Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: qsnx51o6t/DrYhDIWpIWup/atUWyOGquA9PzuNXsveU=
Subject key identifier: 2A:79:F4:21:E6:28:0A:EC:96:37:34:53:E0:4C:0F:E6:DB:7C:14:3C
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 01A0CCA2E70A5288641D5319001B78517D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 09E3
Signing time: Wed 23 Sep 2026 05:00:22 +0000
Manifest this update: Wed 23 Sep 2026 05:00:22 +0000
Manifest next update: Thu 24 Sep 2026 05:00:22 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: Fw7VcyWfi2yN1Jp7aRr7WufXqd3XwMlYfgwGPqeRu6A=)
2: 88lmdc-mnvLuh7LWT7ewTNitVbQ.roa (hash: 4ev2GHc0kZ6+DnkiGr59ZAC1o1ATDYyOeOGEjJWvhDk=)
3: iKuRCoQtqrfFDPhTIq-f2J6k_mI.roa (hash: 4bH7BrC7xILPkVZ3kcGwCvI7Oji+afFT1aTAsrKOTnM=)
4: mrolwK2KC0w8DkEJIzjFPnT8aDY.roa (hash: KWvJn4y2GSmF/qywBZLEL1QJaSchEcFy2JpZDDXnxyg=)
5: o4G9chIzN7uCnwtKmumyR2sTH_I.roa (hash: KfBs8CLUl46AX0/vUOMRNCDr9u0nNAN2TPcPPQgzWaA=)
6: oFfXrLBfH6lxJPqPhKKALIEnsRY.roa (hash: xv0fWfgOWHRGVoD3X/VZOFn9nwq6PPmmOVIp8EyiD2o=)
7: oovOX9XETodZiiuPtmCpoSGbNQc.roa (hash: P+TaVSkHOwUfOr3zgGexRmHGN3QYL0Fhy8MDYgpRxpU=)
8: yUZKLH7R2JtKQc0S4DdHsOUEQU0.roa (hash: wwrcXsGyyFttGj2nkBh3bs0XPOa0z7A1reDz9TIBgKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a2:e7:0a:52:88:64:1d:53:19:00:1b:78:51:7d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Sep 23 05:00:22 2026 GMT
Not After : Sep 24 05:00:22 2026 GMT
Subject: CN=2a79f421e6280aec96373453e04c0fe6db7c143c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ed:6b:1e:c3:c7:ad:39:5c:c6:b4:60:ca:d9:
0b:1a:f5:b5:ee:d0:fc:95:92:be:e7:9b:9d:4e:6c:
27:a5:02:34:72:d2:88:6e:2c:40:05:e9:5b:0f:33:
99:3a:67:c8:a4:79:5e:92:49:32:2c:b9:3c:c5:1d:
26:bc:98:07:bf:0f:a2:6f:8c:a3:fa:79:63:fc:1f:
1c:39:c8:c0:fc:9c:0f:ef:47:99:b2:0e:51:4e:6d:
e9:04:73:2e:cf:35:60:4b:7b:82:cd:48:76:7e:8c:
2b:b2:49:7e:0e:83:7c:fb:c5:e3:75:93:f7:0d:ea:
5c:68:86:87:5d:e3:22:f9:92:e2:3c:91:29:5b:6b:
7d:a3:8e:2c:1e:98:bb:71:36:77:68:91:2d:13:69:
a3:39:0d:41:c5:bd:22:50:83:a2:8b:c0:12:ce:22:
6a:30:79:57:ec:ec:45:05:7b:fe:f2:88:62:06:70:
41:e4:17:2f:e9:0f:23:63:99:bc:55:51:cd:01:e6:
e5:04:a8:fa:c1:9a:6d:aa:12:b8:d7:d5:8f:ea:13:
21:6b:32:31:44:6f:e2:17:fb:79:5b:a6:8a:ec:1c:
e0:f0:c5:13:39:df:fd:57:15:5d:ec:c2:81:ae:9c:
c3:3d:50:bc:b0:62:9a:05:0e:7e:7f:e0:fa:34:94:
91:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:79:F4:21:E6:28:0A:EC:96:37:34:53:E0:4C:0F:E6:DB:7C:14:3C
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d0:b9:a0:f8:5d:a3:d9:3e:c7:16:84:f8:b2:ad:bd:b2:d3:
53:df:52:82:9b:8f:ec:85:b1:d4:0b:fc:1d:ca:f4:df:ea:8c:
c0:80:e4:df:38:4e:11:d5:f2:34:2d:99:13:97:c6:67:e6:d9:
ce:bc:a8:15:66:8d:13:14:92:77:63:4d:af:eb:c9:cf:8e:27:
5a:24:a9:b2:b5:bb:3d:19:0b:96:8e:cb:12:0a:20:24:1b:f6:
2c:c8:c5:cb:4a:d3:a3:e4:cd:bc:7c:0d:9a:04:e5:4e:09:9e:
7d:d2:ae:c1:07:ab:c4:44:cd:51:76:47:71:df:dc:19:7e:76:
2c:14:87:82:a1:30:cd:cf:9f:b6:9a:ff:40:37:39:32:48:a8:
ed:fd:e9:c1:58:f9:0f:e6:ae:b2:5f:3c:98:b4:cd:a7:17:7d:
12:18:32:8e:cf:b2:0b:a2:44:ee:b4:98:99:c2:8a:7a:95:ea:
36:64:f5:02:e6:4a:73:66:40:2a:ba:4b:e5:b4:86:f3:61:fc:
33:16:93:8d:c1:6d:aa:80:ef:2b:63:5b:d2:3e:c9:86:8b:13:
e1:70:16:07:c5:df:2a:95:44:ab:ed:e3:c1:16:aa:11:45:68:
d7:8e:f5:2d:e0:ab:de:9a:7d:3a:5a:12:df:42:cf:38:3b:06:
55:42:3e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:00:08 2026 by rpki-client