Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: IYSw785nS0OzWvsbdUPTAtMD/iiwqKssHVMS6zenOPg=
Subject key identifier: EE:85:26:D0:F9:CC:8C:2A:57:A2:B5:C1:BA:03:39:29:AB:50:FE:9C
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 01A0ED0BA7D0C2AF6FF726304E2D5F4E5A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 1A1B
Signing time: Tue 29 Sep 2026 12:02:39 +0000
Manifest this update: Tue 29 Sep 2026 12:02:39 +0000
Manifest next update: Wed 30 Sep 2026 12:02:39 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: U3mqhpQeyIln6rPbbqi+jyRu5jDjApWo2uvstgqcc20=)
2: zw3c904rq4xChP-j73nfIGIlebY.roa (hash: KMDvgbQdyiONiqKh0BKewAjFO3rlCRJWvQUeCqo5FZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:a7:d0:c2:af:6f:f7:26:30:4e:2d:5f:4e:5a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Sep 29 12:02:39 2026 GMT
Not After : Sep 30 12:02:39 2026 GMT
Subject: CN=ee8526d0f9cc8c2a57a2b5c1ba033929ab50fe9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:75:be:fc:5f:fb:e5:dd:ef:a7:39:31:c5:
37:bb:b8:15:4d:48:68:56:a4:f8:0a:ac:64:aa:9f:
94:98:9c:58:18:f8:04:0e:17:c4:26:f8:38:88:20:
60:7a:41:58:02:69:94:1f:3e:c6:b3:4d:86:34:3c:
6f:48:29:b3:22:7c:18:70:91:6b:b6:99:69:0a:80:
c2:dd:fd:8c:78:7e:a4:31:4a:e3:30:6f:1d:1e:41:
90:1a:6d:ba:79:bf:ed:e5:37:50:db:28:da:64:56:
a9:c5:fc:b6:81:ee:cf:39:4e:dd:3a:af:29:dd:38:
61:65:10:b8:d4:bf:d2:ff:6d:63:9e:85:5a:a8:3a:
14:93:86:b7:dd:09:d5:08:e2:93:61:7f:95:12:23:
de:b4:c4:dd:92:41:2f:df:6a:7e:db:ed:00:e0:54:
70:a2:65:cd:7d:25:86:6a:69:e9:a6:71:4b:2d:6d:
b9:0d:38:94:40:47:51:06:df:6e:63:67:4b:24:a1:
56:14:57:2d:9f:b2:cc:12:d8:f7:61:2b:d3:e9:87:
a6:25:92:1a:90:ae:fe:3d:77:f3:c7:6f:7c:fd:8a:
bf:28:41:83:f1:10:11:69:80:8d:e0:a8:d5:b9:8d:
8d:97:c4:f3:30:ec:c2:5b:7e:7c:f1:d1:08:1b:cc:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:85:26:D0:F9:CC:8C:2A:57:A2:B5:C1:BA:03:39:29:AB:50:FE:9C
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e8:61:3f:b9:6b:85:e0:03:82:4b:7d:af:62:d6:2d:51:fd:
74:1a:d4:79:a8:c1:43:ad:95:90:97:7b:a7:55:90:51:e8:72:
31:1a:4f:0e:ea:b1:43:68:df:3a:e6:7d:24:74:fb:df:62:ce:
26:de:89:49:d1:c0:21:ad:db:39:75:b8:21:0b:d2:de:d0:18:
db:f2:08:ea:d9:e5:b4:2c:8c:6d:de:d7:de:ae:a9:b0:29:30:
ca:d9:f7:4c:e3:6e:79:5d:61:00:44:78:4b:6c:ff:cd:4c:7f:
40:95:54:59:fa:19:c7:5f:59:c0:46:2f:4d:e2:80:3a:83:d3:
8c:79:e4:0f:4b:6e:b3:97:c0:ab:2e:28:bc:5d:83:94:1e:30:
04:32:07:64:24:ab:ee:87:4d:0f:b1:b1:2f:a8:c0:2c:02:44:
33:c4:8d:0f:e2:f0:aa:5f:c1:cc:7f:a7:e9:ad:dc:47:83:1b:
43:fc:ab:84:cf:c2:9c:e2:1f:d7:b9:91:bb:56:d6:7e:2c:24:
90:8b:27:a4:2c:4c:e1:e7:fc:65:84:c3:a4:73:17:6e:34:74:
84:47:7e:da:9a:b3:b8:15:bb:15:9e:17:14:e1:06:16:61:ba:
b4:7c:0a:55:1b:7a:f6:6b:ca:a5:28:80:56:3a:99:32:f5:aa:
37:8d:0b:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtC6fQwq9v9yYwTi1fTlpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I3NmQzYzBjNjBkNjYzNTA2YTI1MjY3MWM1MjhlMzQz
OWZmNzUwHhcNMjYwOTI5MTIwMjM5WhcNMjYwOTMwMTIwMjM5WjAzMTEwLwYDVQQD
EyhlZTg1MjZkMGY5Y2M4YzJhNTdhMmI1YzFiYTAzMzkyOWFiNTBmZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCV1vvxf++Xd76c5McU3u7gVTUho
VqT4Cqxkqp+UmJxYGPgEDhfEJvg4iCBgekFYAmmUHz7Gs02GNDxvSCmzInwYcJFr
tplpCoDC3f2MeH6kMUrjMG8dHkGQGm26eb/t5TdQ2yjaZFapxfy2ge7POU7dOq8p
3ThhZRC41L/S/21jnoVaqDoUk4a33QnVCOKTYX+VEiPetMTdkkEv32p+2+0A4FRw
omXNfSWGamnppnFLLW25DTiUQEdRBt9uY2dLJKFWFFctn7LMEtj3YSvT6YemJZIa
kK7+PXfzx298/Yq/KEGD8RARaYCN4KjVuY2Nl8TzMOzCW3588dEIG8wP9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6FJtD5zIwqV6K1wboDOSmrUP6cMB8GA1UdIwQY
MBaAFN87dtPAxg1mNQaiUmccUo40Of91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYt
ZDllMTEzN2YwMmI1LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYtZDllMTEzN2YwMmI1
LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+hhP7lr
heADgkt9r2LWLVH9dBrUeajBQ62VkJd7p1WQUehyMRpPDuqxQ2jfOuZ9JHT732LO
Jt6JSdHAIa3bOXW4IQvS3tAY2/II6tnltCyMbd7X3q6psCkwytn3TONueV1hAER4
S2z/zUx/QJVUWfoZx19ZwEYvTeKAOoPTjHnkD0tus5fAqy4ovF2DlB4wBDIHZCSr
7odND7GxL6jALAJEM8SND+Lwql/BzH+n6a3cR4MbQ/yrhM/CnOIf17mRu1bWfiwk
kIsnpCxM4ef8ZYTDpHMXbjR0hEd+2pqzuBW7FZ4XFOEGFmG6tHwKVRt69mvKpSiA
VjqZMvWqN40LuQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 17:51:29 2026 by rpki-client