Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: zAUJVCKEKQuaDeAIHKpYpOcROOs2/DMWbmRMMsiE6hs=
Subject key identifier: 88:55:DD:C0:43:F1:04:08:A6:FD:24:51:6E:E9:32:5F:C3:D6:86:91
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 019FDF1A6F4970CDE6A5EDB7433FCFE04574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 0968
Signing time: Sat 08 Aug 2026 02:01:19 +0000
Manifest this update: Sat 08 Aug 2026 02:01:19 +0000
Manifest next update: Sun 09 Aug 2026 02:01:19 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: fbXYN9IKjX9q5UOG/euezlXggQ3lgd35kSM/PUUjfBE=)
2: 88lmdc-mnvLuh7LWT7ewTNitVbQ.roa (hash: 4ev2GHc0kZ6+DnkiGr59ZAC1o1ATDYyOeOGEjJWvhDk=)
3: iKuRCoQtqrfFDPhTIq-f2J6k_mI.roa (hash: 4bH7BrC7xILPkVZ3kcGwCvI7Oji+afFT1aTAsrKOTnM=)
4: mrolwK2KC0w8DkEJIzjFPnT8aDY.roa (hash: KWvJn4y2GSmF/qywBZLEL1QJaSchEcFy2JpZDDXnxyg=)
5: o4G9chIzN7uCnwtKmumyR2sTH_I.roa (hash: KfBs8CLUl46AX0/vUOMRNCDr9u0nNAN2TPcPPQgzWaA=)
6: oFfXrLBfH6lxJPqPhKKALIEnsRY.roa (hash: xv0fWfgOWHRGVoD3X/VZOFn9nwq6PPmmOVIp8EyiD2o=)
7: oovOX9XETodZiiuPtmCpoSGbNQc.roa (hash: P+TaVSkHOwUfOr3zgGexRmHGN3QYL0Fhy8MDYgpRxpU=)
8: yUZKLH7R2JtKQc0S4DdHsOUEQU0.roa (hash: wwrcXsGyyFttGj2nkBh3bs0XPOa0z7A1reDz9TIBgKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 22:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:df:1a:6f:49:70:cd:e6:a5:ed:b7:43:3f:cf:e0:45:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Aug 8 02:01:19 2026 GMT
Not After : Aug 9 02:01:19 2026 GMT
Subject: CN=8855ddc043f10408a6fd24516ee9325fc3d68691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:fc:b3:84:bf:a0:53:17:37:12:86:44:54:
83:e2:35:a2:2f:e4:d4:56:66:0f:c2:70:d3:5f:b7:
b1:3c:dd:13:c5:c1:28:6f:57:b4:07:fa:67:7e:c3:
49:07:98:68:ef:d7:22:e9:44:6b:72:c7:7c:eb:f0:
e3:7d:35:ee:49:c2:24:31:5d:d3:13:af:7d:87:38:
81:59:b2:f3:5f:49:9a:fc:39:fe:ee:88:82:c5:de:
6a:39:0c:80:a1:0b:18:0f:64:d0:8e:b6:e2:e8:4f:
9c:77:0c:97:94:f1:10:0d:6d:39:32:18:9e:d2:9d:
bc:3e:24:9a:30:13:b2:b8:5c:54:4b:ad:f0:e5:9f:
55:df:37:49:5a:e1:e1:65:de:41:1c:c3:e2:0c:ef:
b9:7e:08:89:c9:63:04:e0:46:54:f8:4e:0c:27:18:
c5:13:f7:64:9e:47:6f:87:3a:11:70:6f:d0:54:7f:
6a:3e:56:69:13:b8:27:78:fd:2d:48:50:88:19:1b:
0f:74:84:91:4b:98:07:10:bb:fb:b5:12:94:11:89:
49:88:ef:e3:7a:f9:cb:b5:43:75:18:0a:80:d0:d2:
6e:bd:2c:36:41:d8:2c:1c:3b:4f:94:ae:62:d4:8c:
42:10:0d:bc:60:a0:32:b2:76:35:08:f5:d1:df:40:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:55:DD:C0:43:F1:04:08:A6:FD:24:51:6E:E9:32:5F:C3:D6:86:91
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7d:be:7f:f0:1e:5c:7e:eb:86:11:64:cb:9d:ea:72:44:80:
06:88:34:a0:15:bb:93:2e:a6:14:83:bb:f7:92:49:8a:b0:1a:
92:e6:49:32:b1:6f:8e:77:9f:62:bb:39:0f:a0:d5:c8:39:1c:
7c:d0:aa:62:17:e6:3e:6a:1b:72:54:62:cb:e6:fc:b6:33:d5:
28:03:83:1a:69:d5:9d:87:67:3c:95:9e:84:56:d3:55:6d:3c:
3e:97:89:ae:2b:eb:e1:54:64:f9:23:ab:3d:81:45:45:07:d5:
85:6c:29:a9:38:9a:0f:24:df:17:dd:bd:6f:36:74:da:a7:c2:
58:15:b3:53:27:e5:1e:09:27:2a:18:84:4c:5c:66:c1:6b:7e:
46:07:56:89:40:7a:c8:b2:8a:6a:e8:3a:50:19:e9:cf:78:fe:
48:a4:0e:44:1a:5e:8b:1b:95:9f:6e:09:f1:28:8b:30:93:33:
3f:0c:1c:f8:5d:0b:0f:fb:f5:a9:f6:de:e8:33:d5:7b:d7:6b:
aa:8b:79:05:e0:12:52:dc:b2:66:69:79:fb:80:2d:90:e5:35:
77:c2:a1:0b:5c:a8:37:59:09:f1:41:10:b7:f0:2a:3e:8e:5c:
22:93:33:6b:72:b1:23:a7:25:2b:f7:2e:90:6c:be:08:84:9e:
5a:11:34:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/fGm9JcM3mpe23Qz/P4EV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2ZkYzRiZjMzYmQ4MGZlMTI4ZDc1Njg0M2Y2MGIzOWQ1
YmVlZTMwHhcNMjYwODA4MDIwMTE5WhcNMjYwODA5MDIwMTE5WjAzMTEwLwYDVQQD
Eyg4ODU1ZGRjMDQzZjEwNDA4YTZmZDI0NTE2ZWU5MzI1ZmMzZDY4NjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJX8s4S/oFMXNxKGRFSD4jWiL+TU
VmYPwnDTX7exPN0TxcEob1e0B/pnfsNJB5ho79ci6URrcsd86/DjfTXuScIkMV3T
E699hziBWbLzX0ma/Dn+7oiCxd5qOQyAoQsYD2TQjrbi6E+cdwyXlPEQDW05Mhie
0p28PiSaMBOyuFxUS63w5Z9V3zdJWuHhZd5BHMPiDO+5fgiJyWME4EZU+E4MJxjF
E/dknkdvhzoRcG/QVH9qPlZpE7gneP0tSFCIGRsPdISRS5gHELv7tRKUEYlJiO/j
evnLtUN1GAqA0NJuvSw2QdgsHDtPlK5i1IxCEA28YKAysnY1CPXR30D51wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhV3cBD8QQIpv0kUW7pMl/D1oaRMB8GA1UdIwQY
MBaAFN8/3EvzO9gP4SjXVoQ/YLOdW+7jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMt
YTQ3M2VjNTQxMGMzLzEvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMtYTQ3M2VjNTQxMGMz
LzEvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoH2+f/Ae
XH7rhhFky53qckSABog0oBW7ky6mFIO795JJirAakuZJMrFvjnefYrs5D6DVyDkc
fNCqYhfmPmobclRiy+b8tjPVKAODGmnVnYdnPJWehFbTVW08PpeJrivr4VRk+SOr
PYFFRQfVhWwpqTiaDyTfF929bzZ02qfCWBWzUyflHgknKhiETFxmwWt+RgdWiUB6
yLKKaug6UBnpz3j+SKQORBpeixuVn24J8SiLMJMzPwwc+F0LD/v1qfbe6DPVe9dr
qot5BeASUtyyZml5+4AtkOU1d8KhC1yoN1kJ8UEQt/AqPo5cIpMza3KxI6clK/cu
kGy+CISeWhE0Qw==
-----END CERTIFICATE-----
Generated at Sat Aug 8 06:20:55 2026 by rpki-client