Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: dwb5Zw0LVhkiYW5OtlT1wbCNDdM938ulsLevlVItDl8=
Subject key identifier: 12:45:5C:9D:9A:6F:5A:38:23:AA:7A:66:09:D7:67:C5:E0:88:52:6C
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 019E1F10F72AAD97610D534ABB1EC23D416C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 0880
Signing time: Wed 13 May 2026 02:01:05 +0000
Manifest this update: Wed 13 May 2026 02:01:05 +0000
Manifest next update: Thu 14 May 2026 02:01:05 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: 4VitEeZ7NFKI4xTZ6ytBVBdQ83JR/wllXjWtFeC4j4k=)
2: 88lmdc-mnvLuh7LWT7ewTNitVbQ.roa (hash: 4ev2GHc0kZ6+DnkiGr59ZAC1o1ATDYyOeOGEjJWvhDk=)
3: iKuRCoQtqrfFDPhTIq-f2J6k_mI.roa (hash: 4bH7BrC7xILPkVZ3kcGwCvI7Oji+afFT1aTAsrKOTnM=)
4: mrolwK2KC0w8DkEJIzjFPnT8aDY.roa (hash: KWvJn4y2GSmF/qywBZLEL1QJaSchEcFy2JpZDDXnxyg=)
5: o4G9chIzN7uCnwtKmumyR2sTH_I.roa (hash: KfBs8CLUl46AX0/vUOMRNCDr9u0nNAN2TPcPPQgzWaA=)
6: oFfXrLBfH6lxJPqPhKKALIEnsRY.roa (hash: xv0fWfgOWHRGVoD3X/VZOFn9nwq6PPmmOVIp8EyiD2o=)
7: oovOX9XETodZiiuPtmCpoSGbNQc.roa (hash: P+TaVSkHOwUfOr3zgGexRmHGN3QYL0Fhy8MDYgpRxpU=)
8: yUZKLH7R2JtKQc0S4DdHsOUEQU0.roa (hash: wwrcXsGyyFttGj2nkBh3bs0XPOa0z7A1reDz9TIBgKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:f7:2a:ad:97:61:0d:53:4a:bb:1e:c2:3d:41:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: May 13 02:01:05 2026 GMT
Not After : May 14 02:01:05 2026 GMT
Subject: CN=12455c9d9a6f5a3823aa7a6609d767c5e088526c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:af:7a:5a:4a:4f:95:df:0c:c3:52:45:00:
9d:69:80:d6:49:f2:8d:e7:62:2f:50:2d:43:8e:f0:
01:d2:dd:a9:a4:1c:ef:ca:7a:64:a7:81:ef:40:ac:
ba:45:b0:6a:8f:41:31:7e:9d:c6:eb:7c:b9:a6:cd:
10:6b:3a:21:9e:1b:df:38:53:a5:bb:b2:3e:7d:11:
e3:6f:41:f8:c7:59:36:76:20:2b:9d:91:04:5d:2b:
67:2a:e3:23:a0:6a:41:9a:75:59:d6:44:e5:be:df:
d5:5d:a1:53:97:79:18:51:a3:42:a6:e7:01:fd:2d:
b6:a6:a4:32:c2:60:86:33:2c:8c:bd:ab:fb:88:5d:
db:5e:e3:27:a7:a9:7b:aa:38:06:cf:ed:92:40:38:
8b:62:6b:38:16:99:d0:b8:69:8c:79:90:97:79:1b:
96:b8:a4:f4:cb:b0:11:3c:94:3b:42:0f:97:6f:58:
aa:0b:81:d0:3f:60:74:05:2c:83:77:8a:dd:b6:30:
45:c0:0e:41:d4:99:a1:0f:fe:1b:fc:cb:bf:b7:21:
55:ac:40:a8:3e:02:59:40:41:8d:02:b4:88:d3:f1:
46:18:55:2a:9e:33:41:96:25:3e:47:26:0d:69:75:
9c:5f:99:28:e3:03:9b:ff:75:92:b3:5f:1e:1d:91:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:45:5C:9D:9A:6F:5A:38:23:AA:7A:66:09:D7:67:C5:E0:88:52:6C
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:40:6e:c2:19:29:43:7b:19:77:3d:d8:3d:ad:8b:57:c3:b1:
f1:1f:6c:48:cf:29:68:1a:0b:70:49:dd:d7:3d:7d:d5:5e:d9:
07:53:62:f2:e0:b3:92:01:5e:f1:67:78:72:13:56:79:37:20:
a6:ab:d4:97:d8:e7:a5:b2:88:87:a0:c3:34:ec:28:10:c9:d8:
9e:30:62:bc:45:66:3e:db:a5:e6:c4:1e:08:96:e1:05:3b:bd:
6c:3e:75:c6:6f:1b:4a:1d:9f:13:36:2c:3e:0e:dd:3a:88:1c:
3d:91:4b:66:73:07:a7:4c:37:5c:a0:5d:02:77:5e:bc:dc:39:
62:89:35:14:0f:e1:55:d6:a9:1e:6b:bc:ad:a4:ae:06:f8:78:
79:43:10:77:60:1c:c0:33:df:3f:e1:5c:59:1b:e4:3a:81:46:
ca:d5:af:93:98:07:ed:94:85:63:40:63:83:3a:80:b5:cf:33:
1d:1f:bf:55:d5:59:72:c8:64:c4:92:00:13:32:52:76:97:02:
5e:d9:48:52:3e:a9:4f:08:2e:28:94:35:f5:ab:4a:29:9e:85:
a7:e9:80:97:6f:a8:6e:77:db:42:3d:46:3d:48:2b:cf:bc:27:
39:10:29:2f:11:b9:df:6c:85:72:8a:68:8d:7e:90:69:1e:42:
2f:d8:f1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:29 2026 by rpki-client