Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
File: 3ZapfPzU67oF9hUkAJ8sFco0P8U.mft (raw, json)
Hash identifier: LbsbW8d5FjanTJHZuzY4uQxGgFNOgEf+gMdFPw7De/w=
Subject key identifier: 58:DF:8C:F9:BA:89:03:1E:28:8B:A4:71:E2:50:83:48:AF:16:3D:D4
Authority key identifier: DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5
Certificate issuer: /CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
Certificate serial: 01A0CCA352DEFC352950D6B90FA0097B8965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
Manifest number: 02C7
Signing time: Wed 23 Sep 2026 05:00:50 +0000
Manifest this update: Wed 23 Sep 2026 05:00:50 +0000
Manifest next update: Thu 24 Sep 2026 05:00:50 +0000
Files and hashes: 1: 1-mqYp0wbZd3hGyth9JUHZNjDZwI.roa (hash: r3TYLoZQHdWU8RlOoG6zBAduGAPckAKmqupyfEfHJFg=)
2: 3ZapfPzU67oF9hUkAJ8sFco0P8U.crl (hash: p/biGZIOJ26FI+zOl4e0ejcrXsSzJmQ3oQkV3WkHJls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:52:de:fc:35:29:50:d6:b9:0f:a0:09:7b:89:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
Validity
Not Before: Sep 23 05:00:50 2026 GMT
Not After : Sep 24 05:00:50 2026 GMT
Subject: CN=58df8cf9ba89031e288ba471e2508348af163dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:53:3b:cb:67:5e:6e:1c:ea:57:c6:f6:67:54:
a0:d9:39:5f:7f:37:2e:17:00:36:18:30:db:1e:bc:
cd:ca:38:35:fe:81:40:cb:e7:a6:fa:da:2b:26:04:
d4:08:8a:7d:50:ea:bc:aa:9d:66:d0:56:ec:55:02:
62:ee:9f:fd:73:65:e6:5f:0b:45:5f:7d:a2:ac:d3:
6c:8f:55:27:cb:a4:47:9a:84:29:3f:34:80:86:68:
27:d6:e4:1f:92:70:f8:db:ed:64:62:c4:a2:a7:79:
ea:5f:e9:1a:38:bc:e4:8a:63:e8:fc:ff:d7:fc:e2:
ae:6a:e8:99:b7:7c:d2:c8:96:c0:9b:2a:1f:ff:9b:
88:b7:cb:05:85:20:92:64:f7:09:0c:61:ee:54:bb:
05:d0:d8:b7:cc:ed:fc:4f:57:c9:88:4b:03:d2:6b:
87:3c:be:55:ac:b0:3a:2b:49:bc:68:6b:01:04:e1:
32:e6:ee:81:72:e4:0c:9e:fb:50:17:3c:a9:37:fc:
99:7d:e0:ac:5e:36:d0:fe:b7:07:9a:0c:76:d2:2e:
7f:00:c4:29:7d:5d:9c:fd:95:b1:ff:1b:1c:50:e6:
18:db:a5:d9:8d:17:02:31:e6:5d:47:1e:7c:91:74:
fa:6f:e1:c4:6d:ce:7f:c3:b2:c8:d8:e9:56:6a:5a:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DF:8C:F9:BA:89:03:1E:28:8B:A4:71:E2:50:83:48:AF:16:3D:D4
X509v3 Authority Key Identifier:
keyid:DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1f:a4:c5:03:97:fd:67:37:d3:de:95:88:36:ea:d5:5b:6d:
3a:fa:e4:0e:1b:9c:03:de:08:50:2a:5d:b1:27:65:b1:91:93:
6d:e7:03:0b:97:37:08:2c:d4:6f:49:c4:89:9e:aa:f7:85:9a:
34:52:97:19:fa:62:94:59:77:51:18:f7:8a:14:23:21:2b:ed:
bf:8d:1a:c5:3b:b2:f1:36:89:fe:36:9f:bc:39:6b:dc:c7:0d:
a2:4e:fa:44:83:5b:cc:36:c4:2a:2e:9c:cf:ca:37:8c:4c:aa:
6d:f6:ab:96:33:b8:09:e1:6a:25:9e:2a:e2:99:15:cd:d5:3f:
ea:d4:a4:ea:86:77:f5:7d:c9:dc:e4:5d:f6:83:79:3e:9e:1b:
d8:76:23:11:6e:e0:fe:87:01:c1:52:25:b6:55:fb:24:9f:eb:
a7:d6:26:3e:0a:76:16:dd:63:b5:bf:dc:5e:04:4a:4e:66:62:
71:f7:30:0a:1d:0d:63:7c:b0:88:7e:02:06:09:1f:5d:0d:c0:
01:10:99:1c:b2:45:c1:dc:60:08:76:0d:d6:82:ae:52:51:d6:
c0:a3:04:05:c5:bb:cb:ae:5c:a6:34:3b:b5:04:bf:31:6a:6b:
24:0e:a4:0b:bf:f2:f8:5c:ba:f6:d6:5e:88:4d:29:6b:75:95:
5e:23:fc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:59:04 2026 by rpki-client