Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
File: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft (raw, json)
Hash identifier: T8Q25+cOCQ54KLBvMEmxYZ9AjNKwf5eJCDG3XLGzTH0=
Subject key identifier: 99:7D:C6:24:32:9E:B9:10:D1:03:88:2B:67:50:F4:5D:62:B5:58:32
Authority key identifier: DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
Certificate issuer: /CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Certificate serial: 019CAEDA35CAE747C8AC962150E765934DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
Manifest number: 022E
Signing time: Mon 02 Mar 2026 14:01:01 +0000
Manifest this update: Mon 02 Mar 2026 14:01:01 +0000
Manifest next update: Tue 03 Mar 2026 14:01:01 +0000
Files and hashes: 1: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl (hash: DnGmT/fu/UmnzMf/zvkGDclt2oyvGZpLcvirvHtN3UI=)
2: zi6BX2pprFhR63Y5lPO5fzP2XJw.roa (hash: k4cOLLcWBtedRh3+dHl3HpPG8a/ZH38IiLNVDqMNrQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:35:ca:e7:47:c8:ac:96:21:50:e7:65:93:4d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Validity
Not Before: Mar 2 14:01:01 2026 GMT
Not After : Mar 3 14:01:01 2026 GMT
Subject: CN=997dc624329eb910d103882b6750f45d62b55832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:4a:be:ab:80:90:20:68:05:0e:93:d5:2f:
07:46:e6:2d:6e:ac:fd:f5:c8:ab:86:e8:ad:7d:8b:
4d:8f:f4:e8:e2:6c:f5:5c:c4:c0:e1:c3:6e:15:58:
90:99:ef:fb:30:9e:c9:3b:b9:cc:ef:24:36:b3:d7:
3e:c9:f6:67:4c:e9:bf:18:cf:c8:01:3e:1d:b6:75:
38:17:60:2d:13:5f:9f:40:8e:f5:f5:97:53:a4:6b:
8e:cb:e8:11:2e:cb:53:4d:d8:12:66:7e:e0:df:3c:
db:54:7d:46:ae:71:d1:bb:58:c3:cf:ac:af:81:18:
06:e3:b4:f6:d1:b0:11:b7:79:33:67:b6:26:76:4e:
1d:99:3b:39:c9:05:c8:10:1d:73:dd:43:d0:ce:65:
1e:32:78:55:ad:ad:c3:16:e0:fb:c4:2c:5e:74:bd:
c5:eb:74:e1:16:62:f3:49:2b:8c:0a:12:22:ba:f9:
e2:5f:5b:ea:06:a2:bf:7e:6a:0f:c3:84:44:ae:38:
93:fc:9a:90:a5:e9:92:88:73:be:be:3d:82:d3:8f:
eb:f2:1e:dc:29:9d:7f:4e:29:03:4c:75:d5:d3:7b:
f7:33:8b:40:62:c5:9e:7f:eb:5c:b5:45:19:78:56:
58:22:7b:bb:9d:66:e2:b3:b9:65:98:11:9b:4b:01:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:C6:24:32:9E:B9:10:D1:03:88:2B:67:50:F4:5D:62:B5:58:32
X509v3 Authority Key Identifier:
keyid:DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fb:7f:b3:8d:b4:d3:07:0a:29:04:5e:58:13:77:4c:26:ab:
31:69:d1:83:de:ea:50:21:1f:f3:40:2c:c9:df:9b:e5:31:ba:
07:b4:15:30:32:88:47:c7:5a:af:86:4e:4b:a7:f5:95:c1:b0:
24:97:e9:6d:82:97:1d:ea:0f:43:b6:88:ee:61:6c:92:1e:cc:
ec:7d:af:04:4c:16:11:ef:5b:dd:6b:41:55:fa:f1:07:bf:95:
ba:4b:43:2d:be:38:bd:60:27:ca:a0:c0:be:83:65:f2:34:4d:
9d:8a:e8:30:93:ab:09:4b:a6:8e:6b:40:44:e3:fc:34:53:30:
a7:a0:0f:f2:29:9b:b6:b6:b3:2e:8e:a1:a5:88:34:14:44:29:
e1:74:67:a9:97:6f:e0:39:6e:be:9d:a2:2c:d8:f6:dd:13:b2:
c8:5b:3d:48:5d:a2:db:ab:05:c7:0b:eb:e2:ce:f8:6b:7e:ca:
0c:af:fb:22:5a:9f:3a:e7:00:29:7b:a2:c3:02:83:a3:40:92:
72:05:3d:ea:75:32:51:62:31:f8:54:9b:e7:3e:c6:23:fd:9e:
a5:41:fd:5b:a0:b7:af:cd:75:3f:9f:be:d9:a1:a0:b9:d2:82:
3f:ba:c9:65:68:af:45:7b:69:fe:c1:da:16:af:59:df:70:df:
ae:6f:87:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:26 2026 by rpki-client