Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
File: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft (raw, json)
Hash identifier: +Tm+O0AykdKbl1biRskDkgB7hUxiNigpNK+ZY0v6DmE=
Subject key identifier: 8D:FD:76:2D:AA:D2:2F:40:68:F8:B6:B4:6B:77:A0:A4:82:CB:6E:BF
Authority key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
Certificate issuer: /CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Certificate serial: 019E1D593C0C0EB157F27A7A801792B674F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 18:00:47 +0000
Manifest this update: Tue 12 May 2026 18:00:47 +0000
Manifest next update: Wed 13 May 2026 18:00:47 +0000
Files and hashes: 1: 3WnIK5pGF-1--NMSUgNLB0NnZ1o.roa (hash: +wFNRw8hcoZ6lDMDvj2KA/bLV+BywMnIzYTLMw+xb4I=)
2: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl (hash: HnF8ogjhywjv9YfUw/JsTSwWvYK9GCufS28vMQjszNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:3c:0c:0e:b1:57:f2:7a:7a:80:17:92:b6:74:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Validity
Not Before: May 12 18:00:47 2026 GMT
Not After : May 13 18:00:47 2026 GMT
Subject: CN=8dfd762daad22f4068f8b6b46b77a0a482cb6ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:5a:b1:be:28:5d:6a:8f:68:81:a4:92:f1:
b0:2d:3e:d9:37:98:ad:af:60:c8:53:b9:63:3a:1b:
74:c9:16:d5:03:b5:5c:f9:01:fe:50:9e:1b:15:2c:
2d:09:d2:a0:e4:3b:24:65:13:c7:3c:e8:b1:97:b1:
3b:d7:31:3f:80:ad:1f:61:d5:3e:ef:f0:22:1a:ec:
a9:c4:8e:4b:58:19:81:e8:f7:58:a1:38:15:1d:b8:
9e:9f:fc:3a:11:ad:3b:35:27:e2:ba:99:6d:73:79:
34:af:df:18:58:9e:da:8a:e4:3c:2b:f2:1f:8c:68:
88:57:93:85:da:e2:ab:fa:e0:55:f1:c9:b5:ae:47:
1d:30:33:64:bc:69:d6:ea:b9:73:55:91:d3:68:1c:
86:bc:dc:3b:c5:90:97:c1:a5:4b:5a:be:fe:75:28:
47:16:20:71:a7:4d:45:f6:f7:1e:e0:39:20:5c:e3:
e4:64:e6:bd:ef:19:48:77:e5:15:df:c2:91:8f:df:
8e:89:22:2e:4c:1f:77:8c:e7:5b:15:8f:97:55:ce:
3d:b2:0e:32:0f:1c:d5:b4:8d:8b:38:06:24:cb:8d:
2d:89:da:cb:03:df:64:9d:4b:01:4a:ff:83:a7:54:
60:5e:31:fe:96:01:8b:75:33:14:7f:c3:b9:dc:f1:
2a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FD:76:2D:AA:D2:2F:40:68:F8:B6:B4:6B:77:A0:A4:82:CB:6E:BF
X509v3 Authority Key Identifier:
keyid:DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d3:42:dd:98:38:21:b1:7e:ab:9b:2d:97:98:a5:27:35:c1:
5b:5e:58:f0:bb:8d:41:3c:69:65:7f:8a:2c:37:93:f4:d7:8c:
a2:46:77:6a:b2:65:13:0c:4c:5a:8b:b6:f1:21:92:13:ef:79:
30:a6:34:f0:1c:fd:57:8a:a6:ff:49:52:5b:47:35:e7:7f:d7:
6f:b2:20:00:dc:6b:da:85:2f:73:24:4b:97:50:ac:1c:ba:fd:
b4:42:be:4b:0f:58:fa:d3:7d:94:c6:91:fe:98:35:76:49:bd:
8b:2f:c8:ce:61:cb:a8:c4:eb:7c:28:5c:c4:13:a9:03:6a:02:
ee:1f:e2:e1:39:35:70:4a:9e:ad:41:6e:00:a7:5a:00:d2:9b:
2c:17:fd:9e:aa:11:d3:da:fa:46:1a:ab:dc:b9:3f:cc:c6:74:
f9:b9:40:f5:4a:5e:91:7b:b9:de:44:31:45:ff:3f:03:f4:5e:
af:17:fc:87:81:11:f9:9e:8c:b0:26:eb:0c:1b:1c:32:49:1f:
1c:15:a1:03:f3:8c:d9:04:71:e1:08:08:8f:06:b9:a5:b6:c4:
d9:19:3b:87:dd:46:a8:47:8e:2f:a3:d4:57:e6:f6:fb:02:16:
a4:87:53:2c:fd:d8:ab:da:9f:05:6a:40:0f:d9:49:b9:fd:22:
d9:e5:5e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:27 2026 by rpki-client