Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
File: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft (raw, json)
Hash identifier: QvdeEQwF0IxaEivODvaBvPctk1vBAX4y26xClveZ34w=
Subject key identifier: 21:10:35:9F:88:49:85:02:D7:8E:9E:E4:88:A3:13:F2:22:B8:3C:A0
Authority key identifier: DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
Certificate issuer: /CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Certificate serial: 019EB84593CB62E2D0E0E17EB07B813BB991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
Manifest number: 033C
Signing time: Thu 11 Jun 2026 20:00:27 +0000
Manifest this update: Thu 11 Jun 2026 20:00:27 +0000
Manifest next update: Fri 12 Jun 2026 20:00:27 +0000
Files and hashes: 1: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl (hash: 5wbbm7FUSqufHrKTwzorc+U2ofd7N4kJoWUvXcl9CSc=)
2: zi6BX2pprFhR63Y5lPO5fzP2XJw.roa (hash: k4cOLLcWBtedRh3+dHl3HpPG8a/ZH38IiLNVDqMNrQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:93:cb:62:e2:d0:e0:e1:7e:b0:7b:81:3b:b9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Validity
Not Before: Jun 11 20:00:27 2026 GMT
Not After : Jun 12 20:00:27 2026 GMT
Subject: CN=2110359f88498502d78e9ee488a313f222b83ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:23:62:1d:f9:74:45:a5:69:c8:81:a3:b0:
cf:43:2b:d1:be:71:87:81:62:5d:08:7c:bd:16:34:
2d:6f:08:12:9f:3b:d0:a0:b9:cd:1e:74:48:b2:20:
07:5e:81:45:ca:93:e9:d2:c2:58:16:34:a6:88:07:
40:d3:74:94:0a:2c:a2:19:95:45:5f:f1:75:c9:c4:
5c:4c:db:1e:7b:7e:6f:ba:79:42:ed:c4:ec:66:93:
2f:a6:e2:48:ba:e1:e7:5c:60:46:2b:fe:8d:a0:ef:
54:ca:b7:d1:ee:ae:16:24:5c:7b:6a:c0:8e:8d:fe:
1f:20:f0:cf:c1:93:3b:cd:64:30:42:df:c3:3e:d6:
09:7c:ca:11:7b:ed:2d:72:46:24:bc:2a:c5:58:39:
b7:52:ff:aa:e1:ca:08:a2:be:7b:77:88:4c:3b:48:
92:49:1b:aa:fd:82:d5:43:38:99:7b:14:80:a7:68:
d2:24:b4:64:c1:98:bd:d8:96:3a:0a:ab:05:c5:79:
38:86:78:29:53:bd:d2:14:2e:c7:34:4e:67:36:4f:
43:dd:2f:39:8f:25:32:cf:0a:fa:e8:93:34:3d:5a:
77:5e:12:b0:33:57:3b:f2:fc:85:6b:17:53:c4:1f:
fc:4f:7c:f9:e0:da:ca:eb:cb:cb:d1:b1:4c:f5:93:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:10:35:9F:88:49:85:02:D7:8E:9E:E4:88:A3:13:F2:22:B8:3C:A0
X509v3 Authority Key Identifier:
keyid:DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:42:4e:d7:2c:db:f4:c2:66:23:25:d1:b1:f8:5f:89:8d:5a:
b6:01:10:8a:4a:71:6f:5f:aa:39:aa:18:8f:b7:79:d7:19:9f:
82:59:56:8f:06:0f:e9:05:d3:ed:80:21:c9:f6:07:63:63:c9:
26:e0:85:dd:a4:5b:fc:4a:5d:ce:a8:f0:00:15:5c:45:6b:62:
31:94:b0:c9:ef:85:e3:84:f5:c4:14:6a:2e:15:88:78:ce:3b:
39:2a:18:eb:93:a9:ff:72:88:f0:dd:c1:d7:bd:23:a3:d0:9f:
4e:41:9b:7f:01:dd:ba:d2:fa:b6:6e:27:d0:28:c2:52:9d:e8:
26:91:47:09:af:f1:a2:c8:e1:53:a4:28:66:d3:57:f3:7d:af:
e0:23:f2:7c:d8:5e:a8:3e:b0:4f:a9:f6:2e:b2:96:7b:f8:d0:
0f:25:87:77:3d:89:94:6f:26:85:d4:ad:a5:75:e3:35:1d:ce:
fb:75:0f:aa:80:f4:57:bc:38:9a:4f:eb:0c:04:d2:3b:cd:ae:
27:fe:ef:e8:0a:19:52:1f:83:b0:11:45:0b:20:eb:b1:81:54:
16:8c:9d:a7:8d:c2:62:bf:af:55:99:3f:2b:32:5d:77:17:aa:
cf:ed:d4:c7:62:6e:fd:e2:f6:9f:08:91:8f:12:dd:82:7d:2f:
7a:1e:f8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:16:40 2026 by rpki-client