Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: mH+dbwaVchfvo0+P3Fkz+bshIsSkArIgzVexOesh26c=
Subject key identifier: 91:9E:D8:99:D0:67:2A:49:F2:2C:BE:10:4E:63:FE:11:A5:D3:B0:65
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 019D25843A211C3C1A46597A1E5414C9F6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 1826
Signing time: Wed 25 Mar 2026 15:01:55 +0000
Manifest this update: Wed 25 Mar 2026 15:01:55 +0000
Manifest next update: Thu 26 Mar 2026 15:01:55 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: Ver74e57tf0u5ZpjhGDWqdMnJFXuW3OluZ+rsAzmDOY=)
2: zw3c904rq4xChP-j73nfIGIlebY.roa (hash: KMDvgbQdyiONiqKh0BKewAjFO3rlCRJWvQUeCqo5FZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:3a:21:1c:3c:1a:46:59:7a:1e:54:14:c9:f6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Mar 25 15:01:55 2026 GMT
Not After : Mar 26 15:01:55 2026 GMT
Subject: CN=919ed899d0672a49f22cbe104e63fe11a5d3b065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:05:ce:cf:eb:fc:4c:a7:6a:91:c0:42:98:
4d:51:a8:23:9d:44:b1:5f:5c:24:42:6b:c2:fb:b6:
59:5a:c3:f0:fc:10:00:b0:19:fa:99:9f:86:f1:4e:
64:cd:42:17:0d:6f:40:07:1f:b7:9c:f7:85:a1:ed:
77:b4:33:7c:97:fb:69:d7:ba:20:42:2a:71:3c:58:
d7:01:04:0d:0b:f9:4c:d1:be:0c:ec:14:62:6e:61:
cc:06:77:45:ba:8a:81:44:a7:8b:23:e4:7a:19:fc:
5e:19:9b:5d:17:64:35:25:98:db:15:f8:7c:1e:31:
ee:8c:fe:77:4a:a9:0f:58:47:92:5f:2c:f8:e1:e5:
28:60:91:0a:92:92:3d:00:68:96:ad:39:89:96:11:
9b:86:d6:df:34:6f:26:ff:72:dd:81:77:eb:68:6e:
54:5d:f1:2a:fe:14:64:4a:3b:9b:30:7d:b4:ed:16:
ae:18:02:42:a9:4d:3e:4b:61:32:9b:f8:52:9d:9f:
e0:97:2d:81:3f:63:d7:1c:06:a2:cb:8b:57:49:5b:
1a:6c:b7:27:03:94:68:e8:0a:88:b2:bb:fd:de:42:
a8:87:0f:a4:99:db:4e:94:8d:8c:b8:43:76:54:93:
f9:0d:cd:5d:e6:46:38:47:b5:86:26:f5:e4:5b:9c:
dc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9E:D8:99:D0:67:2A:49:F2:2C:BE:10:4E:63:FE:11:A5:D3:B0:65
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b0:04:8a:8f:da:c3:64:fd:c2:94:b7:ab:aa:ad:f3:80:19:
92:30:1c:7c:9a:03:82:9a:72:db:f3:a0:b6:7c:be:33:03:56:
e1:dd:38:4c:b0:57:54:36:8f:84:80:37:d9:5a:11:42:fc:d8:
f9:66:8e:68:0e:32:20:0a:63:f2:a5:db:ad:6d:85:e4:8f:5c:
55:2c:15:e1:af:6b:55:a2:41:68:14:59:f8:6d:ae:28:4d:69:
fc:a4:8b:28:d3:4e:69:8d:92:46:39:b8:4c:19:28:07:2c:67:
32:6d:07:92:87:e1:0f:f0:04:5b:f2:0c:a4:d9:9c:00:d3:49:
f2:75:82:ff:0c:b7:5c:29:92:fb:fb:50:a9:d1:94:ab:3f:7e:
d9:f5:82:d2:a2:17:be:af:03:40:8b:be:8f:37:b7:d1:69:41:
4a:85:d2:5f:ef:a7:67:a3:7b:12:e4:a9:36:44:7d:b2:f7:6b:
f6:14:0b:2d:33:ee:4a:15:45:01:36:43:3a:fd:bf:fa:b2:33:
bb:5d:ae:0c:7a:e5:83:32:c3:7c:15:e6:c4:c2:3d:cc:0d:9f:
b4:44:ad:ed:f1:b6:16:d3:7a:0c:a8:74:3f:83:cf:20:9a:7a:
a9:99:37:e2:a9:b6:39:d9:00:7e:4b:55:4e:fb:03:fd:48:29:
82:96:96:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:20 2026 by rpki-client