Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: zb0U9xIv/1KOTElSlZ/RVgLK124qu50WAyfG4VvL/qA=
Subject key identifier: 48:2C:7A:2E:F0:B6:F8:47:74:B0:56:53:E7:92:A9:2E:83:5E:41:E1
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 01A1DEDE0287E48F76BE8A72227F14535E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 0A71
Signing time: Sun 15 Nov 2026 11:00:53 +0000
Manifest this update: Sun 15 Nov 2026 11:00:53 +0000
Manifest next update: Mon 16 Nov 2026 11:00:53 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: 8IWLHT1tgffjM4cKtpdmFKm3v0CKhEDIzzcbnZYvOas=)
2: 88lmdc-mnvLuh7LWT7ewTNitVbQ.roa (hash: 4ev2GHc0kZ6+DnkiGr59ZAC1o1ATDYyOeOGEjJWvhDk=)
3: iKuRCoQtqrfFDPhTIq-f2J6k_mI.roa (hash: 4bH7BrC7xILPkVZ3kcGwCvI7Oji+afFT1aTAsrKOTnM=)
4: mrolwK2KC0w8DkEJIzjFPnT8aDY.roa (hash: KWvJn4y2GSmF/qywBZLEL1QJaSchEcFy2JpZDDXnxyg=)
5: o4G9chIzN7uCnwtKmumyR2sTH_I.roa (hash: KfBs8CLUl46AX0/vUOMRNCDr9u0nNAN2TPcPPQgzWaA=)
6: oFfXrLBfH6lxJPqPhKKALIEnsRY.roa (hash: xv0fWfgOWHRGVoD3X/VZOFn9nwq6PPmmOVIp8EyiD2o=)
7: oovOX9XETodZiiuPtmCpoSGbNQc.roa (hash: P+TaVSkHOwUfOr3zgGexRmHGN3QYL0Fhy8MDYgpRxpU=)
8: yUZKLH7R2JtKQc0S4DdHsOUEQU0.roa (hash: wwrcXsGyyFttGj2nkBh3bs0XPOa0z7A1reDz9TIBgKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:02:87:e4:8f:76:be:8a:72:22:7f:14:53:5e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Nov 15 11:00:53 2026 GMT
Not After : Nov 16 11:00:53 2026 GMT
Subject: CN=482c7a2ef0b6f84774b05653e792a92e835e41e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:98:78:25:7c:0c:e4:5d:95:46:b5:d4:58:
d0:41:ce:89:0f:cd:36:63:27:67:26:e7:5a:04:d2:
7d:ed:c9:e0:b8:50:4f:b8:92:c8:18:fc:77:30:ae:
18:2f:e5:ab:92:da:b8:a2:1a:7a:3c:16:55:bf:60:
c2:7b:36:7d:ee:84:3b:a3:da:4f:15:ea:1c:b1:ad:
ad:6f:43:d4:64:5c:ee:d4:50:d0:5b:d6:a5:3e:cf:
31:03:2c:94:14:8d:f5:ef:09:fc:68:f3:9a:7e:bb:
67:12:5a:91:e4:6c:26:d7:de:6a:b9:86:bf:ff:29:
4d:d5:b0:4b:0f:14:38:05:30:04:46:2a:66:17:a4:
39:55:cc:b7:3e:de:b8:b7:91:2d:1a:f6:61:00:c7:
cb:4b:59:6d:89:ed:7c:06:ab:4d:92:98:e1:ab:bc:
20:1c:fd:8d:38:9a:ff:0b:e5:09:8e:d7:fd:53:ea:
68:da:e9:ef:19:88:f9:d1:85:4a:da:5e:3b:05:a9:
bc:c0:13:a3:8b:79:e5:d1:20:75:1b:2e:b5:21:88:
7f:93:5a:25:6e:18:03:91:18:6f:d3:f6:8e:99:4f:
15:b4:44:ec:44:7e:39:77:aa:be:f3:c8:72:5c:8e:
e6:db:95:08:ff:98:d9:49:aa:9c:4c:0c:90:9e:da:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2C:7A:2E:F0:B6:F8:47:74:B0:56:53:E7:92:A9:2E:83:5E:41:E1
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:88:80:5f:35:76:33:44:a0:b3:21:92:28:59:b0:1d:0a:1c:
38:67:90:d9:cf:59:8d:7d:af:30:a7:ba:f0:8a:a3:e1:fe:3e:
0c:eb:6e:ec:73:71:40:25:2e:8b:07:09:23:90:bd:ef:f5:39:
11:9f:85:ae:01:6a:0f:9f:88:fc:09:47:01:7f:00:fc:45:e2:
b0:c8:0f:ea:ee:b0:e2:1b:30:d2:6d:f0:f9:82:ac:7c:11:4c:
0c:67:d8:bd:45:16:99:c8:e5:ff:b7:ac:e3:ae:3d:29:9d:6a:
4d:32:af:78:b0:7d:94:57:a7:d6:0c:4e:bb:0d:ce:41:6c:c1:
b3:a0:9a:ed:e7:a4:56:a1:bb:4e:a1:95:89:17:22:b3:27:85:
c0:b1:87:ca:6d:b3:62:cd:ce:4f:6f:fb:c0:4a:d0:04:07:b8:
1e:75:7d:69:05:f8:97:d6:5e:c4:45:92:e6:c5:a4:c6:ab:ab:
ad:fd:82:e1:77:43:e9:fb:43:a6:db:b3:be:c5:24:28:2a:4d:
69:79:2f:8d:5c:2a:44:ef:44:3c:f3:06:43:ee:8b:c8:c3:0a:
1c:f7:87:0e:93:56:6f:d5:92:3e:80:fb:73:10:5c:fc:79:8e:
08:e8:fb:24:69:ed:dd:b0:e6:a8:43:55:db:e4:7c:0a:bf:73:
3a:34:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:03:50 2026 by rpki-client