Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: SPcAnS+rQ5BcBcQ+q1EkgDKdQZEa44kUHgdLJemEDh4=
Subject key identifier: D9:C6:2A:70:29:33:49:F3:12:7D:4C:6B:33:7E:0A:66:13:83:40:FB
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 01A0016FB18837F366D35C62164533717F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 19A1
Signing time: Fri 14 Aug 2026 18:01:32 +0000
Manifest this update: Fri 14 Aug 2026 18:01:32 +0000
Manifest next update: Sat 15 Aug 2026 18:01:32 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: XKY3VllGM8rGswSci8RqzTSS+737b6DFysGXNMksZsc=)
2: zw3c904rq4xChP-j73nfIGIlebY.roa (hash: KMDvgbQdyiONiqKh0BKewAjFO3rlCRJWvQUeCqo5FZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:b1:88:37:f3:66:d3:5c:62:16:45:33:71:7f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Aug 14 18:01:32 2026 GMT
Not After : Aug 15 18:01:32 2026 GMT
Subject: CN=d9c62a70293349f3127d4c6b337e0a66138340fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cc:1d:2d:c5:a9:e4:47:85:40:b6:9f:2a:a1:
a5:bd:54:01:99:5d:18:ee:fe:a3:d7:10:1c:bd:2b:
e2:ca:35:23:a9:bb:23:be:0f:6a:9e:42:ef:5d:9b:
d5:fe:60:29:9c:0f:2a:d3:a5:e4:a5:a8:38:5d:51:
db:82:06:b4:68:ed:7d:6d:75:d4:d3:4e:9c:ec:af:
98:fe:13:cb:93:59:32:e4:1a:83:8c:d9:2e:c4:bc:
1b:2a:bc:69:14:aa:ef:d2:0d:27:9b:a3:90:d4:28:
7f:77:0c:00:b5:68:41:51:2a:22:18:91:db:d9:85:
ca:5c:c9:84:c7:c6:44:ea:ad:5d:20:43:5f:ba:17:
17:65:11:6b:63:9b:d9:b8:90:7e:9c:b0:d4:92:70:
65:4b:69:ad:7e:2c:ba:33:34:28:3f:0f:22:1f:43:
82:fb:70:55:c2:e1:fb:b2:ef:6e:24:80:cb:53:65:
ed:e9:74:e0:9f:ad:3e:57:6d:79:d8:0a:40:de:1c:
aa:16:5a:9e:87:81:3a:29:36:c0:6d:bc:e6:21:d0:
ec:ff:85:16:1a:f8:a9:f8:7b:c6:82:21:a0:eb:4e:
29:2a:38:0b:d5:25:5b:79:ba:2c:48:48:78:bc:42:
89:30:3e:d7:c6:b4:93:61:91:3f:04:0b:b9:39:e4:
12:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C6:2A:70:29:33:49:F3:12:7D:4C:6B:33:7E:0A:66:13:83:40:FB
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:1e:a0:59:2d:1b:bd:96:4f:0c:35:03:11:b9:e8:07:ff:d6:
9d:46:05:73:0f:ec:4e:08:2c:0d:11:11:e8:d8:ee:be:ea:6f:
c9:aa:47:97:54:a4:c8:f0:45:e5:5a:23:0c:1d:2b:3a:80:90:
bf:e7:85:07:06:7a:ba:58:60:07:33:43:cb:92:5b:dc:03:3e:
42:fe:57:4c:e6:ac:f6:59:1c:7e:58:03:68:da:b3:42:7d:30:
ba:d2:81:2b:8f:49:8d:c4:51:3f:7d:93:f9:ea:19:04:56:f9:
e9:b2:09:f8:ad:22:65:0c:b5:d0:33:68:23:83:6b:ad:48:65:
5d:37:c5:98:cc:42:df:7d:20:6e:6e:37:aa:47:fd:0c:23:c0:
92:bf:03:d4:24:e6:56:f6:5d:1d:ee:33:6f:63:1e:9a:44:94:
9d:86:e4:d2:7e:07:d8:ff:dd:2b:56:7e:44:61:1e:9f:1c:e3:
80:8b:17:e1:eb:2b:96:ba:b0:62:e9:97:44:2b:ed:b1:4d:ea:
c4:5a:ac:98:c2:19:7d:41:78:c5:e5:a5:25:62:30:59:e9:3c:
25:69:4d:4d:ad:6b:a4:5b:cd:03:27:12:94:40:cb:f3:53:95:
cb:09:50:98:98:1d:d0:29:6a:42:80:ec:c6:ef:65:ee:f2:6e:
d4:08:c2:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb7GIN/Nm01xiFkUzcX+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I3NmQzYzBjNjBkNjYzNTA2YTI1MjY3MWM1MjhlMzQz
OWZmNzUwHhcNMjYwODE0MTgwMTMyWhcNMjYwODE1MTgwMTMyWjAzMTEwLwYDVQQD
EyhkOWM2MmE3MDI5MzM0OWYzMTI3ZDRjNmIzMzdlMGE2NjEzODM0MGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8wdLcWp5EeFQLafKqGlvVQBmV0Y
7v6j1xAcvSviyjUjqbsjvg9qnkLvXZvV/mApnA8q06Xkpag4XVHbgga0aO19bXXU
006c7K+Y/hPLk1ky5BqDjNkuxLwbKrxpFKrv0g0nm6OQ1Ch/dwwAtWhBUSoiGJHb
2YXKXMmEx8ZE6q1dIENfuhcXZRFrY5vZuJB+nLDUknBlS2mtfiy6MzQoPw8iH0OC
+3BVwuH7su9uJIDLU2Xt6XTgn60+V2152ApA3hyqFlqeh4E6KTbAbbzmIdDs/4UW
Gvip+HvGgiGg604pKjgL1SVbebosSEh4vEKJMD7XxrSTYZE/BAu5OeQSrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnGKnApM0nzEn1MazN+CmYTg0D7MB8GA1UdIwQY
MBaAFN87dtPAxg1mNQaiUmccUo40Of91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYt
ZDllMTEzN2YwMmI1LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYtZDllMTEzN2YwMmI1
LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyh6gWS0b
vZZPDDUDEbnoB//WnUYFcw/sTggsDRER6NjuvupvyapHl1SkyPBF5VojDB0rOoCQ
v+eFBwZ6ulhgBzNDy5Jb3AM+Qv5XTOas9lkcflgDaNqzQn0wutKBK49JjcRRP32T
+eoZBFb56bIJ+K0iZQy10DNoI4NrrUhlXTfFmMxC330gbm43qkf9DCPAkr8D1CTm
VvZdHe4zb2MemkSUnYbk0n4H2P/dK1Z+RGEenxzjgIsX4esrlrqwYumXRCvtsU3q
xFqsmMIZfUF4xeWlJWIwWek8JWlNTa1rpFvNAycSlEDL81OVywlQmJgd0ClqQoDs
xu9l7vJu1AjCTw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:48 2026 by rpki-client