Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
File: 3ZapfPzU67oF9hUkAJ8sFco0P8U.mft (raw, json)
Hash identifier: uKML/syE7a9WKOQHxLlZSseMPnMSvTgK8IHru7554vU=
Subject key identifier: 40:12:15:19:CD:77:B5:B5:41:C1:41:61:DA:5F:E4:AF:00:70:BA:F7
Authority key identifier: DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5
Certificate issuer: /CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
Certificate serial: 019D25F14A04B0C0AA8574C54EB761015E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
Manifest number: E3
Signing time: Wed 25 Mar 2026 17:01:03 +0000
Manifest this update: Wed 25 Mar 2026 17:01:03 +0000
Manifest next update: Thu 26 Mar 2026 17:01:03 +0000
Files and hashes: 1: 1-mqYp0wbZd3hGyth9JUHZNjDZwI.roa (hash: r3TYLoZQHdWU8RlOoG6zBAduGAPckAKmqupyfEfHJFg=)
2: 3ZapfPzU67oF9hUkAJ8sFco0P8U.crl (hash: Iz1sy4V4Reug4ETtx58a27YCBSFEsBMsCDXVt+PPgHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:4a:04:b0:c0:aa:85:74:c5:4e:b7:61:01:5e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
Validity
Not Before: Mar 25 17:01:03 2026 GMT
Not After : Mar 26 17:01:03 2026 GMT
Subject: CN=40121519cd77b5b541c14161da5fe4af0070baf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:02:64:25:06:05:93:a8:1d:c0:5a:b9:2f:
88:0f:e6:73:f9:5b:f9:fc:f1:7c:47:0f:eb:ff:4e:
06:00:06:15:a0:f7:31:b7:0b:7a:4c:d3:11:a1:cf:
fd:a0:ac:e1:e6:9e:9a:27:be:b5:15:90:34:09:58:
f3:63:c6:83:39:7c:67:c2:cf:4e:72:ed:a1:f0:69:
b7:b1:88:f5:75:95:75:7b:4e:af:e2:85:e0:d9:3b:
e4:ba:cf:4b:68:9d:c7:3b:00:ac:9a:71:60:56:1a:
01:9a:93:9e:b4:97:f9:d4:4a:3c:9a:0b:81:8b:10:
50:91:98:3e:1d:c1:86:3a:0b:a2:c2:6f:de:85:2e:
1f:cf:90:cd:3d:2f:6c:59:23:ef:c3:80:fa:4a:e6:
39:c5:38:64:42:75:6b:da:06:36:0c:1f:d8:e5:94:
ff:97:1e:45:a1:1d:0b:94:48:ce:fb:18:da:a1:d8:
8c:fb:c7:dd:82:c6:a5:60:1d:dc:df:ae:ec:b1:41:
3c:69:06:75:f0:80:2c:6b:e1:96:c5:97:d7:d6:f4:
0d:43:2e:70:49:5f:aa:ab:42:0c:3e:34:ce:1f:39:
22:64:c7:1c:4b:e4:47:ac:d4:61:df:92:b1:0c:70:
85:90:e3:f3:a3:9f:e1:d6:70:fe:ab:80:cc:10:62:
82:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:12:15:19:CD:77:B5:B5:41:C1:41:61:DA:5F:E4:AF:00:70:BA:F7
X509v3 Authority Key Identifier:
keyid:DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:95:b2:8c:2f:90:e9:4f:4c:4d:e3:37:27:2d:2b:86:67:cc:
75:cd:b3:87:bc:7e:79:9f:9e:61:a3:d5:29:05:d7:dc:86:ab:
d4:45:9f:13:fc:0c:69:72:ad:26:e5:8d:9f:b2:bf:d2:3d:a0:
be:b0:26:e5:21:72:b1:61:ec:23:69:97:67:87:b5:4d:56:5d:
c1:ee:12:b7:14:49:a3:1c:79:42:65:96:6c:e6:8f:d2:5e:f0:
b4:65:a9:9c:3f:d8:c8:b3:42:35:72:bb:be:cb:21:45:db:b6:
f0:6a:b6:71:39:dd:5e:8b:d5:16:87:0b:93:37:38:30:bb:6f:
34:70:34:76:20:7b:ed:02:76:74:ec:c0:e2:57:1c:40:65:3c:
43:dd:0e:74:f1:eb:c8:fd:52:ab:a1:bb:ee:f6:64:bf:02:6b:
67:79:57:e4:ff:5c:04:49:ab:2c:05:a2:8e:c1:e5:70:96:1e:
e6:1c:9a:e2:28:0e:3c:a6:4f:9f:f4:9a:0a:dd:0c:7c:c4:13:
e8:6b:a6:d3:d5:1e:eb:7d:3e:28:23:29:7a:1e:5a:7a:6e:7f:
38:99:ab:a0:1e:29:ad:bf:9f:86:67:6e:a7:bc:fb:6a:aa:d2:
e3:1a:a3:f8:73:68:e7:2e:22:00:69:43:c1:87:64:19:8e:9d:
04:4f:13:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:36 2026 by rpki-client