Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
File: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft (raw, json)
Hash identifier: dcRfnpwmmVNGfc7iH3XmdVtixAu5+MWRf0pZ3V7P/fI=
Subject key identifier: 2B:E7:F4:B7:D1:FC:AD:16:99:0E:78:90:98:3C:A5:D8:A8:2D:DF:45
Authority key identifier: DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
Certificate issuer: /CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Certificate serial: 01A0D124C02FF0DDE3954E70C56548A5E1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
Manifest number: 0452
Signing time: Thu 24 Sep 2026 02:00:41 +0000
Manifest this update: Thu 24 Sep 2026 02:00:41 +0000
Manifest next update: Fri 25 Sep 2026 02:00:41 +0000
Files and hashes: 1: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl (hash: wFoZKa2qjhiqfeZ9Ym14wRYnwaFY25mtGSOv9Su6YfQ=)
2: zi6BX2pprFhR63Y5lPO5fzP2XJw.roa (hash: k4cOLLcWBtedRh3+dHl3HpPG8a/ZH38IiLNVDqMNrQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:c0:2f:f0:dd:e3:95:4e:70:c5:65:48:a5:e1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Validity
Not Before: Sep 24 02:00:41 2026 GMT
Not After : Sep 25 02:00:41 2026 GMT
Subject: CN=2be7f4b7d1fcad16990e7890983ca5d8a82ddf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:12:93:eb:84:f7:3b:79:54:b8:bf:2b:8e:
4b:6f:71:76:64:40:ba:bb:df:8d:8a:cd:c1:3a:1b:
64:33:b5:dd:8c:ce:fb:ea:fc:33:8c:0d:79:fa:63:
4e:bd:f6:f6:29:44:0a:8a:36:ca:1b:c9:10:7d:c5:
3d:1c:30:56:75:47:01:fe:4a:22:75:de:33:c9:a7:
65:65:fb:e2:39:80:63:81:e0:01:70:09:0e:e2:bf:
61:13:02:3a:58:c0:c2:e6:cc:2d:65:77:41:81:46:
92:19:d0:41:bd:10:a3:63:5a:63:30:7b:6a:9a:27:
42:bf:83:c9:74:4c:98:b3:f8:ca:ef:49:85:22:d1:
a2:5b:88:89:90:2e:10:3f:55:1d:62:21:60:2e:80:
95:8b:da:4c:01:76:8a:6e:f6:12:41:1f:64:68:ad:
c3:89:e4:5d:f9:03:7c:f7:22:3b:fa:9a:c8:56:7d:
96:83:e0:c7:e3:94:32:de:75:f5:e9:9b:79:a4:e8:
69:84:27:a3:de:4b:bc:7f:d6:14:33:cc:d6:4b:c1:
f8:f6:05:55:54:4e:4d:89:66:79:d8:0a:47:0e:27:
c3:44:20:8b:92:0f:67:82:7e:93:e3:ea:b8:b8:3a:
f1:1c:c9:de:b4:d6:ec:f1:f3:e8:10:72:bb:cf:ae:
33:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E7:F4:B7:D1:FC:AD:16:99:0E:78:90:98:3C:A5:D8:A8:2D:DF:45
X509v3 Authority Key Identifier:
keyid:DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a4:a8:f6:91:3a:4f:0b:b9:10:ef:2b:06:bf:b3:55:b2:a6:
f7:56:28:ab:4c:0d:e9:50:00:12:2e:86:c5:77:70:5f:c1:c4:
ce:e8:14:48:74:1e:22:a6:6d:46:10:6d:eb:59:d3:10:fa:38:
47:a5:98:32:70:f4:ce:77:ec:de:fe:d5:77:71:30:91:16:9c:
1c:50:bb:92:66:55:b1:fd:e7:f1:13:f7:99:28:2d:7a:74:c5:
cb:fd:f7:23:58:00:0e:78:46:91:94:9f:14:71:45:11:ca:a9:
9b:9e:27:0a:53:4f:ba:61:e4:2d:f1:5f:a9:34:34:a1:4b:e8:
04:eb:d6:10:10:00:d5:47:1a:97:51:9c:e2:34:1e:4d:ad:8b:
54:af:b4:34:5d:4c:8b:3f:dc:3d:f5:28:f5:6c:36:c0:b6:74:
f9:38:f9:72:8d:bc:23:1a:5f:35:89:ba:95:16:09:56:8d:54:
8d:2a:df:8b:7e:b6:6e:d1:71:f4:dd:a7:c4:e1:8f:cb:40:ca:
a0:c9:97:de:00:73:92:c1:a2:b9:53:48:1e:37:24:68:ed:22:
cc:76:0f:e7:5e:f8:5b:6d:b7:5e:25:5f:03:52:47:9a:65:30:
00:32:62:7c:12:6e:45:86:f9:4b:2a:f0:37:ec:98:ea:4b:df:
22:fb:df:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:41:40 2026 by rpki-client