Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier: LMcU5dcBwrygacQstnHNmUxNFw+ovZYEcBAXed11mOE=
Subject key identifier: E5:B8:52:C8:BA:49:3C:D4:F2:99:09:82:4B:F3:49:9D:C5:7B:C6:7F
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial: 019D3940FDCAA54BAC024DCB336EBA65EA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 11:00:53 +0000
Manifest this update: Sun 29 Mar 2026 11:00:53 +0000
Manifest next update: Mon 30 Mar 2026 11:00:53 +0000
Files and hashes: 1: 1TDkQYg3xQsNih1cBCwskUXwxLA.roa (hash: paiy4NkfuCpLerrMoZiJ1VXsmPdd6kHz6S2ynGEROuU=)
2: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: rg2/vae7jDDNRY3YEltlklFoUbMyhInKM3sn90CtYpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:fd:ca:a5:4b:ac:02:4d:cb:33:6e:ba:65:ea:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Validity
Not Before: Mar 29 11:00:53 2026 GMT
Not After : Mar 30 11:00:53 2026 GMT
Subject: CN=e5b852c8ba493cd4f29909824bf3499dc57bc67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:8c:4b:b0:92:2b:ea:c2:41:37:9c:13:e8:
ae:bf:53:f6:31:4e:44:e5:b5:ef:53:50:bc:6e:ac:
f2:52:cf:d1:f0:2e:f2:07:46:91:07:7b:78:3c:52:
bf:a0:e5:a6:9a:55:8d:e0:57:36:79:af:b2:b0:95:
ab:b0:64:d6:f4:95:1b:fe:36:88:f9:53:a3:c4:b6:
97:13:1e:02:b4:d2:66:79:a2:25:be:5b:f9:96:86:
fa:6e:99:88:e9:cf:d9:5a:7e:a4:13:dc:77:35:15:
fa:1a:f8:57:9a:98:4f:26:0f:93:bf:16:73:60:92:
5c:3b:a3:d5:72:d0:ad:61:eb:96:88:52:ca:c2:94:
41:22:b1:d5:0e:28:13:a6:e9:33:0e:b0:9c:5c:60:
78:79:06:13:22:ef:76:30:55:4f:e4:4c:82:ba:f8:
b7:6b:09:60:b4:36:14:18:db:8c:b0:6c:8a:f5:df:
2c:7a:6a:86:78:7a:8c:f8:eb:50:a2:90:1a:d7:14:
e3:21:9d:ed:2d:17:1c:79:bb:82:68:1a:44:ec:54:
bd:19:31:e1:f4:8f:c8:6b:40:cc:c5:52:35:ed:e8:
2a:43:cf:0a:58:8d:6d:d8:93:a9:69:ec:cc:c3:7c:
4d:26:78:b8:00:1f:10:56:1f:81:98:75:9b:e9:9b:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B8:52:C8:BA:49:3C:D4:F2:99:09:82:4B:F3:49:9D:C5:7B:C6:7F
X509v3 Authority Key Identifier:
keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:66:06:ad:52:c9:51:d6:95:fe:07:bb:ef:46:9a:55:e0:a6:
4f:00:10:cb:e0:18:40:00:da:03:f9:6b:a4:27:85:0d:ba:4b:
b9:a2:11:e7:60:81:df:70:41:77:d7:df:81:38:73:3b:ea:64:
60:4c:96:2d:3f:49:12:92:59:23:66:05:bb:94:9f:06:2c:81:
b8:ce:33:4c:2d:b7:f8:bc:0f:ce:b3:85:48:aa:bc:6e:0f:88:
bf:a9:60:f3:af:87:96:79:95:4c:5c:f7:51:cd:e9:40:e1:4a:
c8:aa:65:68:95:60:c0:b4:d0:9e:90:7a:57:22:98:a4:09:b8:
2c:f7:ed:4a:32:d4:15:29:a9:9c:9a:e8:03:bf:65:b7:32:2e:
6f:34:5c:ba:ee:fa:4e:f4:d5:3c:fc:90:48:93:5c:6c:6d:72:
3e:de:7c:42:e2:73:24:f3:a0:05:5a:01:65:b4:3d:4b:32:20:
89:a0:26:94:35:5c:a0:13:4b:b6:e8:7a:9c:d5:5c:9d:60:20:
4a:c0:4b:4d:c2:00:f5:0c:08:ab:54:b3:04:8c:f6:17:62:02:
f5:18:b4:53:0c:e7:85:04:a9:45:45:fc:1f:e3:1e:69:f6:7b:
12:2d:cf:34:35:2c:55:b2:9a:0a:7b:36:7d:8f:b5:0c:c3:ce:
ce:fb:8b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:27 2026 by rpki-client