Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
File: 3ZapfPzU67oF9hUkAJ8sFco0P8U.mft (raw, json)
Hash identifier: mZz97rOkioaGf2QYA82EnHPncda6nWa1q3Dr6p0s8y0=
Subject key identifier: EC:64:08:4E:A7:F2:9C:A2:E1:94:8D:C7:9E:1F:3A:CB:BA:0B:7D:AC
Authority key identifier: DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5
Certificate issuer: /CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
Certificate serial: 019D394188D3542E6A8C69066BCD3F64E466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
Manifest number: ED
Signing time: Sun 29 Mar 2026 11:01:29 +0000
Manifest this update: Sun 29 Mar 2026 11:01:29 +0000
Manifest next update: Mon 30 Mar 2026 11:01:29 +0000
Files and hashes: 1: 1-mqYp0wbZd3hGyth9JUHZNjDZwI.roa (hash: r3TYLoZQHdWU8RlOoG6zBAduGAPckAKmqupyfEfHJFg=)
2: 3ZapfPzU67oF9hUkAJ8sFco0P8U.crl (hash: U9SBVExAiKFoSdBW4yYv+Cx0KuyBh/Ii+mEOqcaGdQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:88:d3:54:2e:6a:8c:69:06:6b:cd:3f:64:e4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
Validity
Not Before: Mar 29 11:01:29 2026 GMT
Not After : Mar 30 11:01:29 2026 GMT
Subject: CN=ec64084ea7f29ca2e1948dc79e1f3acbba0b7dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:87:37:97:f8:fa:a2:d8:af:01:60:78:8f:
42:3d:46:b0:5a:47:56:3b:33:4d:6e:5e:3a:df:dc:
0e:41:18:00:37:79:61:51:7e:38:8d:f3:3b:89:59:
00:d7:d3:af:81:98:57:f6:3f:42:d7:19:b0:4e:7e:
cd:3c:f2:4e:21:d7:b9:82:57:3b:8a:8c:af:0b:e3:
13:44:6b:77:82:00:a7:10:60:38:22:df:59:53:ba:
58:25:e1:91:ed:15:c2:c0:70:98:d7:90:69:28:f9:
2f:99:15:ba:ee:f6:99:6f:b0:ff:d3:62:6e:63:6b:
48:a2:31:5d:c5:5a:e8:d2:38:2b:48:a1:f7:38:6d:
47:65:ee:77:2e:75:78:8b:37:23:a6:ab:1b:13:e0:
a9:36:71:08:09:df:2f:8b:d0:01:c0:eb:9c:95:93:
b6:48:c3:46:b6:4e:ea:c7:10:01:85:47:69:d9:20:
ae:09:67:38:14:61:56:e0:03:0c:4c:db:c2:fa:ed:
16:98:5a:48:3d:31:c8:17:1b:4c:a8:77:d1:f0:0e:
26:bd:7a:47:3a:ab:54:5e:e6:65:95:f9:84:54:9e:
19:c7:d9:41:e3:de:60:6e:ec:99:f9:81:ca:1c:6e:
a0:2e:10:4d:61:b2:9b:59:ae:e1:5f:64:27:a7:5a:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:64:08:4E:A7:F2:9C:A2:E1:94:8D:C7:9E:1F:3A:CB:BA:0B:7D:AC
X509v3 Authority Key Identifier:
keyid:DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:85:11:87:10:d8:7c:1f:b1:da:65:29:a2:f7:44:39:cb:d5:
cd:8f:ac:f4:7f:71:4d:30:3d:4e:6c:cd:36:c7:c9:9c:68:29:
5f:c8:a2:f6:a9:6c:56:34:9a:34:5f:07:39:a5:2c:6a:20:b1:
ab:8a:99:2a:e0:8f:19:40:32:ae:c6:73:bf:1c:12:60:71:f3:
33:c9:2d:6a:ce:59:69:3f:ea:f0:e8:49:a5:08:8f:f8:bc:cb:
8b:59:d6:85:70:03:f1:84:1c:18:86:92:43:4d:12:20:ca:c9:
ee:08:c7:06:1c:af:78:f5:91:78:8f:28:b6:d1:d9:1d:1b:97:
5b:e3:88:41:36:b8:4c:45:69:04:4f:aa:5e:11:2e:d7:64:0b:
e0:37:70:a5:5a:1e:8a:0e:68:90:ba:81:44:43:35:11:38:29:
31:be:5d:8d:d7:b7:88:58:c6:e5:d0:da:16:3a:8e:69:1c:72:
4b:89:0d:84:c1:50:91:c2:2a:4b:6b:5d:20:52:f5:bb:f7:67:
4d:3b:3c:1c:c8:66:42:bb:3b:74:93:fd:3a:46:64:22:92:91:
66:86:8c:e2:04:84:a8:5a:e7:a9:30:28:ac:fb:46:ee:f8:fc:
90:49:c0:29:9c:58:d8:00:ff:b1:62:9b:00:f3:25:fc:d4:fd:
c1:f7:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:34 2026 by rpki-client