Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: DWIOS0I5yJ9UGPOkbUutZ73h0nW6nvHsc1lVNGve+HU=
Subject key identifier: A1:09:0E:DA:F8:E5:23:2D:1F:49:2C:9D:6F:EC:46:C0:CF:65:31:5D
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 019D38D33009235D8D1AC78E1D73079700A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 1830
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: p0EDdhnw98262j/kGFnNnj962c2a2GF/3HbxFxl4PVg=)
2: zw3c904rq4xChP-j73nfIGIlebY.roa (hash: KMDvgbQdyiONiqKh0BKewAjFO3rlCRJWvQUeCqo5FZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:30:09:23:5d:8d:1a:c7:8e:1d:73:07:97:00:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=a1090edaf8e5232d1f492c9d6fec46c0cf65315d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:c7:e7:e4:1c:43:5e:46:df:cb:47:25:cb:
e3:31:f5:43:ac:6f:ad:68:64:11:5d:c2:a2:6b:08:
43:d5:7b:14:19:85:a5:65:62:7e:e5:c4:a0:44:58:
69:98:d1:00:70:ee:a2:7e:6b:24:d9:35:07:c1:c7:
93:89:13:72:ce:e8:06:e8:22:a5:88:45:c5:2e:3f:
4a:2b:bb:d1:23:bf:23:48:53:00:bd:2b:9d:7f:35:
ca:29:86:86:44:0e:f6:8a:60:78:64:06:84:ce:5a:
6d:82:52:43:2d:69:9a:f4:e8:e2:a1:f9:da:19:a5:
d5:bb:ac:fe:91:d3:92:79:d7:2e:8c:21:da:c3:d7:
fc:f6:17:b5:59:2d:8b:ea:3a:f1:36:5e:a5:43:90:
2f:c9:16:28:05:e4:0e:6d:04:91:90:83:30:b3:50:
8c:e1:0d:96:1b:e3:e3:37:29:27:44:57:e5:15:59:
79:1e:ec:03:3c:aa:5d:90:eb:a4:bd:1a:ed:89:c9:
97:22:af:22:5c:ba:7e:51:c4:c7:91:18:df:1e:6c:
66:78:a3:b4:5e:43:7e:9c:c8:3c:f7:6f:5a:19:74:
8e:52:ee:28:81:b4:c6:ca:6d:51:41:d1:d3:90:71:
d5:d9:98:e5:27:58:92:b9:a8:6c:73:13:4d:2d:a3:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:09:0E:DA:F8:E5:23:2D:1F:49:2C:9D:6F:EC:46:C0:CF:65:31:5D
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:46:b0:d2:36:48:d2:4d:58:65:c8:3f:2c:8b:40:c4:05:43:
62:ce:a8:72:3c:ab:f9:16:f3:24:7d:fc:93:9a:19:32:e1:ee:
bd:bf:86:ca:a7:47:50:4b:8b:1d:94:69:23:0c:b5:94:aa:a8:
84:9a:1b:84:59:0f:21:eb:6b:08:c9:84:74:35:73:97:c7:89:
08:b6:4d:09:f6:d4:5a:9d:f1:c4:96:1e:f5:8b:dd:39:ef:a5:
35:02:2c:c7:aa:fa:35:96:b6:39:52:25:73:0f:99:75:d4:36:
36:4c:ff:32:df:ca:80:a8:18:e2:6f:55:4a:92:26:5d:3f:e0:
40:e3:d5:f3:b6:15:54:42:22:05:cf:4e:d8:5c:40:44:44:cf:
3f:db:b7:d9:1f:6e:08:68:cd:b4:d6:6e:09:d0:c3:a2:ad:33:
32:5b:e5:69:ff:fe:4c:16:bd:79:aa:45:54:a2:c7:a3:13:77:
b3:9a:2a:af:03:5d:dd:3f:50:95:e1:e9:10:ca:46:b9:62:83:
2a:9e:37:78:b3:fa:8e:d1:b9:b0:05:d5:73:fe:cc:59:f1:63:
f7:41:07:da:d4:b3:d1:8d:6e:67:40:a3:a9:36:98:22:0e:93:
c4:59:54:12:1d:62:11:52:8e:c5:32:11:c6:15:f8:09:e1:82:
03:40:e5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:20 2026 by rpki-client