Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: neog73Zzd0lZp4SxpqUhzy518lcLga/6BzHslqorfNM=
Subject key identifier: 68:8D:8E:3B:94:30:62:5B:46:2D:D2:4D:3C:15:17:52:70:85:7E:AA
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 01A0DA28963B4F3DA1D53BCF416C03CD9B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 1A1D
Signing time: Fri 25 Sep 2026 20:01:28 +0000
Manifest this update: Fri 25 Sep 2026 20:01:28 +0000
Manifest next update: Sat 26 Sep 2026 20:01:28 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: Wjf/4YJPBb7L/BgK8t99flQmSFXlJm0H2PKwgY5LpRo=)
2: 66xj8nJZJDodIpTEFYfIO2lI0pg.roa (hash: cnTcAyScXe7FLebnmc+X1hADlgaMe8Kz4UH8Ho7fCks=)
3: YC7q8GupNzZHSH1s2Vu8MGm0c2Y.roa (hash: TnzlosbHJ70+TNYLJ5XWl/2V3tal0xrZM8UfJyyEdK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:96:3b:4f:3d:a1:d5:3b:cf:41:6c:03:cd:9b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Sep 25 20:01:28 2026 GMT
Not After : Sep 26 20:01:28 2026 GMT
Subject: CN=688d8e3b9430625b462dd24d3c15175270857eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2e:9f:80:ac:c8:bf:2f:de:4a:c4:4c:0b:c3:
d7:fd:92:9c:91:de:11:ce:4d:27:ee:26:be:cf:39:
82:a6:77:44:e6:6f:10:a3:22:67:04:a8:9a:5a:48:
de:85:f5:de:cf:c0:94:f4:82:9d:5e:71:de:68:90:
36:22:22:47:00:78:79:6e:c5:4a:a8:5e:14:13:b1:
fd:01:2b:4b:bd:da:f6:14:f4:04:bc:15:80:ca:74:
a0:0f:0c:4c:5e:7f:c8:d7:b4:50:4b:fd:05:82:25:
30:c6:74:79:f7:ae:b9:1b:9f:ce:80:12:f7:2a:da:
2f:a1:9e:8b:15:d2:fe:28:fc:e0:46:86:07:cf:99:
40:07:a5:81:ec:12:2a:65:4e:49:87:58:66:5a:90:
e2:be:32:26:96:2e:05:c2:58:2d:28:45:ad:92:63:
db:47:09:fb:d7:c4:b8:8b:fc:98:1e:f0:16:ea:55:
ee:8e:0a:73:32:55:f5:d4:55:a2:4c:16:99:3c:7a:
f8:10:8c:51:9a:43:93:b3:40:3b:65:22:6e:52:f8:
29:81:b1:4b:9b:77:45:48:44:19:b9:3c:e7:8c:80:
4c:c0:7c:72:fc:0a:bf:7d:11:4b:1a:6a:e8:4d:47:
b3:95:01:7e:19:42:fd:fc:12:bd:01:4b:e6:21:78:
32:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8D:8E:3B:94:30:62:5B:46:2D:D2:4D:3C:15:17:52:70:85:7E:AA
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:10:8c:4b:94:9e:67:40:d8:8d:1c:71:2b:0a:8b:8b:24:bf:
7b:1a:ba:a9:f6:3d:0b:53:6f:d0:aa:e9:d1:67:ff:d0:4c:61:
41:44:ec:d7:ae:a0:8a:fe:e2:cf:3b:56:23:b3:b4:37:3f:ec:
96:c3:f5:c1:66:c6:44:cf:3e:6f:0e:de:8f:05:d4:bc:38:0a:
5b:8a:28:25:9c:9a:fb:88:78:ca:22:9f:ee:ed:03:a5:bf:ac:
4e:78:d8:1f:84:f7:e8:dd:75:73:15:3f:1c:dd:aa:f0:a1:3f:
bf:8f:e6:60:82:31:1e:a6:42:45:ea:5a:b9:9b:2a:34:45:95:
b2:41:3e:32:2c:72:4e:66:41:1a:85:da:29:70:17:0f:20:66:
71:fc:20:fb:bd:1b:3f:5b:73:e1:d6:60:9d:af:dd:ee:9f:e3:
6a:64:99:94:64:2b:35:22:a5:73:4a:85:cb:1e:34:2a:22:fb:
0e:4f:db:01:e5:68:96:49:0a:cb:b2:a3:23:7b:65:c6:96:8f:
99:a8:b7:63:35:0e:a5:ab:40:a8:9b:51:8f:ca:e2:6a:3f:f8:
c0:d0:25:a9:e5:b8:52:d5:c8:c1:4f:90:0d:d4:6a:81:ab:b9:
3b:96:62:54:44:9f:5a:0a:e3:18:07:36:ac:00:55:54:eb:2d:
74:37:19:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:03:04 2026 by rpki-client