Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: sarcW57IC3bOABAUnSOZVLldpYfaF0J/yg8lZwoyGoU=
Subject key identifier: B9:C5:D5:6A:59:57:88:C1:AA:B4:1C:83:37:00:DE:95:FB:91:E9:C2
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 01A13CA5A1298D7BA0FD05971BBD107D7DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 1AA2
Signing time: Wed 14 Oct 2026 23:00:49 +0000
Manifest this update: Wed 14 Oct 2026 23:00:49 +0000
Manifest next update: Thu 15 Oct 2026 23:00:49 +0000
Files and hashes: 1: 1TDkQYg3xQsNih1cBCwskUXwxLA.roa (hash: paiy4NkfuCpLerrMoZiJ1VXsmPdd6kHz6S2ynGEROuU=)
2: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: Dqr1uw8rmW/Nfub8OwWqm/UJaBp2MpMU7OpyouWEFFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:a1:29:8d:7b:a0:fd:05:97:1b:bd:10:7d:7d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Oct 14 23:00:49 2026 GMT
Not After : Oct 15 23:00:49 2026 GMT
Subject: CN=b9c5d56a595788c1aab41c833700de95fb91e9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:36:b0:4e:14:87:43:d0:a3:ed:9f:b7:b2:
4d:ca:d3:ef:7c:62:eb:2d:60:85:a8:6b:e6:c6:92:
86:6e:49:29:27:b1:d3:64:68:62:ca:2d:bc:19:b2:
48:0f:71:d4:9c:bb:6a:f5:12:dc:c4:2d:2c:bb:b9:
f2:bf:b5:9a:6d:e8:56:cb:2b:18:80:48:e4:e8:a8:
bc:b6:bf:db:de:25:04:28:c6:03:2f:b0:97:11:b7:
7e:ad:77:d7:c9:13:82:37:0e:f8:1f:0d:5e:70:0a:
cc:4d:4e:e8:9b:c3:7e:d2:3f:86:22:d1:5f:50:d0:
23:be:4a:f3:60:7a:59:f6:6e:e6:e0:a6:f8:53:66:
65:4a:4d:b0:04:9d:93:77:04:21:8c:06:8d:b4:7a:
f4:44:1c:fc:a6:3f:a5:aa:be:e9:e1:82:e3:19:20:
d9:61:64:c9:34:be:70:e3:45:de:ad:dd:a9:87:8e:
94:02:4b:46:c5:38:55:ee:07:e8:df:c2:2c:d4:52:
98:7e:ae:1d:9c:fe:90:b4:6d:29:68:c4:7a:91:83:
1f:77:fe:fa:33:09:f2:62:e2:21:3a:2b:db:95:53:
2f:9d:52:fe:f1:9f:a3:96:fb:19:2e:d9:e1:26:cd:
6c:06:91:81:90:01:b5:26:01:b3:3e:dc:80:30:18:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C5:D5:6A:59:57:88:C1:AA:B4:1C:83:37:00:DE:95:FB:91:E9:C2
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:57:04:bc:e9:73:70:f5:b8:7e:c0:62:a5:13:d1:98:60:49:
63:48:e9:7b:0d:bd:80:40:ba:97:7e:8c:db:ae:23:85:33:eb:
f6:9f:d9:3b:01:6b:dd:13:7d:9d:f6:56:ad:e4:86:b3:03:a1:
3a:ae:ab:e1:e1:8f:b4:1b:ad:3b:5d:33:31:b6:0d:5e:aa:aa:
2d:cc:34:0c:74:61:70:8c:5b:27:8d:3f:8f:ad:4d:f8:4f:e1:
ae:10:6f:7c:72:96:72:e2:a6:01:31:10:35:49:ce:22:96:a8:
03:58:d8:71:49:3b:88:c1:49:9a:49:1a:8b:7f:45:f9:2d:14:
57:ae:cf:86:5f:e7:6e:b6:70:97:1a:fc:6c:b3:9b:d3:53:cc:
cf:72:95:39:c9:4d:fc:51:29:d3:5b:c4:4c:53:c8:65:04:9d:
c4:94:be:ff:67:1e:72:2b:d4:bc:7d:b1:4a:be:c2:87:e0:12:
6d:eb:c6:0e:91:2c:6b:82:cf:30:d6:3d:39:4b:b5:65:7e:5a:
70:65:99:27:22:88:ce:5a:a2:5e:0c:bd:24:b4:67:15:c7:b3:
28:5b:de:ae:74:45:b0:4f:1d:0c:5b:f7:60:0a:c8:e1:0c:7b:
46:ec:a5:e7:97:97:e1:3b:b6:1f:56:a4:d3:b2:ae:3a:8e:05:
d1:b6:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:13:53 2026 by rpki-client