Fx3BEG/kitRhcpI7OabSzzojtrEO
i/J/mRTCeOOs01D75PCeDdV5t41xWE4RzGAF3yTYAdTQ8ueWhA0mnMgdG6M1Voy7
2WzErNMprhaILqFKNc6gECFX2rV7w1ipcHVVgAAxw88nDmTwVzGrkpPZyQiq8x7O
G9SAMwbghL7hyw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:19 2026 by rpki-client