Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
File: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft (raw, json)
Hash identifier: btJax6cOiBQ5Fr6QkvyQQt+o0rrdsuBIOvU12TfdrBw=
Subject key identifier: 8A:09:A6:2C:D6:45:D8:41:AE:D8:D7:A3:95:39:17:29:82:79:C6:45
Authority key identifier: DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
Certificate issuer: /CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Certificate serial: 019F9090D07C1DA644D952D282D4D7DBEF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
Manifest number: 03AC
Signing time: Thu 23 Jul 2026 20:00:37 +0000
Manifest this update: Thu 23 Jul 2026 20:00:37 +0000
Manifest next update: Fri 24 Jul 2026 20:00:37 +0000
Files and hashes: 1: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl (hash: 0WLErxTWEeb7/LKXYof9+HkyRvIpE2lXLeameUuKro4=)
2: zi6BX2pprFhR63Y5lPO5fzP2XJw.roa (hash: k4cOLLcWBtedRh3+dHl3HpPG8a/ZH38IiLNVDqMNrQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:d0:7c:1d:a6:44:d9:52:d2:82:d4:d7:db:ef:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Validity
Not Before: Jul 23 20:00:37 2026 GMT
Not After : Jul 24 20:00:37 2026 GMT
Subject: CN=8a09a62cd645d841aed8d7a3953917298279c645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:a1:ba:c8:2c:ea:ee:c0:b8:81:64:53:12:
0b:33:c7:79:db:a0:02:55:97:fe:84:40:fe:5e:0a:
26:01:e0:d3:92:2d:8a:06:b7:ad:1c:d3:2f:54:b0:
ec:c9:cc:41:58:53:ef:f6:94:f9:34:3f:1d:f5:92:
8a:33:36:6d:b9:c1:18:7c:2e:2b:7e:2e:a2:a2:b9:
ff:41:24:57:5b:5c:fb:a1:3b:39:21:1f:e0:6c:8d:
43:6c:71:ba:0f:ba:d7:bc:3e:c4:cd:ed:f8:e1:8d:
ae:56:35:30:d3:1e:68:94:43:ef:da:16:7f:9b:37:
eb:2b:d2:3c:79:33:8f:8c:b0:e3:99:0b:28:b3:5b:
7a:af:57:83:35:c3:81:06:9f:e2:27:f6:f6:3a:b2:
e1:c3:50:04:a5:06:79:9e:ae:7a:76:41:b8:9b:1c:
30:01:57:5c:84:c3:d5:c7:a9:5f:ff:12:11:e2:23:
a2:a1:28:88:bd:8b:84:5e:41:76:ba:fa:71:cf:db:
21:04:07:47:f3:80:42:a7:9a:f3:c4:03:a2:53:be:
8c:54:c7:7f:f6:8f:aa:26:73:89:2d:f2:d1:62:c3:
2f:28:f5:c4:d4:fc:a9:40:8e:bc:14:d6:fe:0e:32:
c3:09:61:92:f0:47:d2:18:7b:d9:05:d7:5b:74:99:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:09:A6:2C:D6:45:D8:41:AE:D8:D7:A3:95:39:17:29:82:79:C6:45
X509v3 Authority Key Identifier:
keyid:DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:55:e5:ee:89:26:3c:80:a1:eb:fc:20:ac:8a:9a:d9:fd:48:
96:0c:0d:bf:51:6f:36:3c:91:ae:31:72:8c:b3:55:7e:77:ab:
f6:bc:8f:73:de:89:3b:65:fd:a8:97:e2:16:cb:67:9a:11:0d:
30:ec:dd:f9:f7:e9:4c:67:5f:e0:2d:64:01:1b:34:da:d9:93:
93:d2:3d:99:ca:74:5f:d1:54:69:50:22:82:52:5b:30:71:a6:
67:c8:9f:fa:b3:50:8b:7e:d8:f4:53:49:0b:6d:c3:86:c6:5e:
a8:68:47:da:a0:fe:0a:ea:d6:51:1d:1c:fd:53:57:4d:45:59:
d8:e0:3d:e8:6f:a2:f8:9a:50:4e:7c:25:b6:0c:ee:e5:8c:99:
dc:0c:f4:8d:6e:1d:7d:59:e0:7d:9a:15:ff:29:69:9c:64:67:
3f:a8:a7:5b:02:7f:72:26:4a:7a:e0:96:59:1a:35:48:fb:e9:
84:32:fb:cb:55:60:39:88:1a:82:4c:f1:d2:f3:0d:5c:98:d7:
77:9b:4d:86:76:57:e9:06:28:b9:e9:09:78:b9:07:e0:dd:bc:
12:d1:be:83:b8:b5:40:f6:6e:e0:0e:4d:99:3d:9c:19:67:60:
01:18:4a:79:5f:ca:69:3d:e3:49:92:7c:b6:dd:af:c8:29:d7:
a4:f7:95:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:02 2026 by rpki-client