Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: XpQJYj3TZKXDva1Heuay5+jSVnuTqzmA4lG64lxdyfE=
Subject key identifier: 1F:6F:9F:2A:7F:31:AA:1F:2D:E7:79:40:64:17:14:1A:47:E7:33:8C
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 019F8FEC3F0425B2187B51DB688F7340CA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 093F
Signing time: Thu 23 Jul 2026 17:00:51 +0000
Manifest this update: Thu 23 Jul 2026 17:00:51 +0000
Manifest next update: Fri 24 Jul 2026 17:00:51 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: +jgLRV5fSNyPGcLcBit6BuHo+GJg0biOQIehZKy107Q=)
2: 88lmdc-mnvLuh7LWT7ewTNitVbQ.roa (hash: 4ev2GHc0kZ6+DnkiGr59ZAC1o1ATDYyOeOGEjJWvhDk=)
3: iKuRCoQtqrfFDPhTIq-f2J6k_mI.roa (hash: 4bH7BrC7xILPkVZ3kcGwCvI7Oji+afFT1aTAsrKOTnM=)
4: mrolwK2KC0w8DkEJIzjFPnT8aDY.roa (hash: KWvJn4y2GSmF/qywBZLEL1QJaSchEcFy2JpZDDXnxyg=)
5: o4G9chIzN7uCnwtKmumyR2sTH_I.roa (hash: KfBs8CLUl46AX0/vUOMRNCDr9u0nNAN2TPcPPQgzWaA=)
6: oFfXrLBfH6lxJPqPhKKALIEnsRY.roa (hash: xv0fWfgOWHRGVoD3X/VZOFn9nwq6PPmmOVIp8EyiD2o=)
7: oovOX9XETodZiiuPtmCpoSGbNQc.roa (hash: P+TaVSkHOwUfOr3zgGexRmHGN3QYL0Fhy8MDYgpRxpU=)
8: yUZKLH7R2JtKQc0S4DdHsOUEQU0.roa (hash: wwrcXsGyyFttGj2nkBh3bs0XPOa0z7A1reDz9TIBgKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:3f:04:25:b2:18:7b:51:db:68:8f:73:40:ca:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Jul 23 17:00:51 2026 GMT
Not After : Jul 24 17:00:51 2026 GMT
Subject: CN=1f6f9f2a7f31aa1f2de779406417141a47e7338c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:4f:68:e5:38:8b:b2:2d:23:46:b4:f4:ac:
a8:bb:00:33:6a:a2:e8:db:7a:fb:9b:e9:e5:e1:64:
51:59:1d:a1:73:f3:38:f0:1d:9e:7d:80:c2:9d:39:
39:25:2d:d2:ce:ef:fa:a4:32:78:13:58:b3:99:4f:
c5:0e:82:b8:1e:88:79:ef:a0:dd:21:8d:ab:9c:cf:
93:00:47:9c:e8:3b:67:df:9c:52:51:99:2b:c1:c1:
fd:b3:fa:c9:ba:18:53:29:8b:f1:ca:29:5b:05:00:
17:fe:0b:8e:33:41:7d:bf:16:ad:0e:c2:c1:96:ce:
04:0e:36:4d:88:7a:43:c4:a1:88:e8:e3:d9:03:ec:
12:ad:7b:47:48:a2:73:e6:d1:7c:b7:79:1b:d7:74:
a7:8c:a2:a6:2f:ae:60:a9:44:82:de:bd:b9:d9:28:
11:30:d1:34:64:f9:2b:b6:d6:ab:dd:fb:3b:cd:57:
7c:5f:9f:69:c7:4f:b2:19:40:7c:52:0e:cf:92:71:
32:80:0b:37:c0:d4:43:04:78:d3:15:18:6f:cb:a5:
19:a1:36:bc:b8:fa:e9:e3:fe:51:b3:fa:e9:78:ec:
2d:41:be:da:b2:30:10:25:73:a5:25:8b:c3:f0:5c:
f9:70:17:48:59:87:56:d5:f7:f8:c7:4f:4a:c3:e2:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6F:9F:2A:7F:31:AA:1F:2D:E7:79:40:64:17:14:1A:47:E7:33:8C
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:be:71:4e:c8:e2:f9:42:dc:38:4e:93:f9:f4:ab:90:26:5a:
a8:96:0a:c9:5e:7b:58:6f:5b:3a:96:17:0d:3b:79:3e:ee:81:
e1:27:83:d0:9f:cc:b1:2e:24:0f:96:14:4e:db:d0:99:0d:f0:
e7:81:51:c7:a5:fc:b1:e3:5d:a2:f9:6b:23:c4:53:f0:96:05:
63:17:63:14:8e:06:de:29:44:0b:cf:e6:ea:b0:ff:24:e5:b1:
a9:e3:a4:73:1e:9d:74:96:a1:61:38:e8:9e:51:29:8e:3d:e1:
d4:04:b2:e6:fa:26:01:c8:fc:27:4c:5b:52:d0:35:36:10:9e:
9e:c4:09:b2:e4:9b:a3:29:65:89:ee:1a:e7:cc:28:9e:10:32:
17:21:f6:7d:6f:a7:ec:fc:e7:8e:f1:63:29:0d:1e:c8:0c:a7:
e0:d1:0c:3d:63:56:f8:97:b3:51:54:c4:08:d9:e2:57:90:d4:
ec:fa:1f:52:56:8e:9a:58:45:ed:72:36:37:0d:eb:0c:18:99:
06:31:76:84:14:5f:28:89:cb:bf:3c:d5:5e:78:fe:68:9e:f3:
c2:db:2c:eb:37:dc:34:0c:d2:16:1b:c5:18:ac:dd:3a:31:56:
bb:ce:e2:06:ef:0a:51:89:ff:24:99:44:c2:1a:78:f6:2e:a5:
16:27:29:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7D8EJbIYe1HbaI9zQMqGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2ZkYzRiZjMzYmQ4MGZlMTI4ZDc1Njg0M2Y2MGIzOWQ1
YmVlZTMwHhcNMjYwNzIzMTcwMDUxWhcNMjYwNzI0MTcwMDUxWjAzMTEwLwYDVQQD
EygxZjZmOWYyYTdmMzFhYTFmMmRlNzc5NDA2NDE3MTQxYTQ3ZTczMzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMZPaOU4i7ItI0a09KyouwAzaqLo
23r7m+nl4WRRWR2hc/M48B2efYDCnTk5JS3Szu/6pDJ4E1izmU/FDoK4Hoh576Dd
IY2rnM+TAEec6Dtn35xSUZkrwcH9s/rJuhhTKYvxyilbBQAX/guOM0F9vxatDsLB
ls4EDjZNiHpDxKGI6OPZA+wSrXtHSKJz5tF8t3kb13SnjKKmL65gqUSC3r252SgR
MNE0ZPkrttar3fs7zVd8X59px0+yGUB8Ug7PknEygAs3wNRDBHjTFRhvy6UZoTa8
uPrp4/5Rs/rpeOwtQb7asjAQJXOlJYvD8Fz5cBdIWYdW1ff4x09Kw+I8QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9vnyp/MaofLed5QGQXFBpH5zOMMB8GA1UdIwQY
MBaAFN8/3EvzO9gP4SjXVoQ/YLOdW+7jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMt
YTQ3M2VjNTQxMGMzLzEvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMtYTQ3M2VjNTQxMGMz
LzEvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACL5xTsji
+ULcOE6T+fSrkCZaqJYKyV57WG9bOpYXDTt5Pu6B4SeD0J/MsS4kD5YUTtvQmQ3w
54FRx6X8seNdovlrI8RT8JYFYxdjFI4G3ilEC8/m6rD/JOWxqeOkcx6ddJahYTjo
nlEpjj3h1ASy5vomAcj8J0xbUtA1NhCensQJsuSboyllie4a58wonhAyFyH2fW+n
7PznjvFjKQ0eyAyn4NEMPWNW+JezUVTECNniV5DU7PofUlaOmlhF7XI2Nw3rDBiZ
BjF2hBRfKInLvzzVXnj+aJ7zwtss6zfcNAzSFhvFGKzdOjFWu87iBu8KUYn/JJlE
whp49i6lFicpAg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:23:50 2026 by rpki-client