Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
File: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft (raw, json)
Hash identifier: jFP3fbNY0TdEa3AJ+UnHZG4wr0j52Y35lzjxo/8Vrjg=
Subject key identifier: C4:52:7D:E3:6E:05:13:2D:D8:17:24:75:27:48:8A:A7:2A:27:40:0D
Authority key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
Certificate issuer: /CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Certificate serial: 019D28169950E27F560C0CE961A5D511B50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:01:02 +0000
Manifest this update: Thu 26 Mar 2026 03:01:02 +0000
Manifest next update: Fri 27 Mar 2026 03:01:02 +0000
Files and hashes: 1: 3WnIK5pGF-1--NMSUgNLB0NnZ1o.roa (hash: +wFNRw8hcoZ6lDMDvj2KA/bLV+BywMnIzYTLMw+xb4I=)
2: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl (hash: l35J9OB9tFJsiF7bxhOkbta/tQMcdtKJex+R+n2BUcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:99:50:e2:7f:56:0c:0c:e9:61:a5:d5:11:b5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Validity
Not Before: Mar 26 03:01:02 2026 GMT
Not After : Mar 27 03:01:02 2026 GMT
Subject: CN=c4527de36e05132dd817247527488aa72a27400d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:14:72:84:fc:14:51:22:e9:57:7d:ff:aa:
32:88:6e:ad:70:82:63:f8:75:ac:34:36:61:d4:d8:
17:4c:8d:18:d4:43:12:10:75:43:62:18:b1:6a:c0:
d1:2f:9f:03:d2:5c:30:a2:2f:6e:d4:af:a0:9e:d7:
fb:4b:5d:b5:31:7f:55:cb:fc:32:87:73:c1:c8:a7:
7f:22:3a:c5:68:39:4a:1d:1b:e1:58:8d:09:46:b9:
9b:82:ba:0f:3a:b9:c9:cd:f0:8b:41:6d:fe:50:49:
27:1f:82:31:0a:10:b0:b7:c5:62:cb:57:82:63:6e:
1e:4e:dc:05:a8:86:57:1b:73:8a:c1:c5:c4:18:ab:
39:6b:94:45:b6:5c:a9:f7:0d:07:c2:40:6c:40:e4:
a1:a9:35:7c:60:1d:cc:0e:6e:cf:3d:e1:83:3c:d1:
de:db:b3:ee:fa:22:6c:e8:e0:7d:cc:38:f0:95:80:
f6:a4:9c:f5:ca:96:5a:9b:08:ef:3a:96:e4:b9:4f:
5b:a0:b3:af:cd:ff:64:78:44:8e:fc:77:97:54:76:
64:9d:75:61:26:cf:c9:a0:29:a0:7b:a6:4d:4b:68:
3f:02:16:0b:c7:dc:55:79:14:80:4c:43:d7:26:1f:
b6:02:47:61:80:03:b2:e0:92:96:d0:fb:a0:c7:c6:
bf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:52:7D:E3:6E:05:13:2D:D8:17:24:75:27:48:8A:A7:2A:27:40:0D
X509v3 Authority Key Identifier:
keyid:DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:74:c8:1f:3d:2f:81:49:ca:0c:64:33:92:4d:45:b5:5a:b1:
d4:d5:de:a5:1c:f3:9e:f8:a3:31:2c:bb:4d:b9:3b:cd:47:73:
89:de:37:67:3d:81:12:1a:87:04:2c:dc:55:5a:67:77:fc:b9:
2b:a1:e7:9c:d7:24:60:38:8a:14:e3:a0:a0:11:6c:3b:c5:1e:
3f:8d:7f:46:ce:7f:1d:dc:93:66:fe:13:0b:ff:8d:b1:1e:44:
02:48:30:c3:66:d1:93:c6:79:c1:c4:b2:58:d0:88:f4:b8:63:
b4:9f:32:c3:b7:59:38:89:10:3e:97:ae:1c:85:19:7f:ec:9a:
17:61:00:d6:7c:6f:32:34:13:3b:d1:29:23:19:61:3a:31:ae:
a3:ab:f0:8e:14:14:8b:3e:96:4f:6a:63:11:df:1b:8b:95:de:
23:31:62:ee:1b:67:9e:9c:de:06:74:9e:b9:79:f5:df:63:bd:
7b:07:68:b5:ca:a2:d3:12:06:b6:ea:1d:38:68:da:8d:b2:ad:
33:af:af:89:c3:6a:47:ea:7e:42:b3:9d:00:07:b2:b7:27:fe:
b5:7a:b6:af:be:49:3b:d4:01:12:c5:94:4a:d3:c7:bf:49:f9:
80:6b:0b:97:15:9e:34:69:e9:21:a1:43:db:f9:24:be:85:01:
4d:b9:5d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:41:52 2026 by rpki-client