Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
File: 3ZapfPzU67oF9hUkAJ8sFco0P8U.mft (raw, json)
Hash identifier: l2fWenhcgN1C6xAbCffp/Sja/Jf66dSuuPby8ZaEiJw=
Subject key identifier: CD:16:DC:43:D9:71:0A:71:07:53:26:DD:94:08:B5:64:C0:7A:44:E9
Authority key identifier: DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5
Certificate issuer: /CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
Certificate serial: 019E7BC38FD6DD7FD27CB9D55D78672CBA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
Manifest number: 0194
Signing time: Sun 31 May 2026 02:01:14 +0000
Manifest this update: Sun 31 May 2026 02:01:14 +0000
Manifest next update: Mon 01 Jun 2026 02:01:14 +0000
Files and hashes: 1: 1-mqYp0wbZd3hGyth9JUHZNjDZwI.roa (hash: r3TYLoZQHdWU8RlOoG6zBAduGAPckAKmqupyfEfHJFg=)
2: 3ZapfPzU67oF9hUkAJ8sFco0P8U.crl (hash: ubHHMB8O3X7lqJ9GF+YSPQBg4R4S5Ibmue5AuyLUQ60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7b:c3:8f:d6:dd:7f:d2:7c:b9:d5:5d:78:67:2c:ba:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
Validity
Not Before: May 31 02:01:14 2026 GMT
Not After : Jun 1 02:01:14 2026 GMT
Subject: CN=cd16dc43d9710a71075326dd9408b564c07a44e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0b:7f:24:c8:25:3b:14:81:85:c7:8a:9d:10:
2d:2b:f3:45:be:60:e8:88:ef:8b:cf:53:24:ac:1a:
e4:ab:b5:18:53:f0:25:f7:7d:2b:b4:52:83:81:aa:
b8:11:00:00:3c:fc:24:03:cb:f5:9d:81:2f:8f:31:
18:5d:3c:1e:36:9c:7b:5e:2b:ee:b6:4a:b3:fb:cc:
80:08:a2:51:ff:98:78:ff:bb:1d:b5:15:7b:de:6d:
d4:89:75:31:e3:94:29:41:92:94:74:22:2f:c7:83:
e5:f7:14:ac:4a:f4:70:34:88:25:50:1c:49:af:9c:
9e:e9:58:67:5a:e8:b3:16:30:fe:d8:33:1e:9b:8e:
d3:34:fa:a4:96:2f:0d:32:e8:fa:ee:ef:e0:e6:a7:
1b:46:08:06:1b:45:2e:91:d7:05:6f:4f:28:f4:28:
11:90:e9:7e:35:57:be:b7:50:da:e9:7b:1c:28:dc:
a1:a8:b6:5a:b0:de:58:9f:2a:ca:f8:a8:a1:19:f4:
9a:83:8c:a4:a2:c8:75:2e:be:8f:48:81:4c:88:7f:
81:2f:97:32:55:a9:ec:8d:60:68:c6:84:5c:05:3c:
a8:92:b5:1e:e0:89:b3:24:c6:f8:75:c5:f4:03:10:
32:69:cc:56:fb:25:b2:da:25:99:f4:04:c2:2a:ad:
f6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:16:DC:43:D9:71:0A:71:07:53:26:DD:94:08:B5:64:C0:7A:44:E9
X509v3 Authority Key Identifier:
keyid:DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:28:68:96:bf:ea:d5:f7:f2:63:ae:e6:60:7c:9d:fe:11:68:
95:7e:2d:ce:7e:bc:37:b7:9d:28:7f:32:91:6c:75:30:91:61:
c8:38:82:7f:bb:ba:d6:57:20:c7:5e:2f:c3:1a:d5:98:9d:fe:
95:dd:ae:fe:d6:ab:48:ed:31:3b:e8:4b:33:ca:e3:4e:5e:3c:
7a:c4:9d:44:03:92:af:fc:ac:f2:c9:9f:05:26:5f:ad:b1:b5:
cd:66:57:d8:0b:ea:70:60:ac:7d:60:9b:51:41:07:1a:af:9c:
5c:8b:f6:30:56:2c:e6:85:e9:1b:af:82:bb:fa:8e:96:58:9c:
a2:23:81:3d:02:64:95:1b:6f:d6:36:91:29:6a:46:81:f8:ad:
c0:e6:fd:49:db:b5:7c:5c:c1:d9:84:0b:d2:83:47:36:63:72:
18:c1:8a:af:aa:68:b2:f6:47:82:24:a2:7a:ee:08:c4:db:92:
f3:f0:d0:41:62:d9:50:3b:3c:30:38:35:84:9c:75:b2:bd:48:
46:87:68:c4:a9:46:6f:3a:b2:a0:d0:89:d3:1f:68:f2:7c:31:
27:8b:47:a9:1e:e8:27:c5:1a:54:23:c8:aa:1f:0d:b1:80:ec:
64:83:ea:33:94:9f:1f:c9:10:36:52:73:f2:a5:fe:7e:fb:3a:
a8:d3:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:48:44 2026 by rpki-client