Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: 7iN1aMsmWL6wBftKktdQZ8zdCc9PrbXlcDt7uiX3VGg=
Subject key identifier: B8:61:E3:A9:BC:01:36:4B:AC:1E:14:92:27:8D:43:41:50:27:64:6E
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 01A1401577BDF6A80B1C63ED14F1976F0683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 1A46
Signing time: Thu 15 Oct 2026 15:01:50 +0000
Manifest this update: Thu 15 Oct 2026 15:01:50 +0000
Manifest next update: Fri 16 Oct 2026 15:01:50 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: 3XD5eQcQJ2Q2/2GZlv6DToTMtAWvw7HZCpoHn4BIjvY=)
2: zw3c904rq4xChP-j73nfIGIlebY.roa (hash: KMDvgbQdyiONiqKh0BKewAjFO3rlCRJWvQUeCqo5FZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:77:bd:f6:a8:0b:1c:63:ed:14:f1:97:6f:06:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Oct 15 15:01:50 2026 GMT
Not After : Oct 16 15:01:50 2026 GMT
Subject: CN=b861e3a9bc01364bac1e1492278d43415027646e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:ff:3f:e4:51:3d:8a:5f:60:d3:d4:21:ba:
72:f5:52:9a:a5:75:bd:21:9b:d4:62:44:7e:d7:51:
19:a0:c8:90:17:13:c6:67:f4:02:2c:e7:b6:ea:3b:
ce:7c:67:e9:77:d1:71:2b:c8:83:c5:fd:5b:8e:e9:
d4:f5:4b:0f:66:bc:bc:59:84:cc:9f:53:22:fb:78:
75:0e:bd:a5:10:a2:fa:74:0d:3f:8e:6c:ca:7e:0c:
64:51:23:39:53:a0:85:e0:85:d3:e9:c8:94:23:1b:
39:a1:88:75:8f:31:3c:70:4f:ed:63:1f:06:71:e7:
f6:e0:41:f1:c1:39:65:c1:98:f6:0f:82:97:50:af:
01:49:01:20:c1:2d:1b:3e:a0:7c:80:a2:f3:fc:e8:
dc:04:69:32:1d:6e:8e:7b:ad:d3:43:e9:f3:26:0a:
86:df:ea:ad:8c:b6:06:1a:6d:3e:1e:fb:49:3f:5d:
0f:c1:c3:b1:40:3b:9f:46:7d:e1:17:5d:af:5f:77:
ea:77:74:ba:d1:1c:79:ea:34:27:5e:58:bb:15:97:
0f:0e:2b:37:3d:12:aa:e3:64:bf:ee:ac:3e:c4:a2:
09:c3:8b:40:fe:9a:3f:f2:54:69:d6:95:84:ea:c7:
f7:25:ed:0d:51:4b:e8:83:81:7f:31:69:dd:12:fa:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:61:E3:A9:BC:01:36:4B:AC:1E:14:92:27:8D:43:41:50:27:64:6E
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fc:c4:d9:66:f9:d3:3d:d8:15:4b:f5:6b:4c:8e:81:96:4c:
91:36:69:de:00:d5:6c:81:26:3a:7d:c3:8e:cf:e4:4d:d5:e8:
33:58:a7:37:69:9a:dd:63:80:5b:39:16:eb:e2:b1:a2:70:62:
d4:a0:f8:d9:a7:dd:f1:86:b6:68:e5:fa:ae:e0:c5:6e:17:0b:
b1:41:61:6f:2d:4a:e8:ac:4c:ae:36:1f:c6:5b:2f:42:43:3b:
19:2d:59:04:ae:ea:ed:0a:a8:e5:2f:49:ed:b2:85:57:5f:4e:
d4:04:92:e7:6e:32:2e:64:91:04:e2:5d:d8:2f:48:ee:af:96:
ff:8b:6d:12:b2:38:c4:60:4b:c3:65:f4:22:cf:83:9d:6c:5f:
01:95:e0:42:65:66:89:52:0f:c8:94:9b:55:0d:8d:9f:8f:64:
8a:df:0d:17:b1:48:7c:21:93:1f:86:03:3f:93:e6:07:df:17:
65:a4:9f:98:60:6b:9f:cd:d5:91:02:ab:71:08:12:e2:aa:d9:
15:93:c3:b9:82:c0:c2:a5:80:fd:19:25:5d:c7:da:1f:4b:b9:
f2:9c:42:d7:99:e6:fa:6d:36:01:b1:c9:31:0b:0e:47:79:48:
11:41:3b:16:75:ea:56:cc:68:5e:a2:c0:26:1e:d1:4c:c3:da:
8e:07:71:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAFXe99qgLHGPtFPGXbwaDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I3NmQzYzBjNjBkNjYzNTA2YTI1MjY3MWM1MjhlMzQz
OWZmNzUwHhcNMjYxMDE1MTUwMTUwWhcNMjYxMDE2MTUwMTUwWjAzMTEwLwYDVQQD
EyhiODYxZTNhOWJjMDEzNjRiYWMxZTE0OTIyNzhkNDM0MTUwMjc2NDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaP/P+RRPYpfYNPUIbpy9VKapXW9
IZvUYkR+11EZoMiQFxPGZ/QCLOe26jvOfGfpd9FxK8iDxf1bjunU9UsPZry8WYTM
n1Mi+3h1Dr2lEKL6dA0/jmzKfgxkUSM5U6CF4IXT6ciUIxs5oYh1jzE8cE/tYx8G
cef24EHxwTllwZj2D4KXUK8BSQEgwS0bPqB8gKLz/OjcBGkyHW6Oe63TQ+nzJgqG
3+qtjLYGGm0+HvtJP10PwcOxQDufRn3hF12vX3fqd3S60Rx56jQnXli7FZcPDis3
PRKq42S/7qw+xKIJw4tA/po/8lRp1pWE6sf3Je0NUUvog4F/MWndEvrruQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhh46m8ATZLrB4UkieNQ0FQJ2RuMB8GA1UdIwQY
MBaAFN87dtPAxg1mNQaiUmccUo40Of91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYt
ZDllMTEzN2YwMmI1LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYtZDllMTEzN2YwMmI1
LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/zE2Wb5
0z3YFUv1a0yOgZZMkTZp3gDVbIEmOn3Djs/kTdXoM1inN2ma3WOAWzkW6+KxonBi
1KD42afd8Ya2aOX6ruDFbhcLsUFhby1K6KxMrjYfxlsvQkM7GS1ZBK7q7Qqo5S9J
7bKFV19O1ASS524yLmSRBOJd2C9I7q+W/4ttErI4xGBLw2X0Is+DnWxfAZXgQmVm
iVIPyJSbVQ2Nn49kit8NF7FIfCGTH4YDP5PmB98XZaSfmGBrn83VkQKrcQgS4qrZ
FZPDuYLAwqWA/RklXcfaH0u58pxC15nm+m02AbHJMQsOR3lIEUE7FnXqVsxoXqLA
Jh7RTMPajgdxqg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:11 2026 by rpki-client