Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: 3WVCxVh+j/TR9va08+gBbt5kff/xtxIZQV7s13ot+uU=
Subject key identifier: 56:F4:71:1A:F2:DE:7D:13:FE:81:BC:04:C9:D3:1D:93:15:D5:18:29
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 019F12657090532AF33351A63351116E5F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 1931
Signing time: Mon 29 Jun 2026 08:01:05 +0000
Manifest this update: Mon 29 Jun 2026 08:01:05 +0000
Manifest next update: Tue 30 Jun 2026 08:01:05 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: KQ7tSGskBLEO6U5/RcSzeryCuHDzN5CDs4CgeV1IcHk=)
2: 66xj8nJZJDodIpTEFYfIO2lI0pg.roa (hash: cnTcAyScXe7FLebnmc+X1hADlgaMe8Kz4UH8Ho7fCks=)
3: YC7q8GupNzZHSH1s2Vu8MGm0c2Y.roa (hash: TnzlosbHJ70+TNYLJ5XWl/2V3tal0xrZM8UfJyyEdK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:70:90:53:2a:f3:33:51:a6:33:51:11:6e:5f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Jun 29 08:01:05 2026 GMT
Not After : Jun 30 08:01:05 2026 GMT
Subject: CN=56f4711af2de7d13fe81bc04c9d31d9315d51829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4a:5a:10:b9:29:1a:bd:61:ee:67:02:ce:45:
9c:a4:4b:44:23:33:4e:f6:3c:eb:00:0f:29:ea:2e:
19:15:11:e6:f3:36:57:bb:11:30:a7:03:86:0f:84:
d4:26:cf:25:d0:cc:98:30:95:06:3a:7a:92:5d:51:
c8:86:c7:43:ac:6e:45:8a:9f:f9:27:a9:c7:6c:51:
9c:89:9a:74:ef:91:d5:c0:08:0a:a7:49:74:14:46:
74:68:e3:ed:e1:a6:6b:df:81:4c:1e:be:a7:44:b1:
d5:af:17:a6:51:22:b3:8e:5f:43:3f:5f:2e:d5:f5:
ad:4f:c4:c7:c6:8b:ff:96:f7:52:6e:30:f2:86:de:
6e:34:43:36:e1:b4:5c:b3:a0:eb:af:c1:01:06:14:
cd:f0:4f:ee:e5:2f:a7:bf:d9:64:8c:cf:3e:d1:ea:
9a:81:54:1d:ac:23:5a:64:89:31:7a:e7:8a:7c:7c:
4d:aa:a9:9c:c4:a3:29:8d:11:57:d9:34:bf:f3:d8:
b8:19:e1:61:8b:16:d0:ee:f1:7d:3d:25:e6:6d:17:
52:6e:85:fe:91:00:c5:c5:89:ec:06:31:20:55:62:
f9:d1:b2:c6:1b:7d:96:06:5e:e2:a9:16:1f:35:e2:
5c:ae:90:29:f4:18:4b:15:08:7f:a4:bd:a5:82:58:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F4:71:1A:F2:DE:7D:13:FE:81:BC:04:C9:D3:1D:93:15:D5:18:29
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:36:c4:4c:1d:eb:52:9b:05:69:d5:e5:43:b5:63:2f:d8:2d:
e7:36:6f:cd:b1:e1:41:b2:c7:c0:6a:3b:59:28:dc:60:5f:b9:
4f:6d:27:42:9d:f7:dd:0a:af:0b:fa:11:2a:13:24:96:9e:f3:
02:25:fc:cd:49:4f:23:0b:69:a1:72:9c:45:79:bf:2e:c1:f1:
da:55:ce:cf:36:ed:e6:3c:68:40:34:25:0d:0a:b2:fd:c4:3e:
dc:f5:ef:7a:91:f7:2e:e8:07:ef:68:d5:42:e5:06:af:95:d9:
be:39:e6:3b:81:9b:85:a6:71:8f:bd:c3:0b:d2:53:61:fc:fb:
72:79:6e:62:32:52:e6:7f:d5:59:21:11:46:44:7c:d7:83:c3:
84:93:94:1e:03:db:89:ac:cd:54:e2:bf:77:ec:79:48:88:d3:
85:7a:59:c9:e5:13:3d:b6:7e:37:f8:89:63:36:0d:e1:61:ce:
d3:c4:04:bc:49:81:d7:86:00:9e:05:9c:d5:a2:a4:55:c0:2b:
83:b0:9f:4e:bc:64:06:ea:53:c2:f1:d5:95:b6:24:c4:91:f6:
33:8a:e5:8a:c6:c0:29:8e:ef:ae:8a:f3:b8:15:0c:74:c1:34:
00:56:fe:d0:9f:b0:7d:dc:d9:54:43:e9:b4:57:57:a9:cc:7c:
f4:9a:0f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:09 2026 by rpki-client