Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
File: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft (raw, json)
Hash identifier: zyawkpehWeTaayx1OShqe8gIIn41uxUtOCYHJCjtoXs=
Subject key identifier: 2A:97:64:C9:8D:0C:23:28:5E:13:DA:B5:3B:D4:F4:A6:7C:12:A5:13
Authority key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
Certificate issuer: /CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Certificate serial: 01A0CCD9D71EB930DC6BAAC7B35FAA8D7FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 06:00:23 +0000
Manifest this update: Wed 23 Sep 2026 06:00:23 +0000
Manifest next update: Thu 24 Sep 2026 06:00:23 +0000
Files and hashes: 1: 3WnIK5pGF-1--NMSUgNLB0NnZ1o.roa (hash: +wFNRw8hcoZ6lDMDvj2KA/bLV+BywMnIzYTLMw+xb4I=)
2: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl (hash: hF73iHRpgJWkVzNPzqUIjG57c12FwKkoXVPc0K4ZxGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:d7:1e:b9:30:dc:6b:aa:c7:b3:5f:aa:8d:7f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Validity
Not Before: Sep 23 06:00:23 2026 GMT
Not After : Sep 24 06:00:23 2026 GMT
Subject: CN=2a9764c98d0c23285e13dab53bd4f4a67c12a513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:62:d8:e6:64:f2:03:33:1c:6e:65:b5:ef:
f7:2c:17:06:0c:e0:b9:74:68:fa:dc:43:33:1b:af:
3c:5c:ca:3c:97:8c:ce:27:e4:02:5a:dd:60:75:c4:
01:6e:1f:4d:03:00:42:1d:f8:83:a3:e1:2c:e6:3c:
50:b8:e3:89:e9:76:18:dd:13:99:ba:8b:dc:21:43:
bf:7e:2b:a0:69:21:77:69:f6:6e:9d:15:6e:5a:0f:
12:eb:2e:96:f0:47:59:01:c5:53:ca:d8:b8:3f:48:
4a:30:54:ad:f1:a6:19:f5:90:c6:ea:b4:12:14:c3:
c5:49:d7:ee:89:a9:35:d9:31:97:e4:76:12:da:cd:
e4:29:74:cb:d4:4b:ec:23:91:19:a9:32:7a:67:1f:
0f:5d:39:e2:df:93:8b:59:e8:eb:c7:bc:8b:59:79:
7a:80:45:ea:2a:c9:da:61:a4:7c:3f:49:43:af:c5:
89:31:41:82:5d:b8:52:e5:ed:ba:28:b9:c3:4b:94:
b0:d1:ea:3a:64:82:8f:c6:70:02:91:40:06:83:47:
99:45:7b:b8:a2:3b:b9:c4:c9:8f:ad:b7:33:f5:41:
f6:5b:77:67:56:6c:ad:a6:6b:d1:8f:97:a8:a5:43:
d0:85:17:ef:8c:4f:8e:68:c7:28:7b:92:dc:d4:13:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:97:64:C9:8D:0C:23:28:5E:13:DA:B5:3B:D4:F4:A6:7C:12:A5:13
X509v3 Authority Key Identifier:
keyid:DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c6:83:fa:25:e2:04:35:c8:0b:ed:d0:e9:13:2a:42:ec:97:
f4:e6:1c:31:80:7b:95:c4:3a:9b:92:92:f0:0d:9f:3b:f4:35:
85:17:ea:b3:ab:ed:21:2e:b2:52:91:c4:e6:67:29:54:d5:d1:
e9:99:0a:b8:67:12:1b:c2:ef:76:d7:2e:fd:b6:ad:ce:05:52:
aa:c6:86:e3:c1:62:33:33:45:dd:a4:69:ac:06:70:ff:26:a8:
44:3c:7f:cd:75:85:a8:1c:e7:7d:66:ec:ed:8a:3d:57:25:1a:
33:1f:7b:5e:6f:c4:77:2b:95:12:6c:21:12:ba:49:36:e1:66:
3b:f3:d2:f0:b3:b6:96:a8:61:aa:89:f5:b2:84:4c:ce:48:ce:
27:30:39:d7:e7:0a:e8:9b:ea:fc:97:61:9d:ae:82:90:b4:dc:
b5:22:e7:f5:9a:64:36:2a:a3:9c:9c:5a:d2:59:19:91:cf:66:
54:8a:8a:29:c0:96:e4:69:41:fb:f5:3d:80:3a:5a:a0:1f:83:
b4:cd:b0:e0:f9:ba:f1:b4:a8:3b:76:d3:24:b2:bd:4d:fd:dd:
4a:76:ff:f9:35:b7:ed:a1:0d:66:f3:10:e8:ea:3d:6c:1d:f9:
28:bc:16:84:02:32:a3:86:54:68:dd:64:0c:e2:78:62:f6:29:
b3:2c:de:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:46:18 2026 by rpki-client