Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: noCjMMknn22pCas3wFS1wzoBWZ6556bkuRI5C72mjm4=
Subject key identifier: 9C:D4:99:EF:0A:48:8E:9C:0E:08:D9:F6:DE:8F:B2:36:69:D1:52:47
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 019F17C27E65CFB6F2C3DB6119C83A8D5362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 1928
Signing time: Tue 30 Jun 2026 09:00:49 +0000
Manifest this update: Tue 30 Jun 2026 09:00:49 +0000
Manifest next update: Wed 01 Jul 2026 09:00:49 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: TMPpUPuBKWXiHEQnzAg3Mr0He1NgbSOIFdvf9HXYeNw=)
2: zw3c904rq4xChP-j73nfIGIlebY.roa (hash: KMDvgbQdyiONiqKh0BKewAjFO3rlCRJWvQUeCqo5FZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:7e:65:cf:b6:f2:c3:db:61:19:c8:3a:8d:53:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Jun 30 09:00:49 2026 GMT
Not After : Jul 1 09:00:49 2026 GMT
Subject: CN=9cd499ef0a488e9c0e08d9f6de8fb23669d15247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:28:99:24:eb:31:2a:ef:95:c0:c3:49:ea:
c5:e6:4a:f2:bf:5d:64:f4:91:cb:07:19:3e:4d:11:
34:d0:49:00:e0:65:97:68:aa:ff:4a:b1:e4:a7:27:
9d:de:5e:a0:85:dc:b7:9a:d5:d7:8e:f6:94:1a:2b:
68:80:15:46:e6:21:c6:4c:51:70:9f:00:f6:b0:af:
6e:b8:5e:48:e0:88:ae:e5:6d:80:ef:4e:4c:3b:f2:
40:ab:ab:bd:cc:4c:f2:31:77:ee:74:e4:55:69:5f:
bb:58:79:9e:85:bb:36:f7:e4:ff:89:d8:15:a3:bc:
a3:72:bb:ce:eb:f8:4e:30:6b:d7:94:b6:f9:f4:33:
b4:1f:37:15:56:2e:70:d5:e5:3d:71:e7:bb:97:ef:
6a:65:51:03:46:ee:50:94:97:37:fe:5e:f1:55:fc:
df:29:2d:dc:eb:be:0e:f8:f2:91:0d:36:d9:6e:40:
5e:9d:a2:75:6d:d6:2d:a3:ca:14:47:32:25:ed:1d:
13:13:77:49:83:d0:7f:f0:99:6c:bc:ef:e8:de:93:
7a:be:2e:06:5b:aa:7b:8b:c6:a9:4a:e5:56:e2:f1:
fe:b5:69:5e:42:8f:c3:b5:10:b1:be:94:64:5b:1c:
fb:07:54:59:05:e8:97:87:32:b8:b3:a4:e2:3f:55:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D4:99:EF:0A:48:8E:9C:0E:08:D9:F6:DE:8F:B2:36:69:D1:52:47
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e6:2c:e0:4a:a6:2c:fe:8f:64:9b:17:1f:2a:15:84:6a:22:
09:91:c2:9b:04:25:10:9f:4f:60:0b:9b:b1:f3:70:d7:0b:b5:
c9:2c:bb:b1:5b:a5:a3:96:d4:81:76:24:62:f5:eb:eb:18:d0:
5e:be:ff:11:1d:b4:1d:c6:21:c9:93:16:4e:86:dd:07:5c:f6:
d2:aa:40:9b:fb:c3:20:14:b0:fc:df:9b:84:21:36:2f:78:0e:
03:3e:d6:92:c3:35:52:18:cc:a4:9f:82:b8:71:5b:44:74:d3:
37:c7:f5:c4:a7:89:5c:b0:bb:c2:84:24:25:2c:0c:e9:5f:75:
3a:4e:86:b7:cf:96:73:fa:ef:21:0d:4d:67:63:ec:c2:8e:79:
39:98:77:06:a4:7f:a5:29:4f:06:84:c7:00:90:db:db:48:cd:
59:40:9d:53:9d:00:35:1f:ff:e7:c4:54:f5:1b:c0:bc:87:2f:
7b:e0:be:18:2c:f9:06:b4:f5:c3:db:ea:57:8b:66:9e:18:e2:
94:13:36:f5:8e:a9:e3:3d:72:c6:e7:50:96:de:cf:de:8d:04:
23:57:1a:ce:56:2f:64:a5:ae:d8:9b:6f:f9:8d:1b:37:40:b4:
cc:29:e1:00:cb:91:0e:c9:86:f2:f6:5a:87:14:be:4c:dd:5f:
ce:91:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:49 2026 by rpki-client