Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: u0U6LEeQ3wVbP2rY1Vk7diJgHJc0i5J79tgssPZ/930=
Subject key identifier: AE:D9:89:86:9C:AE:5D:E0:2C:EE:86:3E:27:82:E3:31:77:9F:74:FB
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 019F9059F909015EEE04F387BBD35275C8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 19:00:43 +0000
Manifest this update: Thu 23 Jul 2026 19:00:43 +0000
Manifest next update: Fri 24 Jul 2026 19:00:43 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: 9B6t1W5oRtsusDslaHz1RnG1MftxVtRcGBOc8tdjAN0=)
2: ZpkUGalQzjbOCY8XhdJNlnimnsg.roa (hash: MXToSyiqqbrIQ6LzLNHLxYBkJdAsscwP6hbYfaiM+Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:f9:09:01:5e:ee:04:f3:87:bb:d3:52:75:c8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Jul 23 19:00:43 2026 GMT
Not After : Jul 24 19:00:43 2026 GMT
Subject: CN=aed989869cae5de02cee863e2782e331779f74fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:1a:bb:b8:ad:ae:51:79:2f:b8:2f:0a:f5:
52:ac:23:73:ca:0b:db:f6:84:45:3f:aa:59:1e:89:
71:0b:67:fa:9c:77:97:a1:e6:9b:f8:d5:30:ba:50:
fb:67:fb:96:15:73:67:13:37:81:ef:43:25:9d:2f:
15:a6:06:0f:f4:7d:4a:61:19:c8:59:28:63:b1:e4:
5e:9b:b1:1e:fa:ce:b4:53:87:d8:e4:7a:2b:ab:3f:
a3:79:da:b6:6f:21:35:e3:36:9d:5c:1b:4b:d4:6f:
a6:87:0e:e8:66:2b:d3:35:dc:16:0a:30:f6:8a:7d:
be:92:e7:58:57:98:2f:84:e3:a2:7b:f9:8a:76:77:
55:e7:b3:91:7a:fd:40:af:77:3d:ec:c7:7a:87:8a:
f6:28:cd:ba:cd:f6:0b:74:b3:a2:0e:4a:95:e6:cc:
a7:c0:0b:23:55:71:41:82:77:ea:c7:5b:b7:4e:5f:
f4:3e:26:40:c3:75:35:7a:35:f2:5b:9e:c3:e9:8a:
7a:13:ea:bb:2b:ad:df:99:ca:78:65:b7:4c:40:d5:
27:f6:9a:c5:45:4b:32:6e:63:9d:fa:7d:40:48:3c:
67:37:6a:3d:d8:50:c7:c6:66:01:55:e0:e7:39:e5:
00:bd:68:9a:e6:0e:e3:61:fa:b9:a7:5c:ac:ac:5c:
d0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D9:89:86:9C:AE:5D:E0:2C:EE:86:3E:27:82:E3:31:77:9F:74:FB
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9f:d6:b7:2e:27:d3:e8:06:b6:0d:b7:58:02:1e:8e:f6:53:
72:8c:29:f1:37:57:fa:a7:0d:9b:79:09:2c:18:81:1c:8a:9a:
c8:d3:63:36:68:62:76:c7:d1:6a:38:f5:d8:1b:b2:d3:3a:82:
d4:d1:72:9e:55:7e:5e:c2:ad:c8:59:bd:e4:93:2d:d8:d5:36:
d5:71:a3:29:c0:37:cf:a2:a5:1c:e2:47:cc:2d:28:85:06:72:
40:c0:c3:a9:8c:86:7c:08:d8:77:f7:06:93:c8:7b:9a:70:6e:
0f:d7:88:f9:e6:19:f1:4e:1f:7c:f9:ec:aa:f1:f1:39:a1:b9:
5e:5d:9f:97:ec:8a:60:29:d0:fc:a0:83:f7:15:80:9b:77:1f:
d7:f9:f5:43:c5:40:ca:82:a1:36:30:33:7c:e3:31:13:96:1f:
7a:c7:79:e1:82:7c:b4:2d:b9:dd:ec:9f:c1:04:e3:31:dc:97:
03:62:ec:d8:a4:c6:8f:b9:7f:fc:05:db:58:13:66:8d:ad:77:
8c:45:e3:2c:a2:c1:92:ce:d5:6c:b1:89:cd:a6:df:7f:f3:0f:
92:03:a1:0c:0f:e4:fd:2e:1d:be:c6:90:f0:0c:9d:73:a3:9f:
a4:cf:77:02:58:86:40:14:12:7c:e6:31:d0:cb:e5:39:a5:9f:
02:78:90:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:32 2026 by rpki-client