Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
File: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft (raw, json)
Hash identifier: jmRPqrL5mDXUvEVxEVzam/xpDjudCKtlW1f6PlUmv3s=
Subject key identifier: BB:5A:6F:2F:8B:6C:09:77:BD:55:1E:10:D3:36:C5:06:98:07:CB:D5
Authority key identifier: DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
Certificate issuer: /CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Certificate serial: 019FAB9A35B0FE69819CD2C143593FAAB071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
Manifest number: 03BA
Signing time: Wed 29 Jul 2026 02:00:37 +0000
Manifest this update: Wed 29 Jul 2026 02:00:37 +0000
Manifest next update: Thu 30 Jul 2026 02:00:37 +0000
Files and hashes: 1: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl (hash: lWNWkXur6MipAiNrmYjOrmUJz3baJB2lBP1kH3+72Q4=)
2: zi6BX2pprFhR63Y5lPO5fzP2XJw.roa (hash: k4cOLLcWBtedRh3+dHl3HpPG8a/ZH38IiLNVDqMNrQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:35:b0:fe:69:81:9c:d2:c1:43:59:3f:aa:b0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Validity
Not Before: Jul 29 02:00:37 2026 GMT
Not After : Jul 30 02:00:37 2026 GMT
Subject: CN=bb5a6f2f8b6c0977bd551e10d336c5069807cbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:b7:b9:d3:e1:8e:d4:d8:6e:15:1e:37:40:
f4:db:2e:a2:51:12:fd:e5:1f:7e:8b:3b:44:c6:a0:
46:7e:eb:49:0a:18:c6:bf:fc:c9:2f:a6:6d:d9:fc:
22:55:69:79:a9:c1:91:82:1a:35:78:e0:52:21:e6:
27:a8:0e:95:c1:e5:45:cb:2a:4a:c0:64:84:90:2b:
fa:94:fd:f2:51:79:3f:ff:1b:e3:6e:a7:ab:4b:49:
11:a4:a8:54:9a:6b:50:47:6a:5c:07:7a:c8:15:bc:
c3:1e:78:c5:8a:48:e5:c3:9a:4e:21:ff:5c:2c:08:
74:37:ee:71:c7:a6:df:64:46:50:a6:8d:15:1d:ed:
c7:3b:5b:3d:49:09:40:df:e9:99:58:ca:99:52:ec:
9a:3f:f6:39:fe:75:8b:74:09:ba:98:c8:06:33:b6:
ca:86:03:6f:89:8c:7f:d3:dd:22:ad:43:f4:bf:86:
06:67:1b:db:6c:ca:f4:cc:0d:e6:12:31:1b:d5:b3:
b1:03:b8:4f:50:01:e7:2b:51:5b:71:bc:65:5f:54:
04:df:fe:10:e2:8b:aa:9c:b9:36:9d:e1:29:f6:67:
27:a3:5f:c6:ed:cf:d7:08:58:16:0d:8b:f9:d4:bb:
4a:56:c3:61:b8:91:0b:ac:cb:24:16:51:cf:01:90:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5A:6F:2F:8B:6C:09:77:BD:55:1E:10:D3:36:C5:06:98:07:CB:D5
X509v3 Authority Key Identifier:
keyid:DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:56:a2:fd:f7:f1:1e:a6:32:5e:d9:be:09:12:d8:81:2c:82:
5f:55:2b:07:db:5a:22:b3:57:21:51:23:9e:7d:ef:7a:4d:f1:
f3:e5:16:c8:78:b9:b8:66:1b:2b:67:61:65:f6:ad:c3:a0:29:
b0:1a:43:b1:7d:e5:fd:3e:c8:ee:f0:76:7b:e4:8b:0d:d7:d0:
c3:ae:e4:26:24:9a:67:b8:99:8b:d2:f4:8a:3c:73:3b:fa:76:
11:ea:c3:50:7a:8d:7c:59:45:11:20:cd:00:27:9b:45:34:7c:
4e:53:39:b3:ed:9d:ff:25:6e:f7:de:11:6b:60:dc:1f:20:08:
17:f9:9a:fe:16:1d:e9:5d:88:24:ce:e5:eb:93:99:87:bf:8b:
2f:12:81:69:2c:4d:1f:f2:68:06:91:cb:94:89:c1:e9:1c:40:
4d:4b:62:37:dc:b6:45:5d:1b:37:39:c1:83:d3:0e:87:d4:e4:
4b:fa:b7:41:b4:15:6f:15:d7:c3:1c:ca:3a:7f:3a:7b:24:1f:
12:39:6a:99:59:76:b3:cc:01:57:ea:9f:0d:b8:22:80:8c:25:
c8:26:fe:6f:3f:b1:b4:e9:df:82:f3:be:a9:05:67:b7:84:1f:
47:4f:7e:68:3a:04:65:d2:b7:51:f1:de:a1:d8:5e:31:f2:dd:
9a:bf:68:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:11:44 2026 by rpki-client