Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
File: z3gtKHK556EKkaJ_MHAg2pSESCc.mft (raw, json)
Hash identifier: eJ30V6UeNbc59izqODp1QyxOgSUJ+X+d2/a347cHXs4=
Subject key identifier: ED:05:BF:6C:BD:85:3A:6C:43:8C:8E:A5:FB:F6:B1:29:E1:1E:2F:62
Authority key identifier: CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
Certificate issuer: /CN=cf782d2872b9e7a10a91a27f307020da94844827
Certificate serial: 01A10C94935ADB98E020B97EB7DEF598888F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
Manifest number: E3
Signing time: Mon 05 Oct 2026 15:00:25 +0000
Manifest this update: Mon 05 Oct 2026 15:00:25 +0000
Manifest next update: Tue 06 Oct 2026 15:00:25 +0000
Files and hashes: 1: e1IhMKeMisuXEHcAjWQVgSjjfD0.roa (hash: oQ/Qfz2KLZdeJN7zojygq7vM4Um6kObVX4+hO49cwrc=)
2: z3gtKHK556EKkaJ_MHAg2pSESCc.crl (hash: b/TdMqB0EhPGuKbRvhwkrDfIBP7Ci98fT2KMC0DZTRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:94:93:5a:db:98:e0:20:b9:7e:b7:de:f5:98:88:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf782d2872b9e7a10a91a27f307020da94844827
Validity
Not Before: Oct 5 15:00:25 2026 GMT
Not After : Oct 6 15:00:25 2026 GMT
Subject: CN=ed05bf6cbd853a6c438c8ea5fbf6b129e11e2f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:6c:11:82:83:d8:66:b3:8d:7a:7c:96:69:
51:2e:d6:fe:7d:aa:32:32:37:bc:fb:5a:65:ac:15:
65:e3:42:e0:e8:dc:af:8f:44:32:e7:ba:46:2a:46:
e5:94:c3:03:1e:96:d1:d7:a3:c8:78:3f:1a:a9:c9:
c6:f4:e9:a7:03:f2:98:5f:4d:e2:27:cd:57:f3:46:
f9:53:cb:f3:05:ed:cc:ba:7d:8c:26:79:1f:14:c1:
95:b1:1d:df:cb:58:c7:c5:c6:ce:80:0e:d4:85:e5:
41:41:0a:df:63:ab:5b:d2:8a:a3:db:e4:f6:b8:f9:
4a:7a:1f:7a:23:13:40:3f:07:7b:98:af:27:a7:b0:
ea:27:c3:8a:5d:ef:7e:18:ef:7d:d7:98:15:f1:d4:
99:79:65:87:06:a6:4c:8f:6a:28:88:b4:fe:b7:d5:
5c:00:fc:cb:a2:a5:8b:4d:55:3c:af:0e:73:58:ba:
e0:34:d6:90:c4:63:b0:98:89:a6:bf:69:e7:8b:af:
bb:a5:67:dc:04:96:f6:fb:0b:04:0a:ca:65:3c:99:
a4:e5:33:48:43:5d:c4:73:25:84:56:b4:4f:b6:21:
38:20:f3:cd:a0:19:e9:51:45:f0:4e:78:3a:6d:e6:
4f:99:70:90:f5:22:f9:fb:44:40:8b:3d:e4:f1:57:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:05:BF:6C:BD:85:3A:6C:43:8C:8E:A5:FB:F6:B1:29:E1:1E:2F:62
X509v3 Authority Key Identifier:
keyid:CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0f:e1:ee:dc:88:6f:35:25:e2:1f:84:9f:e9:f2:dc:bd:83:
41:13:fd:e5:f8:ad:ad:bc:ad:f5:af:06:6f:e6:74:51:64:5a:
a1:21:d8:01:69:9b:f5:85:a1:97:63:51:19:28:54:fd:a4:60:
ef:48:d2:be:97:60:a6:c4:f8:1a:58:4a:37:ad:ed:b4:8e:79:
4b:3b:95:7b:eb:88:58:4b:43:4d:c6:16:56:08:fb:90:8f:d0:
92:28:68:b3:c4:8c:92:6d:a6:dd:f5:eb:69:78:7b:57:39:73:
61:6b:a5:ed:02:9b:16:c1:cf:4c:0a:ce:ec:13:3a:08:c7:23:
90:8b:69:61:3c:5f:14:41:9c:75:ac:10:1b:67:51:c8:45:48:
58:57:8a:7f:c7:2f:8f:2b:a8:6b:6f:a5:de:f4:aa:b5:14:3c:
22:37:bc:1c:66:3f:93:07:47:a7:f4:2b:56:c0:86:21:10:48:
db:10:13:cf:65:4d:64:ab:78:09:9a:e8:92:8c:9c:fd:4b:69:
c8:b2:bc:d0:ee:61:5f:c4:12:03:68:8e:d4:78:16:f6:48:a5:
1d:1e:f8:0e:38:c9:a1:31:3f:b1:51:e4:38:fb:b1:a9:52:cd:
dc:e8:85:45:4b:d4:26:66:52:02:8c:08:d8:20:70:ba:5d:4d:
e0:c1:06:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 21:32:10 2026 by rpki-client