Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: b1VVCw71ZQynh4SuSSXRxhupF3aYRvUHmrcPPnozFbw=
Subject key identifier: 9F:0E:DF:AC:8A:FA:D3:D6:20:4A:18:71:D2:06:07:34:53:38:30:D5
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 01A001DCFE9385F9330A4C9D48DCA132E06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 20:00:55 +0000
Manifest this update: Fri 14 Aug 2026 20:00:55 +0000
Manifest next update: Sat 15 Aug 2026 20:00:55 +0000
Files and hashes: 1: 1TDkQYg3xQsNih1cBCwskUXwxLA.roa (hash: paiy4NkfuCpLerrMoZiJ1VXsmPdd6kHz6S2ynGEROuU=)
2: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: VqbO2i9uxTICvmiiqXjoDXWvVV0BPFooxu0XY5fZSAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:fe:93:85:f9:33:0a:4c:9d:48:dc:a1:32:e0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Aug 14 20:00:55 2026 GMT
Not After : Aug 15 20:00:55 2026 GMT
Subject: CN=9f0edfac8afad3d6204a1871d2060734533830d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:11:1f:60:f2:9d:40:ce:d6:4c:0e:4f:a2:
cb:21:0b:80:5a:71:d8:36:35:59:af:9a:b1:44:b4:
5c:d8:08:21:14:ac:4f:43:e5:3e:a8:94:9c:13:0a:
46:a6:41:6f:6c:a8:8f:d3:74:23:2d:07:c3:ee:25:
9b:4c:e2:ac:f6:4e:a2:b3:27:c3:a8:3c:92:93:f3:
d3:9e:25:c0:be:64:48:2c:c8:31:61:fb:44:0c:fc:
a5:fe:0c:37:65:6b:65:e5:d6:45:bb:6c:a6:9e:77:
73:ed:8c:11:ed:5c:02:c5:b0:cd:69:69:16:54:0d:
e5:8a:17:d5:b8:b6:bf:55:a8:12:51:51:39:aa:90:
77:8b:6b:ab:57:44:59:94:8a:07:57:bd:d8:70:84:
6d:a6:5c:47:f0:16:36:7f:cb:99:29:f8:72:55:f7:
0f:a3:d1:5a:39:4e:a9:52:0c:34:f8:68:67:a4:fe:
1f:fd:db:73:93:a6:b0:fd:f9:74:91:8f:87:3f:98:
6f:76:8c:58:e7:be:01:98:2f:b9:ce:88:2c:a5:b6:
52:b4:31:ca:94:18:f3:fc:6e:0e:ad:ea:ca:b6:53:
20:3b:ae:1a:d5:6e:b5:41:3e:55:92:7f:31:a5:10:
ce:d2:fd:b5:eb:7f:89:f4:af:6a:a7:58:bd:a9:94:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0E:DF:AC:8A:FA:D3:D6:20:4A:18:71:D2:06:07:34:53:38:30:D5
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cd:32:cf:a6:11:98:52:7c:5a:df:71:f4:fc:a3:c4:84:3a:
ba:11:9b:1d:e0:1a:36:13:dc:de:3d:26:c6:41:74:2a:e0:56:
8d:f2:13:d0:a9:06:2a:90:42:cd:93:ec:27:5b:9b:93:a6:3c:
7a:6b:06:2b:92:75:43:90:82:9c:78:0d:fe:5e:96:49:09:eb:
18:8a:84:a4:e5:26:51:07:16:68:da:10:95:24:75:28:91:69:
c4:85:03:ab:09:6a:e3:79:b6:79:ea:55:b0:6f:40:f9:a0:0e:
71:13:2a:4b:d9:40:e4:d6:7b:af:e2:f0:42:1d:26:af:f1:78:
29:df:ad:7a:b1:ae:9f:4d:cb:4f:f8:64:39:87:f1:f2:bc:42:
c1:e2:b2:db:d1:02:92:d8:5f:0e:98:35:6b:dd:3e:a8:8f:5b:
17:99:cb:6c:0e:2a:64:a3:37:fe:88:06:e8:61:da:ea:8d:f6:
7e:b1:72:e4:72:20:c6:70:d2:b8:6b:c1:25:61:d6:05:73:2a:
3a:1b:c0:14:da:8e:e9:7f:c0:4a:c8:69:11:86:0d:b7:27:bb:
2f:5b:52:45:e0:b6:dc:67:d3:03:20:f0:79:90:68:99:2e:0b:
91:15:37:a0:92:69:2f:ec:58:4e:11:4f:a1:5a:82:9e:d0:84:
1a:25:ad:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:43 2026 by rpki-client