Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: GPTqRoQtrYrEje54sLKGjv3DLmRyptxj1ZiEyUzIPQc=
Subject key identifier: D4:F7:D6:8C:F4:04:C7:9D:46:17:B8:D2:A5:9E:50:EE:D3:DF:F1:C6
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 01A13F02579B0DC387CBF066E6A1836857A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 1AAA
Signing time: Thu 15 Oct 2026 10:01:20 +0000
Manifest this update: Thu 15 Oct 2026 10:01:20 +0000
Manifest next update: Fri 16 Oct 2026 10:01:20 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: O0Lc1ww165BGpQQ0ahcZNOB0hqNdex267iu/wlUgP0A=)
2: ZpkUGalQzjbOCY8XhdJNlnimnsg.roa (hash: MXToSyiqqbrIQ6LzLNHLxYBkJdAsscwP6hbYfaiM+Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:57:9b:0d:c3:87:cb:f0:66:e6:a1:83:68:57:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Oct 15 10:01:20 2026 GMT
Not After : Oct 16 10:01:20 2026 GMT
Subject: CN=d4f7d68cf404c79d4617b8d2a59e50eed3dff1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:2b:0f:c3:80:bd:0e:bc:f1:cf:ce:17:01:
e5:57:7f:87:bd:f9:dd:b7:f9:49:09:63:91:71:fe:
ec:d2:38:be:09:f6:27:ae:8f:13:60:9a:06:3b:6b:
eb:5b:98:41:5e:0b:48:65:8c:c0:e9:fd:e7:4b:3e:
a6:83:2b:6d:26:94:7f:4e:64:06:3a:7a:c5:a3:f0:
a2:60:cf:d8:f0:a2:f1:4a:b7:c8:28:00:7a:25:3e:
bf:87:4a:86:ee:99:4b:77:b6:7c:e0:89:d4:57:8e:
6a:5f:d8:60:44:8d:37:fc:84:69:71:d7:d3:fb:32:
de:bf:e7:88:23:4f:2b:9c:cc:72:64:ff:5d:89:b8:
40:86:57:01:e6:a6:13:75:fc:7d:34:36:84:23:07:
14:28:51:dc:db:d6:7b:bb:db:cd:9a:e4:fc:db:a3:
e7:29:e0:33:92:77:ed:a3:e5:0f:8a:06:4e:a0:5b:
84:3c:1b:5c:0a:4c:7a:38:f7:25:d5:17:33:9c:7b:
74:ff:32:e1:4b:8c:25:f9:23:09:7a:5f:18:02:78:
44:6b:64:22:02:70:d8:eb:3d:fc:3b:76:a0:40:b9:
46:94:5c:ee:75:8d:5c:20:fb:fc:a7:ee:df:eb:9c:
0c:02:0a:30:15:40:11:fc:3e:d1:0f:10:e5:a9:2e:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F7:D6:8C:F4:04:C7:9D:46:17:B8:D2:A5:9E:50:EE:D3:DF:F1:C6
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:87:50:8f:22:3e:6e:82:4d:5e:b1:26:f3:44:94:b0:de:8a:
77:74:47:38:4d:4f:90:e9:83:cd:a9:68:f5:aa:1e:dd:66:da:
90:34:1b:37:73:10:ce:df:81:81:85:94:24:76:30:0a:49:d5:
8c:40:0b:20:d1:05:6a:89:12:d8:b0:03:39:97:a2:6a:d9:2e:
a0:77:1c:00:5f:a8:c1:9d:a2:e9:83:8d:60:b2:af:3b:02:00:
e6:87:56:53:58:1b:39:f1:59:44:cb:59:44:9f:c6:29:f8:f8:
1c:50:e1:a3:76:2c:55:19:a5:ba:ea:a2:00:5f:54:27:de:bc:
d4:89:b0:50:57:96:e2:d8:07:f2:e4:00:54:e4:a1:0d:96:35:
bf:ac:af:94:11:30:28:29:ec:af:55:b5:55:13:43:4f:1c:a6:
e5:ef:2c:db:6e:c8:d3:fd:20:cb:af:e3:fe:ba:de:c6:8a:3d:
aa:fb:2e:a4:d4:99:b7:3a:ad:13:5c:3d:b6:87:0c:3c:ab:f3:
f9:78:96:57:48:e5:3c:16:cc:aa:33:e1:ee:ce:89:fe:56:74:
c1:c7:88:4e:23:cd:f6:79:22:7e:8b:93:13:f0:cc:66:b0:e8:
04:03:1b:91:4f:28:e8:ab:09:b2:52:50:a2:95:de:80:10:e6:
99:09:c4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:47:54 2026 by rpki-client