Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
File: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft (raw, json)
Hash identifier: LD9Oof6wLZYXCGUGxDvvY1erWJdx6ST5PxU5byP0a4Q=
Subject key identifier: F1:E1:64:04:02:62:87:13:14:6B:35:B9:04:EA:BC:CF:4C:56:B3:13
Authority key identifier: DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
Certificate issuer: /CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Certificate serial: 01A169B53C4CC5D4F40A40B9FDC6B1BC1ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
Manifest number: 04A1
Signing time: Fri 23 Oct 2026 17:00:47 +0000
Manifest this update: Fri 23 Oct 2026 17:00:47 +0000
Manifest next update: Sat 24 Oct 2026 17:00:47 +0000
Files and hashes: 1: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl (hash: +80eyv6hjtfzJ6jcTmqNcDvefsZKSb2bOcdwRdjDMic=)
2: zi6BX2pprFhR63Y5lPO5fzP2XJw.roa (hash: k4cOLLcWBtedRh3+dHl3HpPG8a/ZH38IiLNVDqMNrQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:b5:3c:4c:c5:d4:f4:0a:40:b9:fd:c6:b1:bc:1e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Validity
Not Before: Oct 23 17:00:47 2026 GMT
Not After : Oct 24 17:00:47 2026 GMT
Subject: CN=f1e1640402628713146b35b904eabccf4c56b313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:1d:9e:6b:6f:4d:9f:56:f1:74:95:02:72:
9e:89:4e:ee:b3:c6:6d:4f:a3:2e:3d:49:cb:a1:98:
fa:9a:21:e1:57:bd:ab:d4:f8:0d:c8:06:2b:b9:84:
de:26:18:7a:e1:96:8d:a5:18:9b:11:33:2c:c2:34:
0d:eb:09:d1:2c:02:87:72:0f:c1:ef:cc:bf:b2:6f:
f6:de:eb:8d:fe:2f:19:62:39:fa:12:62:3c:5c:97:
51:35:fc:1e:7e:7b:d4:e3:b1:31:4f:d8:be:75:a1:
63:42:4f:b6:5c:ee:20:37:ec:0a:8a:f3:66:87:e9:
9b:7e:58:88:a1:9c:2c:8d:34:d0:02:65:82:3b:38:
a5:9b:38:8f:d4:6a:b4:58:1d:4a:88:65:76:8f:fd:
be:ce:d0:7a:14:48:6e:ff:8f:6d:c5:2b:95:7b:a5:
77:6d:7a:7d:eb:70:fb:41:61:b9:88:c4:51:ca:3c:
5c:5c:cd:a4:76:3f:7e:b2:47:49:37:b4:f1:8f:88:
9c:96:1d:96:e4:16:7c:43:f8:af:19:5b:50:76:29:
9a:0a:db:92:35:d6:be:c6:83:3c:56:00:62:4d:61:
98:43:ad:61:e6:3a:a9:c0:30:0b:be:a0:4b:93:3e:
3e:c6:bd:ff:a7:b2:78:a2:c0:b4:08:1e:e9:65:8a:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E1:64:04:02:62:87:13:14:6B:35:B9:04:EA:BC:CF:4C:56:B3:13
X509v3 Authority Key Identifier:
keyid:DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:86:b7:ae:4c:f0:93:46:c6:51:53:53:91:d8:96:ca:87:01:
e1:0a:6a:b4:a1:b1:e4:be:82:27:31:00:b6:d2:c9:96:dd:65:
a0:5b:ae:2d:43:53:bd:9f:01:70:e4:d7:0e:7c:28:8b:17:fe:
fa:5a:cc:8f:3e:bc:2d:51:e4:d1:b4:40:51:0c:5e:7b:13:7d:
1f:95:a8:f6:fe:d9:ab:26:0d:df:50:28:65:ff:89:90:a5:30:
f2:13:6f:fe:8b:31:7b:51:d4:14:2c:6a:7a:6a:52:12:82:d4:
80:62:a1:87:2b:b2:7a:13:9f:1c:71:de:89:3e:5e:fc:e1:a2:
52:50:f9:f8:68:e6:dc:d6:d0:2d:ff:1d:4c:18:1b:68:a9:9a:
60:24:fb:87:01:5f:1b:36:e9:d3:25:ac:04:09:b6:5f:b7:48:
1a:f5:95:11:f2:d9:d9:ab:c0:9f:32:f7:85:9a:d9:92:02:93:
56:5f:ed:8a:6a:87:5e:4b:34:3c:12:eb:f0:45:73:8e:b0:54:
b1:b5:dd:42:24:9d:b0:76:39:3a:24:99:8d:46:90:6a:e6:b2:
e3:2c:fb:f6:a3:e1:4c:9c:19:ee:50:5d:57:47:0d:e7:9e:37:
05:d0:3e:6c:88:7f:33:c4:dc:4b:67:07:5c:ab:6a:57:96:7f:
d3:a0:bc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 22:59:35 2026 by rpki-client