Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: qsm/1c/Cshit4u6lL1g8oO0vu63QKmpHhcHfFlRJSlM=
Subject key identifier: FF:86:A7:DB:9E:09:19:D9:8B:1D:4F:FC:93:1E:DF:73:15:43:DC:E4
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 019D25F22D84B21D76681067081F63A29EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 07FF
Signing time: Wed 25 Mar 2026 17:02:01 +0000
Manifest this update: Wed 25 Mar 2026 17:02:01 +0000
Manifest next update: Thu 26 Mar 2026 17:02:01 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: JN6li0Bo47ZRj01oFMLXYEsZAmp5CwnCovg+DouYdTw=)
2: 88lmdc-mnvLuh7LWT7ewTNitVbQ.roa (hash: 4ev2GHc0kZ6+DnkiGr59ZAC1o1ATDYyOeOGEjJWvhDk=)
3: iKuRCoQtqrfFDPhTIq-f2J6k_mI.roa (hash: 4bH7BrC7xILPkVZ3kcGwCvI7Oji+afFT1aTAsrKOTnM=)
4: mrolwK2KC0w8DkEJIzjFPnT8aDY.roa (hash: KWvJn4y2GSmF/qywBZLEL1QJaSchEcFy2JpZDDXnxyg=)
5: o4G9chIzN7uCnwtKmumyR2sTH_I.roa (hash: KfBs8CLUl46AX0/vUOMRNCDr9u0nNAN2TPcPPQgzWaA=)
6: oFfXrLBfH6lxJPqPhKKALIEnsRY.roa (hash: xv0fWfgOWHRGVoD3X/VZOFn9nwq6PPmmOVIp8EyiD2o=)
7: oovOX9XETodZiiuPtmCpoSGbNQc.roa (hash: P+TaVSkHOwUfOr3zgGexRmHGN3QYL0Fhy8MDYgpRxpU=)
8: yUZKLH7R2JtKQc0S4DdHsOUEQU0.roa (hash: wwrcXsGyyFttGj2nkBh3bs0XPOa0z7A1reDz9TIBgKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:2d:84:b2:1d:76:68:10:67:08:1f:63:a2:9e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Mar 25 17:02:01 2026 GMT
Not After : Mar 26 17:02:01 2026 GMT
Subject: CN=ff86a7db9e0919d98b1d4ffc931edf731543dce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:5f:78:ea:81:99:0a:fc:64:23:f0:e3:19:
31:1d:0e:9f:b6:8c:25:ad:2e:6e:13:9f:16:ad:d0:
67:1c:8b:51:6f:52:b5:5a:6e:4d:67:52:a0:6a:60:
05:d5:24:38:91:e1:ce:47:64:f3:c4:24:90:26:3a:
09:b0:d4:01:59:8f:b4:17:cc:7e:8b:44:7a:14:6a:
86:04:e1:33:27:65:e0:01:2a:da:b8:cf:56:11:ab:
c1:af:64:67:c7:80:77:07:8c:83:15:36:5b:08:ad:
1d:10:af:58:c0:eb:d3:ab:59:ad:3c:8d:24:e9:28:
a9:17:9a:b7:8e:46:1d:ce:30:00:d4:d4:25:b8:ec:
96:d0:18:1d:64:56:5f:53:e0:07:8d:0b:ff:b9:a4:
e8:8b:46:c9:c8:e1:0b:24:75:86:5d:ba:52:72:a6:
64:c0:15:6d:74:8c:05:59:55:01:96:eb:b8:d2:aa:
68:31:0f:ab:05:29:c5:10:45:19:9a:84:48:e8:36:
62:ea:b5:b1:06:87:54:6d:95:4b:73:86:bd:ec:b8:
9c:67:70:a8:b7:a1:1f:c2:bc:7f:0f:61:9d:a4:7c:
b4:6d:f0:56:9e:bd:7a:1b:0a:2a:43:86:45:8d:e0:
5d:da:0f:69:87:f7:13:98:35:65:12:5b:56:4b:a7:
80:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:86:A7:DB:9E:09:19:D9:8B:1D:4F:FC:93:1E:DF:73:15:43:DC:E4
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:69:eb:37:42:60:f9:3c:b4:1c:8a:93:2c:7b:2e:c6:46:c0:
fa:ab:93:b5:6c:97:56:cf:7d:35:da:ce:d7:72:29:79:1d:89:
24:3d:cc:49:a8:c2:99:19:00:e6:38:6e:2a:3b:cf:72:16:9e:
94:10:af:ba:0b:1e:78:ff:9a:17:4d:43:20:62:d2:15:04:35:
43:1a:a6:08:0c:e9:52:e8:51:98:87:09:90:f5:03:6a:7e:15:
3b:99:bf:8a:d1:33:0b:06:78:4f:1a:af:f6:a5:03:a6:f7:73:
4e:7f:ac:fb:35:f4:83:f5:23:df:ac:37:e6:4f:8a:d4:e7:67:
88:50:bb:87:1d:00:12:f0:aa:15:e1:de:88:7a:8e:e9:ac:d7:
29:14:a7:2f:67:a3:b0:6b:e8:87:db:ee:fb:e1:e8:23:f1:13:
a0:8c:2a:7a:84:86:d1:1a:80:4f:91:75:18:05:64:7f:05:0b:
77:ee:39:96:f7:eb:3e:b3:02:d5:f5:fb:1c:57:a6:db:93:eb:
e8:ff:7a:6a:e6:65:26:b1:81:95:fc:c7:2e:64:59:ec:3c:94:
fb:50:09:f9:9d:ba:fa:b5:7a:52:26:0a:bb:8e:55:25:bc:c9:
2a:09:42:0e:9c:fa:f3:bb:ef:76:0d:a6:c7:e8:c3:22:06:c6:
f9:72:87:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:00 2026 by rpki-client