Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: D273noW12NYtngAFihKdnZKhI8+et20SZqtTlq+QKFs=
Subject key identifier: 13:2D:19:99:31:F4:D4:21:73:B5:94:90:86:72:AD:8D:AF:BC:81:F4
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 019D37C07525722703DCC2E547977C72E55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 04:00:52 +0000
Manifest this update: Sun 29 Mar 2026 04:00:52 +0000
Manifest next update: Mon 30 Mar 2026 04:00:52 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: eMZHxnkCmbg4WYcrkRYc8ltmcYESTwz9SN2ZfIcn9/o=)
2: ZpkUGalQzjbOCY8XhdJNlnimnsg.roa (hash: MXToSyiqqbrIQ6LzLNHLxYBkJdAsscwP6hbYfaiM+Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:75:25:72:27:03:dc:c2:e5:47:97:7c:72:e5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Mar 29 04:00:52 2026 GMT
Not After : Mar 30 04:00:52 2026 GMT
Subject: CN=132d199931f4d42173b594908672ad8dafbc81f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:4f:0f:a1:cb:5f:c2:2c:09:a0:b8:87:47:
60:16:bc:bc:4d:04:a2:eb:62:27:e9:27:ff:6c:47:
7c:d8:20:f5:f3:88:02:3b:16:32:a8:3b:6f:82:5a:
79:03:bb:ea:67:f0:70:9b:f4:ee:30:20:72:5f:cf:
02:8f:0d:9f:c6:1c:6c:f7:0f:dd:2a:5d:e6:f7:f8:
40:8c:9f:bd:08:20:6e:1c:64:6a:79:4d:e9:ff:31:
6a:04:a1:10:4b:97:d5:75:51:fe:d3:c3:cf:a4:c3:
3b:3f:4e:5a:1f:c2:91:89:e3:48:c1:bd:4d:5a:f1:
2e:4e:d8:d3:ac:2b:b8:a0:e5:eb:73:54:ad:43:52:
42:5b:3a:82:fa:1c:b8:7a:d3:15:77:22:b0:29:43:
fb:be:64:ff:3b:2b:a1:cc:ac:5b:95:b0:7b:9b:51:
01:d4:3b:8d:b6:00:fe:5a:67:d0:33:80:3d:d6:9d:
1d:6a:b3:4a:3a:7c:1d:7f:12:d9:5f:ee:a9:55:01:
47:23:aa:c4:5c:c6:d1:a6:30:c7:75:47:4d:ce:49:
54:30:a5:b3:eb:4b:a1:fc:f7:f9:c4:8d:16:fa:9d:
98:0f:2e:7e:a6:af:a2:13:61:01:82:59:4e:8d:3b:
32:77:af:30:88:0e:80:4e:82:40:aa:83:f2:fb:94:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2D:19:99:31:F4:D4:21:73:B5:94:90:86:72:AD:8D:AF:BC:81:F4
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:90:1f:8c:24:9e:4c:28:8d:50:59:0f:35:9c:50:8b:cd:60:
6d:aa:65:49:5e:c6:61:74:16:55:08:e5:07:b8:cc:4e:d7:69:
1b:13:15:b7:d4:49:1d:41:1a:2a:53:93:ba:7f:f7:10:a0:75:
e8:3a:61:ad:12:d6:75:9a:5e:05:52:e7:60:e9:dd:0c:0a:af:
86:6e:db:64:73:9d:4b:f0:7b:70:da:7e:8d:dd:85:76:e7:62:
2c:d6:d4:b1:87:82:fb:0b:66:d8:36:5d:4f:bd:0e:ba:dc:24:
3c:08:67:d7:52:81:6a:0f:13:d4:68:af:ea:38:d1:66:d1:8b:
d9:1f:66:83:46:a3:69:b5:e3:f5:59:1b:3d:35:c8:2a:d2:96:
39:18:49:af:d7:bf:05:07:27:3c:6e:50:66:f6:8f:86:2e:9b:
8c:d1:59:cd:ba:53:8a:68:79:ff:04:a8:c0:fc:41:b7:eb:17:
a8:83:dd:0b:40:f0:bb:5b:4a:52:90:d6:8d:84:40:92:1f:b5:
d0:bf:6c:a8:d7:55:0e:b5:36:8c:2f:9f:0c:f2:89:0e:f5:e5:
c7:4c:16:32:14:36:b6:ae:d9:25:17:fe:71:eb:75:ad:22:16:
38:8a:20:bf:aa:ef:de:9e:aa:bc:ea:61:f9:84:3c:f7:c9:92:
11:d3:17:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wHUlcicD3MLlR5d8cuVaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I4MjAwNWZkYmU5NjEwMjBmNzQwYWI0M2M1NTRlNWEz
ODQ1MWYwHhcNMjYwMzI5MDQwMDUyWhcNMjYwMzMwMDQwMDUyWjAzMTEwLwYDVQQD
EygxMzJkMTk5OTMxZjRkNDIxNzNiNTk0OTA4NjcyYWQ4ZGFmYmM4MWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrlPD6HLX8IsCaC4h0dgFry8TQSi
62In6Sf/bEd82CD184gCOxYyqDtvglp5A7vqZ/Bwm/TuMCByX88Cjw2fxhxs9w/d
Kl3m9/hAjJ+9CCBuHGRqeU3p/zFqBKEQS5fVdVH+08PPpMM7P05aH8KRieNIwb1N
WvEuTtjTrCu4oOXrc1StQ1JCWzqC+hy4etMVdyKwKUP7vmT/OyuhzKxblbB7m1EB
1DuNtgD+WmfQM4A91p0darNKOnwdfxLZX+6pVQFHI6rEXMbRpjDHdUdNzklUMKWz
60uh/Pf5xI0W+p2YDy5+pq+iE2EBgllOjTsyd68wiA6AToJAqoPy+5SpkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMtGZkx9NQhc7WUkIZyrY2vvIH0MB8GA1UdIwQY
MBaAFN87ggBf2+lhAg90CrQ8VU5aOEUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAt
MzdjMTQwOTJlYjI3LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAtMzdjMTQwOTJlYjI3
LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq5AfjCSe
TCiNUFkPNZxQi81gbaplSV7GYXQWVQjlB7jMTtdpGxMVt9RJHUEaKlOTun/3EKB1
6DphrRLWdZpeBVLnYOndDAqvhm7bZHOdS/B7cNp+jd2FdudiLNbUsYeC+wtm2DZd
T70OutwkPAhn11KBag8T1Giv6jjRZtGL2R9mg0ajabXj9VkbPTXIKtKWORhJr9e/
BQcnPG5QZvaPhi6bjNFZzbpTimh5/wSowPxBt+sXqIPdC0Dwu1tKUpDWjYRAkh+1
0L9sqNdVDrU2jC+fDPKJDvXlx0wWMhQ2tq7ZJRf+cet1rSIWOIogv6rv3p6qvOph
+YQ898mSEdMXxQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:24 2026 by rpki-client