Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
File: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft (raw, json)
Hash identifier: 3RRKjCJhNpbmW6AXdKojFGM15AHZ9AJmfaWwIxP/9dc=
Subject key identifier: F0:4F:64:33:63:E4:44:DD:E3:A4:15:5E:29:77:A8:24:19:18:C5:B0
Authority key identifier: DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
Certificate issuer: /CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Certificate serial: 01A0C96B32670D2B2A4ABB8EB970F5DA1E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
Manifest number: 044E
Signing time: Tue 22 Sep 2026 14:00:40 +0000
Manifest this update: Tue 22 Sep 2026 14:00:40 +0000
Manifest next update: Wed 23 Sep 2026 14:00:40 +0000
Files and hashes: 1: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl (hash: Iyiw5VlNpyqUHLTvix4l3nruXDSfmTv8AflWDBUjLUM=)
2: zi6BX2pprFhR63Y5lPO5fzP2XJw.roa (hash: k4cOLLcWBtedRh3+dHl3HpPG8a/ZH38IiLNVDqMNrQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:32:67:0d:2b:2a:4a:bb:8e:b9:70:f5:da:1e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b1d2773a03d317a7703193d2f45429a94ba9f
Validity
Not Before: Sep 22 14:00:40 2026 GMT
Not After : Sep 23 14:00:40 2026 GMT
Subject: CN=f04f643363e444dde3a4155e2977a8241918c5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2a:6b:71:a0:47:3a:b7:8d:62:21:04:9f:b7:
ed:c2:cc:79:69:0d:c5:08:d6:9c:8a:03:e7:ba:20:
f9:7e:ed:dd:87:1f:ab:96:ce:38:3d:ba:4d:77:20:
36:b1:94:81:3a:5f:2d:75:04:9e:88:f9:c5:3a:bf:
ab:5c:3d:13:24:8a:cc:76:68:ee:23:43:bc:ff:a2:
58:84:71:08:74:17:00:10:7f:b7:82:ce:c3:72:b9:
cc:ce:3e:17:a3:2f:30:d3:be:40:ef:01:8c:c3:37:
29:56:97:5e:5a:63:8e:c9:d4:d7:bb:35:61:a1:9e:
97:54:4a:63:19:cb:ef:22:75:be:4b:06:f7:61:32:
c8:a7:c3:67:41:4b:1a:68:2d:70:40:a3:ea:59:a4:
eb:94:b7:d4:7e:6c:c6:51:53:89:8d:34:41:d7:6d:
5c:8c:e4:c2:b4:19:6a:10:10:fb:3e:5f:e1:a1:28:
2c:00:e1:da:fe:c0:ff:40:83:f9:a0:1a:e5:14:33:
cc:13:16:3e:a0:7e:1f:11:83:1b:a0:29:cc:89:59:
37:be:06:2f:bf:e2:54:09:8e:63:97:9c:2e:b5:d4:
15:0b:b1:ef:f0:ba:86:6e:a6:85:2d:db:87:e8:c2:
b1:47:21:77:45:d0:ab:60:c1:c1:b5:9c:c8:f7:8b:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4F:64:33:63:E4:44:DD:E3:A4:15:5E:29:77:A8:24:19:18:C5:B0
X509v3 Authority Key Identifier:
keyid:DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1c:57:06:26:0d:8e:8a:7c:8e:34:c5:3c:77:7e:b1:42:31:
7a:a2:f1:82:0e:d7:8a:cb:0a:c8:bf:80:ea:43:93:1b:09:7f:
d5:e4:00:0f:33:42:3a:2d:89:e8:33:5c:c8:bd:8c:0b:53:ee:
f4:6c:a1:91:7f:2f:48:b0:33:55:7b:11:7c:f1:a6:a2:9f:77:
af:3a:9c:65:3e:93:39:58:07:76:c2:ee:6d:ba:22:ce:ce:70:
24:2d:7b:47:b9:a8:89:ea:f1:3a:82:77:8d:8e:6f:2d:e6:21:
f8:c2:c9:9f:78:95:df:4e:bb:ff:8f:75:9e:8e:14:22:7d:c4:
62:2f:94:ae:7e:c0:e3:1d:25:de:f6:14:f5:e0:ee:f8:c6:b9:
d4:91:a6:de:66:26:74:f5:a8:b5:e4:43:b4:cc:83:34:a6:20:
8d:5e:a2:85:8a:6b:d5:5b:11:ad:06:7c:0f:49:5a:9b:29:9f:
61:57:64:60:54:da:88:18:a4:cf:da:e8:cc:f1:95:12:f7:5f:
4b:e7:82:5d:4d:f3:3f:df:8b:14:76:6d:c3:06:e4:9f:5a:ea:
d9:2a:cf:99:24:91:be:fd:f7:c7:6e:af:ed:5f:7b:dc:a7:1e:
49:41:d7:95:be:f0:ab:de:ce:ee:27:5f:6f:f8:0c:0e:8a:49:
f4:b9:2a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:49:36 2026 by rpki-client