Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: uOVYUJD79CkC3CRU+rUW11PDI5SHejFgThqDyt8TLTk=
Subject key identifier: 46:AE:2C:47:F7:F7:4C:3C:60:62:70:E4:76:74:7B:0B:17:16:88:65
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 019F8F7E37A3279214A739D037F23285CF99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 1966
Signing time: Thu 23 Jul 2026 15:00:41 +0000
Manifest this update: Thu 23 Jul 2026 15:00:41 +0000
Manifest next update: Fri 24 Jul 2026 15:00:41 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: GIQYItToGeB6Dz2mSx7U4u3ZvIlYa3aY+DrMDQrXxsc=)
2: zw3c904rq4xChP-j73nfIGIlebY.roa (hash: KMDvgbQdyiONiqKh0BKewAjFO3rlCRJWvQUeCqo5FZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:37:a3:27:92:14:a7:39:d0:37:f2:32:85:cf:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Jul 23 15:00:41 2026 GMT
Not After : Jul 24 15:00:41 2026 GMT
Subject: CN=46ae2c47f7f74c3c606270e476747b0b17168865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:8c:c6:0b:2d:52:3f:55:3f:42:1c:90:18:
a5:ce:da:73:7d:3a:82:a9:7c:f0:73:95:8c:37:15:
13:3b:44:3e:50:59:41:64:57:cf:63:95:0f:ef:d9:
bc:a0:34:98:8b:b8:44:9a:52:1f:9a:51:4c:f0:7b:
6a:03:a8:59:6f:7f:6f:dd:8b:4a:04:7f:c7:b8:62:
b1:3b:9e:8e:1e:69:a5:59:29:71:c1:86:37:97:f6:
fe:fe:37:8d:bc:d9:1e:6a:ca:4e:60:ad:08:6e:b3:
33:ca:a6:45:9b:0e:d5:ba:8d:fa:e2:6d:ee:e6:ee:
5a:a7:1e:6e:b1:16:f2:ff:c1:97:73:45:14:64:e2:
12:94:0a:09:06:95:3c:74:a5:1b:f5:65:8d:ed:1a:
53:97:9b:f3:a5:1f:2b:6c:bd:9a:38:12:bc:81:82:
d9:20:8e:d8:1d:c9:5a:32:d2:9e:75:28:44:f0:aa:
13:69:56:a0:2f:0b:a1:16:76:80:12:d9:e3:52:fc:
ec:62:70:76:8f:6a:a6:15:76:84:78:7d:1d:59:a6:
65:48:17:80:a3:b0:9a:cb:e1:e6:17:ad:60:04:37:
2b:d7:a8:8a:f6:c4:a9:c2:23:e9:4c:69:10:b4:13:
37:6a:30:3d:d0:2d:b9:41:5d:b9:63:af:5f:cf:0b:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AE:2C:47:F7:F7:4C:3C:60:62:70:E4:76:74:7B:0B:17:16:88:65
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:c0:e5:fc:0f:1c:db:71:0d:1a:1d:54:90:6c:d3:93:96:bc:
47:ae:bd:2f:17:90:a3:b6:4e:f5:67:0e:10:81:e0:95:3c:c0:
20:01:23:d7:15:67:f9:4a:6b:69:a9:1d:70:8f:73:af:58:12:
20:fd:0c:a1:c7:a7:b8:37:b3:09:a4:4e:c6:d0:9d:28:32:88:
f4:88:da:e8:ab:79:8b:b6:00:54:35:9e:d6:93:91:59:73:9c:
8f:34:93:80:b2:7e:03:cf:31:3a:49:0b:cf:76:e7:c4:9e:0e:
3c:36:00:4c:fe:80:db:4b:83:0f:2d:f0:5e:b5:a1:cc:05:45:
9a:4b:c3:20:32:3a:b2:a1:ca:ea:c2:ec:cf:65:ea:3d:03:2f:
f7:82:d4:20:6c:cb:d4:5b:10:f8:0a:52:22:93:66:03:e5:d2:
5b:2e:11:8e:93:4f:1b:0a:19:96:c0:94:a9:e3:bd:42:51:5b:
1c:a0:78:2f:95:c6:4e:b0:30:7c:91:2f:60:f6:d9:21:b2:e2:
d6:ec:5c:bb:25:e2:86:a6:00:de:2a:65:ac:92:8a:bd:f9:d2:
48:ec:af:3d:de:bf:9d:0e:b3:a2:60:60:57:1b:6f:71:48:f7:
77:b0:7b:60:be:01:9f:8d:ea:19:9d:87:2a:ed:c1:22:51:14:
e3:eb:ba:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfjejJ5IUpznQN/Iyhc+ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I3NmQzYzBjNjBkNjYzNTA2YTI1MjY3MWM1MjhlMzQz
OWZmNzUwHhcNMjYwNzIzMTUwMDQxWhcNMjYwNzI0MTUwMDQxWjAzMTEwLwYDVQQD
Eyg0NmFlMmM0N2Y3Zjc0YzNjNjA2MjcwZTQ3Njc0N2IwYjE3MTY4ODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppOMxgstUj9VP0IckBilztpzfTqC
qXzwc5WMNxUTO0Q+UFlBZFfPY5UP79m8oDSYi7hEmlIfmlFM8HtqA6hZb39v3YtK
BH/HuGKxO56OHmmlWSlxwYY3l/b+/jeNvNkeaspOYK0IbrMzyqZFmw7Vuo364m3u
5u5apx5usRby/8GXc0UUZOISlAoJBpU8dKUb9WWN7RpTl5vzpR8rbL2aOBK8gYLZ
II7YHclaMtKedShE8KoTaVagLwuhFnaAEtnjUvzsYnB2j2qmFXaEeH0dWaZlSBeA
o7Cay+HmF61gBDcr16iK9sSpwiPpTGkQtBM3ajA90C25QV25Y69fzwuPiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEauLEf390w8YGJw5HZ0ewsXFohlMB8GA1UdIwQY
MBaAFN87dtPAxg1mNQaiUmccUo40Of91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYt
ZDllMTEzN2YwMmI1LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYtZDllMTEzN2YwMmI1
LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxMDl/A8c
23ENGh1UkGzTk5a8R669LxeQo7ZO9WcOEIHglTzAIAEj1xVn+UpraakdcI9zr1gS
IP0MocenuDezCaROxtCdKDKI9Ija6Kt5i7YAVDWe1pORWXOcjzSTgLJ+A88xOkkL
z3bnxJ4OPDYATP6A20uDDy3wXrWhzAVFmkvDIDI6sqHK6sLsz2XqPQMv94LUIGzL
1FsQ+ApSIpNmA+XSWy4RjpNPGwoZlsCUqeO9QlFbHKB4L5XGTrAwfJEvYPbZIbLi
1uxcuyXihqYA3iplrJKKvfnSSOyvPd6/nQ6zomBgVxtvcUj3d7B7YL4Bn43qGZ2H
Ku3BIlEU4+u6hw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:45:11 2026 by rpki-client