Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: ChuHtN24DWmdzVXw7FBwH+XWRK2FMaP3eV0nrIVuL6I=
Subject key identifier: 20:C2:F3:78:85:CB:FB:A7:E2:FE:33:18:AE:2F:CA:5D:BA:D1:C0:CC
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 019F18313D7B3DCCEF2730FE48731EE95DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 1986
Signing time: Tue 30 Jun 2026 11:01:47 +0000
Manifest this update: Tue 30 Jun 2026 11:01:47 +0000
Manifest next update: Wed 01 Jul 2026 11:01:47 +0000
Files and hashes: 1: 1TDkQYg3xQsNih1cBCwskUXwxLA.roa (hash: paiy4NkfuCpLerrMoZiJ1VXsmPdd6kHz6S2ynGEROuU=)
2: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: DbZI81pSPql3QesFqUngjsvwh1NXx8G0zBO2emUe+jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:3d:7b:3d:cc:ef:27:30:fe:48:73:1e:e9:5d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Jun 30 11:01:47 2026 GMT
Not After : Jul 1 11:01:47 2026 GMT
Subject: CN=20c2f37885cbfba7e2fe3318ae2fca5dbad1c0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:eb:cf:6c:ce:9a:5e:08:f9:ee:f9:19:e5:18:
08:77:77:7a:51:3d:08:27:01:c2:68:17:92:17:c0:
b6:45:ef:2b:c0:fc:a9:6e:25:67:e9:cf:c8:30:18:
7f:0c:4f:54:3d:7d:4e:61:70:b6:4c:0f:f9:ee:bd:
4a:ea:8f:49:8a:1b:c9:33:02:85:a4:e5:45:39:2b:
f1:7a:22:1d:3b:ca:99:a7:65:98:77:7e:5a:af:0e:
f3:04:d8:7f:30:9f:d5:0d:1e:27:77:36:cc:e4:ed:
68:f5:73:ee:3c:b2:30:5b:99:4a:50:e2:79:0d:20:
63:25:61:da:47:47:3a:b1:c1:31:1f:fb:f0:83:4b:
74:3d:fa:25:c8:b2:61:9f:2d:7c:40:3c:66:54:60:
54:9d:4f:00:a0:6b:5e:aa:9b:ea:7d:50:47:06:3f:
7b:15:e8:3e:9d:25:54:95:7f:29:79:5a:dc:38:1d:
66:27:70:a4:07:ac:e2:6b:49:ef:bd:a8:09:a3:9b:
44:d0:5a:e9:3a:7f:50:79:ec:26:e5:ed:08:11:5f:
33:d3:85:cf:c7:fe:bc:89:39:1e:d9:90:e1:11:30:
fd:c1:75:58:77:e3:8e:15:ae:af:fe:8f:6b:2e:96:
53:4c:d9:0e:77:06:78:4d:6b:b5:bc:ad:5f:8e:1f:
8a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C2:F3:78:85:CB:FB:A7:E2:FE:33:18:AE:2F:CA:5D:BA:D1:C0:CC
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:25:c4:21:75:d5:f9:77:1c:8a:a5:e3:91:df:74:e4:e4:36:
9b:20:24:ee:97:72:6a:61:38:3b:bf:c8:67:db:66:78:11:1c:
4b:3f:c8:b1:8f:56:68:c4:6a:c6:ff:09:c8:ab:50:5d:46:52:
4c:75:25:d1:62:c6:cd:3c:52:3c:a8:cf:c7:55:d2:4c:96:3a:
eb:d1:44:c1:08:ea:fa:c0:1b:dc:e1:32:07:fe:1b:be:f0:df:
6f:66:d8:8a:ad:59:cf:23:c9:1e:10:ea:59:e0:5f:8e:4c:a0:
d2:ed:b1:21:e1:a5:29:44:64:c9:f5:10:fc:4f:d3:3e:8c:68:
9e:5b:f3:e1:5d:2e:c3:0c:99:d9:db:4c:90:25:9f:f0:74:5f:
4a:23:aa:a4:a8:41:71:f3:6d:88:de:39:fc:6c:a6:78:81:39:
d1:e3:1a:f1:05:9a:df:0f:ee:1f:e1:a8:b4:fc:63:8f:45:a6:
3d:4d:90:5e:9c:ba:03:01:6b:0a:ac:72:aa:78:f3:78:26:f7:
b1:fb:63:d0:d9:bb:37:45:da:18:3d:7a:0f:27:ae:1c:a5:bf:
f8:48:a7:d1:d1:1d:25:e6:ae:e0:f2:c0:1c:39:63:87:d9:3b:
7d:7a:90:39:14:9d:87:61:a3:96:a7:1b:a1:d6:b6:56:3f:1e:
6d:4d:58:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMT17PczvJzD+SHMe6V3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMjczZTFlMjE4NDFjZTJjMzM1ZmUxYzk2MWNlNzY4MDE3
ZWVlMjkwHhcNMjYwNjMwMTEwMTQ3WhcNMjYwNzAxMTEwMTQ3WjAzMTEwLwYDVQQD
EygyMGMyZjM3ODg1Y2JmYmE3ZTJmZTMzMThhZTJmY2E1ZGJhZDFjMGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+vPbM6aXgj57vkZ5RgId3d6UT0I
JwHCaBeSF8C2Re8rwPypbiVn6c/IMBh/DE9UPX1OYXC2TA/57r1K6o9JihvJMwKF
pOVFOSvxeiIdO8qZp2WYd35arw7zBNh/MJ/VDR4ndzbM5O1o9XPuPLIwW5lKUOJ5
DSBjJWHaR0c6scExH/vwg0t0PfolyLJhny18QDxmVGBUnU8AoGteqpvqfVBHBj97
Feg+nSVUlX8peVrcOB1mJ3CkB6zia0nvvagJo5tE0FrpOn9Qeewm5e0IEV8z04XP
x/68iTke2ZDhETD9wXVYd+OOFa6v/o9rLpZTTNkOdwZ4TWu1vK1fjh+K1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDC83iFy/un4v4zGK4vyl260cDMMB8GA1UdIwQY
MBaAFNwnPh4hhBziwzX+HJYc52gBfu4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iNGE3MWEtZWIzNy00NjlhLThiYjUt
Mjc4NDFmNTA3NzM1LzEvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iNGE3MWEtZWIzNy00NjlhLThiYjUtMjc4NDFmNTA3NzM1
LzEvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtiXEIXXV
+XcciqXjkd905OQ2myAk7pdyamE4O7/IZ9tmeBEcSz/IsY9WaMRqxv8JyKtQXUZS
THUl0WLGzTxSPKjPx1XSTJY669FEwQjq+sAb3OEyB/4bvvDfb2bYiq1ZzyPJHhDq
WeBfjkyg0u2xIeGlKURkyfUQ/E/TPoxonlvz4V0uwwyZ2dtMkCWf8HRfSiOqpKhB
cfNtiN45/GymeIE50eMa8QWa3w/uH+GotPxjj0WmPU2QXpy6AwFrCqxyqnjzeCb3
sftj0Nm7N0XaGD16DyeuHKW/+Ein0dEdJeau4PLAHDljh9k7fXqQORSdh2Gjlqcb
oda2Vj8ebU1YWA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:50 2026 by rpki-client