Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: lhls9TMnVc7OIciCJZD5o1yi8d7t8H0ReJoO1eERpD0=
Subject key identifier: 5C:34:9A:61:9A:F4:A0:68:8F:33:35:12:F4:97:2E:8B:CA:DB:19:FC
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 01A08AC374BCC54C4ABB09CB5594B83CB25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 10DC
Signing time: Thu 10 Sep 2026 10:01:00 +0000
Manifest this update: Thu 10 Sep 2026 10:01:00 +0000
Manifest next update: Fri 11 Sep 2026 10:01:00 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: 2WWAgCSd+rmjMr/Fw/68Q2B+ewd1zwKfLLZY9bbJKrg=)
2: QFEuDeeu4X6RvqTM-9j-vL-jCec.roa (hash: enIY13X+DtKSJonUyur86EMN51RX0wJhm2ZaFev3lAE=)
3: lGfy-skAnLgxdiq51q1vJk9OXZg.roa (hash: 905M+SG71AWuwma3AVwJNMrg+VeownsgNGw18kPIIEs=)
4: shwWHH59CwEK5l3nYzgvrpyDADs.roa (hash: Xxgj4+MGImPO/BRjCoJfEL8QyT6UC4SQ9MovxKsATjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:74:bc:c5:4c:4a:bb:09:cb:55:94:b8:3c:b2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Sep 10 10:01:00 2026 GMT
Not After : Sep 11 10:01:00 2026 GMT
Subject: CN=5c349a619af4a0688f333512f4972e8bcadb19fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:b1:35:e5:0e:ea:05:e8:48:f8:98:06:98:
dd:78:d7:ad:1c:c6:1d:9a:95:42:f1:68:ad:bc:b0:
a0:0f:91:cf:47:7a:67:bc:90:73:73:e5:43:2c:c8:
b2:87:af:e3:3e:c9:5e:43:1d:f5:a8:23:71:56:f7:
72:c9:89:b9:bb:49:4d:f1:ab:ff:df:4a:b3:57:d2:
b1:75:62:2c:05:c4:da:e1:26:ad:56:a2:43:96:08:
11:83:b4:e8:94:36:db:01:37:03:a1:b0:41:53:ed:
39:ad:38:f5:91:48:d3:3e:ff:0a:5c:63:d7:bf:49:
0a:8b:45:f9:4a:ea:83:44:7d:97:e3:81:3a:35:72:
70:74:be:49:54:f6:56:e2:fd:86:95:79:71:bb:ae:
19:27:d2:f5:37:02:ce:25:e0:99:40:1d:6c:09:60:
38:40:4c:bb:4b:6f:34:4a:f2:d0:01:bb:5d:2d:ea:
1a:07:39:6b:7c:6b:5a:c7:dd:e2:a4:5a:f9:f4:a5:
e8:f6:b0:07:51:30:02:96:74:7f:b5:99:93:32:82:
54:d1:10:c8:de:49:86:ef:80:b3:b7:00:90:f4:cf:
05:57:59:21:21:81:be:b2:cc:73:aa:bc:a2:92:e5:
5a:7c:db:6c:b1:04:3e:55:5c:e4:f6:a1:ce:ce:e0:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:34:9A:61:9A:F4:A0:68:8F:33:35:12:F4:97:2E:8B:CA:DB:19:FC
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cc:1c:31:69:a4:12:39:6b:75:f0:18:34:b2:db:dc:31:58:
3e:31:8a:30:56:6a:fc:2d:60:6e:25:a2:45:c4:78:a7:bf:6e:
57:b9:bd:5c:56:fe:6b:3b:24:e4:a9:35:b6:22:96:b4:42:77:
b7:64:9a:00:29:37:45:6f:bb:dc:13:87:c0:01:fe:f0:1d:5f:
9e:d7:ee:72:4a:9c:3e:13:f9:7e:90:29:13:9c:a6:b3:ae:2b:
e1:2a:1d:16:63:5e:39:23:c4:b7:47:c1:ec:a7:6a:f8:78:e9:
71:f5:6b:b3:9b:d4:ca:ad:b0:da:33:83:7e:d3:68:c4:63:a1:
de:c2:e8:2a:b4:1e:79:93:67:c9:50:eb:69:ac:21:97:cd:e6:
66:54:1d:13:d3:bb:99:76:e3:b3:b4:ba:e6:b7:66:fd:79:c0:
67:11:e8:48:47:22:12:94:48:89:41:22:7c:6f:31:9e:ba:bf:
33:90:98:eb:0c:99:11:dc:e9:43:b1:d8:53:aa:39:6a:97:11:
12:e4:97:e6:00:1a:40:d5:6d:48:10:9d:6c:75:02:4f:dd:5b:
ee:63:45:81:50:f6:34:60:d2:6b:55:d6:90:c3:00:5a:85:a3:
87:d0:91:a5:47:7b:3c:4e:b4:fe:38:98:33:24:74:a9:5c:27:
e0:10:08:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:36 2026 by rpki-client