Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: PMqW5P6Ula0YOPglh2/cyskqA1atBqwXWthduLCIZ9Q=
Subject key identifier: 69:48:F0:40:B2:34:9A:27:33:DF:23:23:3D:58:74:31:F5:7F:4B:47
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 019E1D907F8184F0E7D6966EA45C5D07904A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 190B
Signing time: Tue 12 May 2026 19:01:09 +0000
Manifest this update: Tue 12 May 2026 19:01:09 +0000
Manifest next update: Wed 13 May 2026 19:01:09 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: ITibQcuDyKtPrws+9epTPqiQx8rXx4JWV5v+nPLKza8=)
2: ZpkUGalQzjbOCY8XhdJNlnimnsg.roa (hash: MXToSyiqqbrIQ6LzLNHLxYBkJdAsscwP6hbYfaiM+Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:7f:81:84:f0:e7:d6:96:6e:a4:5c:5d:07:90:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: May 12 19:01:09 2026 GMT
Not After : May 13 19:01:09 2026 GMT
Subject: CN=6948f040b2349a2733df23233d587431f57f4b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:f7:ab:e1:a9:77:3c:88:c9:3e:69:44:67:
89:63:64:e5:42:c1:7f:90:bc:b8:ca:bd:68:d3:67:
df:1d:3f:bd:41:04:1f:e0:4f:27:d4:3a:9f:a5:d2:
16:2b:0f:8b:69:33:12:20:11:67:35:38:db:58:3c:
ef:b5:33:69:8f:00:a0:e4:21:c0:a5:01:f0:f9:bc:
6a:6e:65:c5:aa:35:75:3b:c7:61:85:6d:f6:41:fd:
18:e7:80:6a:15:c7:1e:cf:93:01:38:95:4c:34:be:
c5:fa:96:18:15:f7:f4:df:1c:69:ab:5d:4b:c1:a5:
75:68:c1:c7:16:a9:24:c5:63:45:f0:b8:65:cb:99:
8d:ca:5d:e5:c4:39:f4:b5:cb:d4:31:8b:a0:8e:0e:
05:74:3c:07:38:6e:0a:6b:12:94:46:03:9c:37:6b:
94:42:3b:0b:fb:52:d3:dd:2e:19:78:ab:62:ae:6a:
47:97:10:ba:72:88:b6:12:de:b9:f0:00:92:06:21:
0a:07:8d:1e:78:22:f8:aa:da:2b:81:9b:4b:6a:e5:
b3:42:fd:bf:be:4b:51:83:22:90:fb:48:f3:8d:36:
3f:17:3c:ac:46:78:e4:d5:17:a3:79:76:36:4c:ac:
e9:e4:26:e6:c3:1b:c0:d0:f5:91:e7:4e:6e:3d:29:
13:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:48:F0:40:B2:34:9A:27:33:DF:23:23:3D:58:74:31:F5:7F:4B:47
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a4:f4:f3:df:5c:de:77:df:22:c8:93:2c:a9:4c:ef:6f:26:
4b:77:85:8a:a8:54:2d:06:21:c2:18:5c:0e:da:9f:4f:90:c0:
34:88:09:5b:7b:76:4b:ed:df:71:b9:34:58:a7:03:a4:5c:fe:
00:e4:22:f4:65:3c:b8:cd:b4:0b:38:a4:15:8e:59:7f:38:03:
45:52:dd:91:9d:17:2c:33:1e:fb:68:89:a9:a3:b1:bb:df:4f:
5d:19:94:32:33:93:6f:c7:2c:16:f6:70:c4:16:c9:bc:7d:cf:
f3:ff:77:f0:e3:14:93:9f:b2:fb:c6:45:a0:fc:a5:b0:0e:35:
b6:b7:79:d3:e4:0b:cb:77:69:4d:72:2a:34:1f:21:41:95:42:
78:06:a3:c8:41:c4:7c:93:95:1c:96:97:b7:49:09:c3:57:bf:
b8:57:3e:de:cc:46:b9:36:c4:bc:6e:37:a4:3a:fd:93:20:af:
3f:c9:99:06:c0:5e:bf:13:cd:cf:fc:34:95:6a:7a:ae:6d:f1:
30:c9:fb:5a:51:d7:c3:1a:f6:03:c1:2f:ec:68:36:dc:5e:ef:
a2:5c:33:b7:7e:03:fb:27:2c:60:0c:92:44:3b:87:9d:7d:30:
ce:53:e3:3e:59:6a:eb:b1:5d:ef:b6:36:a6:c3:b0:e9:f8:a0:
88:dd:79:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:05 2026 by rpki-client