Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: /q+yeXBVVJc1sThZoktVyodFKiXJgInkmoqr2ywHB+0=
Subject key identifier: 81:51:87:6A:27:88:6B:1F:F7:19:27:71:BD:92:91:94:C2:D9:39:04
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 01A0D4CB40F00AAD08341FBD02068D523F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 1A73
Signing time: Thu 24 Sep 2026 19:01:24 +0000
Manifest this update: Thu 24 Sep 2026 19:01:24 +0000
Manifest next update: Fri 25 Sep 2026 19:01:24 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: OTq+H3cbas2De0sS2tuPqH6EH7aaiyODf7gDLGc0D3A=)
2: ZpkUGalQzjbOCY8XhdJNlnimnsg.roa (hash: MXToSyiqqbrIQ6LzLNHLxYBkJdAsscwP6hbYfaiM+Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:40:f0:0a:ad:08:34:1f:bd:02:06:8d:52:3f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Sep 24 19:01:24 2026 GMT
Not After : Sep 25 19:01:24 2026 GMT
Subject: CN=8151876a27886b1ff7192771bd929194c2d93904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5c:75:a0:e3:21:fe:a3:5c:33:c2:ac:15:09:
a5:04:2f:51:75:76:9e:69:c3:e8:b0:e1:bd:96:be:
83:dc:2d:6d:d3:c4:51:9d:9e:9d:20:10:3c:22:3a:
cc:33:44:59:3f:65:da:a0:61:48:d3:a0:58:c4:f3:
f2:55:b4:44:78:8d:a7:f0:da:03:96:f1:13:d3:21:
76:58:53:e4:34:9c:26:13:8d:25:bd:46:91:45:30:
7b:9f:5c:94:ab:86:0e:31:b7:44:e1:d6:60:9b:c5:
cc:ea:af:0d:b6:e0:e2:74:da:1a:4e:c3:3f:07:8d:
77:3f:a8:e8:c6:85:92:ec:e4:89:29:a5:ad:08:01:
6d:06:ff:75:e4:9e:e6:33:68:04:f7:b1:9b:c6:56:
50:07:f1:08:31:9c:d3:c3:a5:eb:33:9d:66:a7:0e:
5c:1d:7f:ad:57:9b:2f:2a:04:05:0b:a3:8a:ff:8f:
4e:ae:b8:4c:2b:66:d0:97:da:e6:e3:4e:de:f5:b0:
57:04:b5:a9:b0:29:a6:0f:b9:d5:51:c7:c3:38:c7:
e9:ea:2f:87:2a:e9:e5:65:07:5c:e3:81:0b:42:8f:
83:1e:04:8f:26:dc:42:62:f6:ea:ea:cb:22:1f:20:
5b:15:66:04:a4:c4:64:4f:ea:ba:7a:5f:c3:c3:25:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:51:87:6A:27:88:6B:1F:F7:19:27:71:BD:92:91:94:C2:D9:39:04
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:98:31:22:96:f2:80:e1:80:2e:6b:ae:ad:c3:50:e9:ec:80:
f4:63:c5:8b:d8:08:60:4f:0c:26:2c:3d:12:6f:1d:59:15:d3:
bc:6a:13:02:88:bc:42:51:e7:b4:43:c8:da:c6:7d:49:e9:7d:
1a:34:25:75:b9:64:b4:44:71:c8:7d:60:8a:1b:a6:af:1a:ff:
a6:a0:0a:42:3c:e8:a9:5d:4f:e3:6d:a3:a8:f8:1f:02:19:23:
67:88:5f:29:f0:59:d1:aa:fe:5f:a8:26:81:de:e9:7e:6e:ed:
67:5a:db:2c:0f:c3:1d:c7:13:27:81:d3:18:97:ca:16:7f:5b:
d9:17:cd:9b:50:68:4a:08:00:00:56:cc:a0:bc:2d:5a:9b:2f:
14:49:fd:e4:e5:61:7a:4d:49:ab:34:7e:d9:00:52:c1:84:b9:
ff:08:5a:36:25:e5:ee:10:af:32:0e:a8:ee:7c:0f:e9:61:58:
a1:22:df:00:b7:b3:44:3a:f9:a9:31:78:dd:1b:91:25:01:26:
e4:6d:09:66:40:cd:5d:78:b9:03:f3:e2:76:86:1d:40:16:a3:
7b:e3:ed:55:c4:dd:44:67:ad:e7:e4:3a:e2:8e:9f:93:f2:a6:
34:29:4f:bd:8d:55:70:47:1b:26:43:67:46:51:cf:80:de:aa:
62:e4:e7:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUy0DwCq0INB+9AgaNUj9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I4MjAwNWZkYmU5NjEwMjBmNzQwYWI0M2M1NTRlNWEz
ODQ1MWYwHhcNMjYwOTI0MTkwMTI0WhcNMjYwOTI1MTkwMTI0WjAzMTEwLwYDVQQD
Eyg4MTUxODc2YTI3ODg2YjFmZjcxOTI3NzFiZDkyOTE5NGMyZDkzOTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1x1oOMh/qNcM8KsFQmlBC9RdXae
acPosOG9lr6D3C1t08RRnZ6dIBA8IjrMM0RZP2XaoGFI06BYxPPyVbREeI2n8NoD
lvET0yF2WFPkNJwmE40lvUaRRTB7n1yUq4YOMbdE4dZgm8XM6q8NtuDidNoaTsM/
B413P6joxoWS7OSJKaWtCAFtBv915J7mM2gE97GbxlZQB/EIMZzTw6XrM51mpw5c
HX+tV5svKgQFC6OK/49OrrhMK2bQl9rm407e9bBXBLWpsCmmD7nVUcfDOMfp6i+H
KunlZQdc44ELQo+DHgSPJtxCYvbq6ssiHyBbFWYEpMRkT+q6el/DwyWpUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFRh2oniGsf9xkncb2SkZTC2TkEMB8GA1UdIwQY
MBaAFN87ggBf2+lhAg90CrQ8VU5aOEUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAt
MzdjMTQwOTJlYjI3LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAtMzdjMTQwOTJlYjI3
LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpgxIpby
gOGALmuurcNQ6eyA9GPFi9gIYE8MJiw9Em8dWRXTvGoTAoi8QlHntEPI2sZ9Sel9
GjQldblktERxyH1gihumrxr/pqAKQjzoqV1P422jqPgfAhkjZ4hfKfBZ0ar+X6gm
gd7pfm7tZ1rbLA/DHccTJ4HTGJfKFn9b2RfNm1BoSggAAFbMoLwtWpsvFEn95OVh
ek1JqzR+2QBSwYS5/whaNiXl7hCvMg6o7nwP6WFYoSLfALezRDr5qTF43RuRJQEm
5G0JZkDNXXi5A/PidoYdQBaje+PtVcTdRGet5+Q64o6fk/KmNClPvY1VcEcbJkNn
RlHPgN6qYuTnTQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:40:58 2026 by rpki-client