Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: MuDaQecX2bmhnHtJag3LP+lWK4XSY30a8lMtG1vaNss=
Subject key identifier: 9B:6E:72:51:6F:8F:FE:86:E5:E3:85:EC:13:FE:72:1F:77:66:05:F3
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 019E300482059EAC66DB7521A4DD9D3C20C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 18B0
Signing time: Sat 16 May 2026 09:01:02 +0000
Manifest this update: Sat 16 May 2026 09:01:02 +0000
Manifest next update: Sun 17 May 2026 09:01:02 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: UxVBLGPPRWA7oKYD5uxa0xHsyhji3WwVLIljCtfVjUM=)
2: zw3c904rq4xChP-j73nfIGIlebY.roa (hash: KMDvgbQdyiONiqKh0BKewAjFO3rlCRJWvQUeCqo5FZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:82:05:9e:ac:66:db:75:21:a4:dd:9d:3c:20:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: May 16 09:01:02 2026 GMT
Not After : May 17 09:01:02 2026 GMT
Subject: CN=9b6e72516f8ffe86e5e385ec13fe721f776605f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bd:fe:bc:86:ab:48:fc:8c:e4:11:2f:68:ac:
38:56:8e:37:07:c0:fc:16:77:b3:f3:28:8b:92:a2:
e8:1f:6d:78:ae:b9:cc:fa:31:b4:5b:df:a5:52:5e:
be:a9:c9:9c:7a:05:d7:5b:5e:69:4d:e4:4d:b2:f6:
52:4d:0a:3f:30:18:07:5b:2f:76:67:c6:9b:26:db:
27:32:4c:51:56:64:ed:7b:14:a8:04:b7:fa:9e:49:
01:49:d8:27:57:4a:50:4d:f8:3d:d9:a7:73:35:2e:
b7:ff:f8:08:ca:7a:b5:46:ce:b4:8a:8b:ae:66:c4:
a6:2a:0b:88:a4:59:3d:4e:b3:0c:20:f3:98:9e:8d:
be:89:44:79:24:ac:5b:10:cd:c7:d7:4b:38:e7:ee:
bb:5f:e2:58:f5:41:18:44:98:eb:6c:ae:0b:fa:dc:
4f:37:2d:0b:a8:95:af:da:7b:ed:19:89:f8:8a:43:
3a:8d:2a:37:60:51:5d:03:36:34:9b:70:e5:62:21:
9e:32:bf:8e:f7:bc:f0:bd:c2:90:08:9a:cf:7d:92:
a0:c3:3c:05:e5:e0:93:e9:86:31:44:6a:a1:d2:1c:
78:3a:38:8a:51:55:f1:9a:6d:c5:39:53:7b:34:b9:
fb:90:6e:de:6c:87:48:85:06:a9:d6:11:5c:9c:1d:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6E:72:51:6F:8F:FE:86:E5:E3:85:EC:13:FE:72:1F:77:66:05:F3
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7e:42:6f:05:48:64:18:8b:08:d1:06:8f:89:73:f0:2e:bf:
ad:89:da:46:0a:5c:d9:58:54:dc:c6:6f:f0:46:de:74:f3:70:
d8:23:38:75:57:d1:ce:06:c5:34:2a:66:a1:22:7e:4d:09:f0:
62:6c:34:b9:2e:bd:73:71:24:88:eb:ac:fa:f6:c5:02:9b:47:
04:2f:3a:ad:8e:c1:67:95:e8:35:80:94:41:76:65:79:89:f3:
1e:cf:16:ac:41:be:97:71:64:be:3a:38:b6:b2:15:92:e2:4b:
41:26:34:0e:bd:1c:ee:0a:d5:a2:20:ed:0b:a1:44:19:13:9a:
94:84:03:03:66:8b:d1:57:e5:97:e8:c7:d4:59:3e:26:4e:ce:
33:25:98:13:63:7f:0a:97:57:10:dc:e6:8f:93:95:05:b2:9b:
25:6b:ed:92:97:c9:63:d7:0c:4d:89:ac:42:f5:43:2d:66:85:
d4:da:e5:28:1b:0e:e8:5d:a4:cc:87:dd:62:97:03:6b:9d:90:
a8:82:cf:45:1a:13:bc:be:6f:8e:24:38:19:3e:bb:36:81:f7:
95:9a:83:e9:bb:37:71:2c:7b:24:84:f7:a5:33:79:43:5a:e3:
e7:59:5a:43:f9:fe:78:5a:8a:9f:78:a6:c7:4a:b4:63:2c:8c:
95:b2:77:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:27:12 2026 by rpki-client