Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.mft
File: 3C0fLO003Hbb9H29ywGire36Y2M.mft (raw, json)
Hash identifier: 8my+XxaxE+J21RESfX8sNYY5gteARCYbUpr7px07xMo=
Subject key identifier: 67:B4:F0:32:83:9C:57:AF:37:B3:84:77:E5:C7:3B:C8:8F:81:E2:26
Authority key identifier: DC:2D:1F:2C:ED:34:DC:76:DB:F4:7D:BD:CB:01:A2:AD:ED:FA:63:63
Certificate issuer: /CN=dc2d1f2ced34dc76dbf47dbdcb01a2adedfa6363
Certificate serial: 01A06DCC187329647E17D117249E5E0B2A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C0fLO003Hbb9H29ywGire36Y2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.mft
Manifest number: 0D
Signing time: Fri 04 Sep 2026 19:01:27 +0000
Manifest this update: Fri 04 Sep 2026 19:01:27 +0000
Manifest next update: Sat 05 Sep 2026 19:01:27 +0000
Files and hashes: 1: 3C0fLO003Hbb9H29ywGire36Y2M.crl (hash: YdL/wX54D2H/jxFP4cs3CQSvXBszuwqBkK1U8VT2DCU=)
2: DBqM2rKGn9TkbKEbcMQU0HoxyDs.asa (hash: 4s6LJxOtpE78lCi1aRhGXY83NHgQ3fwl3zQWL679DpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C0fLO003Hbb9H29ywGire36Y2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cc:18:73:29:64:7e:17:d1:17:24:9e:5e:0b:2a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2d1f2ced34dc76dbf47dbdcb01a2adedfa6363
Validity
Not Before: Sep 4 19:01:27 2026 GMT
Not After : Sep 5 19:01:27 2026 GMT
Subject: CN=67b4f032839c57af37b38477e5c73bc88f81e226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:fa:46:59:96:33:31:9e:e8:5f:dc:a9:97:
fd:64:cc:ed:73:35:4d:ea:0b:d4:bc:59:2e:2f:62:
0a:c1:56:59:06:b4:8d:07:8c:10:97:a5:73:8d:34:
0c:7e:0e:4e:4c:05:41:35:ef:ff:1f:4b:83:71:0d:
ce:e8:89:04:8a:99:06:0a:fe:c1:a5:e3:95:87:f2:
04:a0:b4:5e:31:a1:01:fc:67:bf:19:01:d7:07:fe:
74:0a:02:f4:5d:29:a9:89:05:5e:04:dd:12:2e:66:
59:20:50:b5:c6:b0:47:b4:89:b0:a5:cf:ac:ad:21:
d5:ef:17:9a:d5:50:1b:3e:c1:8a:21:0f:15:7b:4e:
1b:b6:c1:bd:93:46:6a:48:0d:7b:4c:ed:7f:3e:84:
bb:dc:3f:28:9a:80:6b:74:33:cc:62:3f:66:57:bf:
0e:87:56:e4:a6:e9:8f:03:62:d3:31:5b:06:e9:67:
e2:72:ba:6b:b5:a6:77:b5:eb:9c:58:81:bf:3e:67:
3e:79:b9:14:90:e7:d5:bc:bd:74:32:68:50:a2:18:
b8:72:36:e6:ff:a6:77:fd:e4:95:02:23:a5:15:85:
44:ba:e6:72:28:df:b8:85:55:2d:f1:ba:32:82:9f:
30:b4:7b:e9:57:61:f9:e6:1e:f0:c8:5f:b0:31:76:
4f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B4:F0:32:83:9C:57:AF:37:B3:84:77:E5:C7:3B:C8:8F:81:E2:26
X509v3 Authority Key Identifier:
keyid:DC:2D:1F:2C:ED:34:DC:76:DB:F4:7D:BD:CB:01:A2:AD:ED:FA:63:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C0fLO003Hbb9H29ywGire36Y2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4f:db:11:32:00:e3:91:1f:9b:e8:74:c5:02:e6:2a:4f:17:
f1:ba:63:55:23:d3:17:17:aa:cf:09:45:f7:14:cd:e1:7c:00:
77:c1:4e:e8:8b:d0:73:83:e5:82:79:b8:36:c9:33:af:66:8d:
4c:c9:42:98:7b:14:0e:c9:88:98:3c:c7:cf:c1:00:9d:ff:a3:
3c:47:a3:a4:27:f7:16:3b:87:01:7a:19:a8:8f:fb:d1:aa:79:
e1:56:67:44:19:92:d8:58:c1:9a:0c:9f:9e:2d:3a:90:be:b0:
61:76:65:d4:bf:85:dd:c8:c1:b7:86:f1:9d:37:67:ae:11:a2:
db:66:40:21:4d:96:5b:cb:dc:8d:b0:15:e6:82:b5:9d:a1:30:
b8:94:66:fd:27:48:40:17:c0:37:78:e2:0c:ff:78:42:70:ca:
a6:ba:9f:91:57:71:dc:26:e1:0c:3b:dd:c8:26:c0:76:82:48:
fd:03:0f:d0:b2:23:f2:9b:07:4d:b7:5a:ea:ee:41:a5:4d:81:
e2:1c:c5:ea:ee:a1:9b:b9:04:3a:c5:7f:99:9f:38:2b:69:00:
b8:22:43:b8:21:27:e8:4a:cc:ab:ab:31:5e:ef:31:4e:c2:84:
5c:c5:23:eb:49:a4:f3:2e:de:13:e7:17:4c:94:65:aa:74:48:
39:8a:7a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:47 2026 by rpki-client