Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier: re8ILRRea2/7qo3+l+dC1DycN5QqMSRqyppquhykY5s=
Subject key identifier: EF:28:DB:18:7C:85:49:86:6B:2A:20:53:BB:6A:A1:E2:0A:22:7A:52
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial: 01A0D125100C29BD606E3960083703BD2DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number: 0ED6
Signing time: Thu 24 Sep 2026 02:01:01 +0000
Manifest this update: Thu 24 Sep 2026 02:01:01 +0000
Manifest next update: Fri 25 Sep 2026 02:01:01 +0000
Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: 1487o2OIYDEB200g3esFt5yBL0ZmM31cNGBcjViKT7w=)
2: N905L8-7YxH2DGuKT4TqyLtH9hg.roa (hash: 8pMSMPosiUUfB8gsw6Yi/Z3lOaNd4MGcuLKeWx/SoOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:25:10:0c:29:bd:60:6e:39:60:08:37:03:bd:2d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Validity
Not Before: Sep 24 02:01:01 2026 GMT
Not After : Sep 25 02:01:01 2026 GMT
Subject: CN=ef28db187c8549866b2a2053bb6aa1e20a227a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:e3:80:4a:30:66:98:08:45:7d:13:cc:7d:
3b:ae:b2:fa:22:a0:e2:31:be:52:a3:a7:76:01:7f:
35:09:5e:55:9e:a7:e4:32:5b:c2:14:2c:ca:e8:cf:
0d:3a:30:b6:14:11:6b:b4:3b:72:d2:d0:d1:5e:15:
e8:b9:23:17:0a:29:6e:4f:02:51:ed:a8:b5:b9:48:
24:9b:ed:37:8f:f9:4b:07:ac:f2:63:37:28:0e:fd:
de:05:f0:ef:7b:c1:ea:e1:36:e0:b5:d7:a8:cc:6e:
8e:90:b1:be:77:02:cf:cc:d1:22:d2:4d:b3:30:0a:
4d:32:20:43:75:74:6f:13:53:7f:3f:1c:ee:f4:f3:
c4:ef:82:cb:68:8a:4a:d8:e9:50:c8:7d:44:7e:f7:
d6:be:4c:41:32:db:19:f1:dc:85:75:c7:4f:1e:2a:
50:79:ec:01:04:98:3e:b6:4a:6c:d7:c3:5f:a6:6a:
b9:62:0d:30:23:86:b9:79:7d:e1:dc:de:4b:18:ed:
2b:65:35:1a:e4:5e:1f:f1:f6:e1:9e:bf:69:2e:17:
89:f4:04:a2:c3:c5:7d:6e:05:5f:f9:8c:37:0c:fc:
4b:88:6f:62:98:1b:c4:ec:f1:57:42:eb:6a:bf:71:
8d:a6:55:31:0d:31:88:25:45:31:53:1f:28:13:8d:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:28:DB:18:7C:85:49:86:6B:2A:20:53:BB:6A:A1:E2:0A:22:7A:52
X509v3 Authority Key Identifier:
keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:36:85:95:b8:be:4d:4c:d6:45:2f:d3:ed:24:e0:45:ac:27:
77:28:2a:1a:e4:ac:18:01:a9:76:4f:cd:c1:87:6f:ae:60:cf:
26:3b:72:96:0a:f9:de:b3:a0:48:c7:0f:aa:41:7f:2f:3e:5e:
19:89:44:7e:7b:4b:31:02:b5:65:9b:b1:be:56:54:83:08:c4:
47:ce:39:8a:af:00:59:42:58:30:1d:f2:d7:08:f1:56:b4:32:
86:5b:b3:32:e2:9d:b8:fd:03:1e:a3:5c:6c:52:67:98:1f:d1:
82:37:e2:29:3a:37:b9:b2:4c:fe:ce:73:45:0d:d6:23:bf:52:
fc:32:e6:7a:ca:70:41:19:13:5c:20:45:0f:29:3e:11:e0:e6:
62:3f:35:b8:2f:f9:2c:13:71:a8:58:bd:a8:88:00:d0:b4:b2:
c0:62:07:69:62:98:69:bf:69:88:92:c8:7d:03:93:43:8c:9b:
da:f5:1f:3b:36:07:e9:fe:c6:02:5d:a0:78:df:40:73:26:ac:
30:99:ce:8a:64:5a:ba:a7:b5:9e:1d:b6:74:ef:a4:14:0e:fd:
a7:f1:a4:14:f8:f7:ba:a8:ba:94:63:31:46:b2:4a:0b:d9:d4:
5c:0e:d4:02:c3:3b:a4:1b:92:54:fa:5a:67:84:45:67:0f:3f:
a9:e5:dc:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJRAMKb1gbjlgCDcDvS2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOWMzMDM5OWY2Mzg1NTVmNGMwMmU4ZDFiNTViYzkyNzIy
NWNiNTEwHhcNMjYwOTI0MDIwMTAxWhcNMjYwOTI1MDIwMTAxWjAzMTEwLwYDVQQD
EyhlZjI4ZGIxODdjODU0OTg2NmIyYTIwNTNiYjZhYTFlMjBhMjI3YTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn3jgEowZpgIRX0TzH07rrL6IqDi
Mb5So6d2AX81CV5VnqfkMlvCFCzK6M8NOjC2FBFrtDty0tDRXhXouSMXCiluTwJR
7ai1uUgkm+03j/lLB6zyYzcoDv3eBfDve8Hq4TbgtdeozG6OkLG+dwLPzNEi0k2z
MApNMiBDdXRvE1N/Pxzu9PPE74LLaIpK2OlQyH1EfvfWvkxBMtsZ8dyFdcdPHipQ
eewBBJg+tkps18Nfpmq5Yg0wI4a5eX3h3N5LGO0rZTUa5F4f8fbhnr9pLheJ9ASi
w8V9bgVf+Yw3DPxLiG9imBvE7PFXQutqv3GNplUxDTGIJUUxUx8oE425tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8o2xh8hUmGayogU7tqoeIKInpSMB8GA1UdIwQY
MBaAFN2cMDmfY4VV9MAujRtVvJJyJctRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTIt
MGU1MTQwNjJjNTkwLzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTItMGU1MTQwNjJjNTkw
LzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzaFlbi+
TUzWRS/T7STgRawndygqGuSsGAGpdk/NwYdvrmDPJjtylgr53rOgSMcPqkF/Lz5e
GYlEfntLMQK1ZZuxvlZUgwjER845iq8AWUJYMB3y1wjxVrQyhluzMuKduP0DHqNc
bFJnmB/RgjfiKTo3ubJM/s5zRQ3WI79S/DLmespwQRkTXCBFDyk+EeDmYj81uC/5
LBNxqFi9qIgA0LSywGIHaWKYab9piJLIfQOTQ4yb2vUfOzYH6f7GAl2geN9Acyas
MJnOimRauqe1nh22dO+kFA79p/GkFPj3uqi6lGMxRrJKC9nUXA7UAsM7pBuSVPpa
Z4RFZw8/qeXclA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:58:57 2026 by rpki-client