Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier: +BHxp0Tk/PoaE3xo9FlDtBnGp3YHzwzSa82PYKpWZCQ=
Subject key identifier: E6:80:82:E3:34:DF:0B:58:6D:BB:94:3F:56:93:4B:13:0F:EE:64:CD
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial: 01A13F397FA640B5332FD8CEC13CC6B4983E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number: 0F0F
Signing time: Thu 15 Oct 2026 11:01:35 +0000
Manifest this update: Thu 15 Oct 2026 11:01:35 +0000
Manifest next update: Fri 16 Oct 2026 11:01:35 +0000
Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: 3oXKDQJiw0zdIjstumyP8UYaX8PZDNskgYlvfki/B2c=)
2: N905L8-7YxH2DGuKT4TqyLtH9hg.roa (hash: 8pMSMPosiUUfB8gsw6Yi/Z3lOaNd4MGcuLKeWx/SoOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:7f:a6:40:b5:33:2f:d8:ce:c1:3c:c6:b4:98:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Validity
Not Before: Oct 15 11:01:35 2026 GMT
Not After : Oct 16 11:01:35 2026 GMT
Subject: CN=e68082e334df0b586dbb943f56934b130fee64cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:d2:80:de:36:a9:49:7a:94:60:fc:98:8a:
0c:c5:43:81:e2:da:d4:0f:bc:af:43:26:0d:14:ae:
f5:38:02:8b:3d:a9:7f:82:37:36:10:33:bc:c9:bb:
03:07:60:da:00:82:7a:86:75:99:ca:7a:a4:18:cb:
56:a3:af:31:91:ce:74:92:0c:6b:ab:db:7c:3f:02:
88:b5:96:99:3e:7e:1d:cb:fa:99:52:a2:3a:1e:ed:
d9:84:23:2b:0e:ac:41:c3:2f:96:66:06:59:4c:4d:
aa:e8:9b:56:10:ff:e6:d6:50:66:55:b7:93:af:97:
d1:28:8e:34:48:cb:51:62:f9:b9:01:4d:9a:2a:bd:
66:8b:a8:be:39:1b:3d:d2:90:4a:51:3e:3a:05:52:
69:80:1d:7b:dc:fb:71:9a:af:d0:d1:9f:62:39:a5:
37:00:ac:5e:27:48:a0:16:5f:d4:83:bd:54:8b:23:
67:11:0f:1d:34:7f:d6:21:df:05:93:13:7f:dc:32:
28:8c:e1:d0:cd:fa:a5:f3:c8:4a:c2:6f:0f:f6:c1:
87:18:25:2f:a0:67:df:62:47:d6:9f:fd:e1:bf:1b:
e1:26:60:00:a7:d9:d4:04:69:80:1d:b6:05:fd:18:
f0:1d:22:fd:0a:ff:e8:16:6d:c3:5e:26:3c:54:b3:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:80:82:E3:34:DF:0B:58:6D:BB:94:3F:56:93:4B:13:0F:EE:64:CD
X509v3 Authority Key Identifier:
keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:17:76:77:c0:55:ea:32:49:5f:81:b8:e9:9e:32:82:38:4b:
fa:41:f6:38:b9:52:78:a1:41:2b:c8:a6:61:64:ce:57:cc:dd:
1d:1a:7b:ab:84:13:79:6d:e5:6f:e7:9c:7d:9c:5a:13:77:c6:
83:b2:c0:87:fb:1e:3a:d6:60:9d:4b:9e:64:f4:d1:41:77:fb:
6c:bb:52:e9:f9:a3:79:fb:d6:35:4e:d0:0e:a5:a6:39:6e:0c:
d3:69:32:38:cc:6c:b2:b6:73:6b:bb:05:be:dc:ff:ad:c9:4e:
5e:20:ca:b6:18:38:5b:7a:35:3e:69:f4:04:39:8b:83:b2:63:
e6:9b:8e:4e:37:5c:4d:bf:05:db:ab:c4:6f:84:f6:83:24:45:
25:12:92:74:e7:46:e4:15:48:36:25:94:46:b1:c7:41:cb:83:
f5:b6:18:22:73:33:88:d6:c0:3e:bf:b6:45:f0:15:58:7f:7e:
38:4f:cd:e6:c0:ba:49:85:7a:95:9d:8d:2e:66:f4:65:94:41:
b1:c8:c1:19:f5:94:55:62:e7:b4:aa:7a:da:56:55:de:1e:ec:
b8:8c:89:30:05:b3:55:f1:10:3e:53:aa:0b:bf:fa:11:ce:07:
d3:39:f1:7e:e5:81:7d:ac:7e:30:44:57:38:df:ae:ce:d0:d9:
2c:ad:a9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:21:58 2026 by rpki-client