Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: nFix6mWkbhwX8S8KgkxJoPvoD/q1qf9l9MAop3eaFQs=
Subject key identifier: A3:18:2B:1B:25:CA:CE:25:6A:4E:00:68:2A:AA:F8:A5:EE:45:5F:FF
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 01A0D8A81D13C2C101BC03B30074E2875552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 13:01:31 +0000
Manifest this update: Fri 25 Sep 2026 13:01:31 +0000
Manifest next update: Sat 26 Sep 2026 13:01:31 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: Dod/T4QQ2EqJbCSaBscpIuggZpxyfamsxpAVr+VI/YI=)
2: ZpkUGalQzjbOCY8XhdJNlnimnsg.roa (hash: MXToSyiqqbrIQ6LzLNHLxYBkJdAsscwP6hbYfaiM+Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:1d:13:c2:c1:01:bc:03:b3:00:74:e2:87:55:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Sep 25 13:01:31 2026 GMT
Not After : Sep 26 13:01:31 2026 GMT
Subject: CN=a3182b1b25cace256a4e00682aaaf8a5ee455fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:db:8f:27:4c:c9:cd:29:a4:21:79:35:ce:
d2:e5:cd:5e:ff:01:38:71:ed:2d:83:45:4f:48:25:
8e:5e:8e:4e:1a:58:86:5b:60:1b:91:08:4e:13:1e:
b5:3e:d3:7e:44:84:c6:15:30:6d:37:95:75:d9:6a:
44:be:81:3f:de:47:b4:49:59:49:7d:db:f4:e5:c4:
86:05:af:1a:98:6c:58:f9:ce:2b:9b:ea:c9:fe:2e:
ac:61:14:cb:40:34:61:57:55:09:34:e3:a8:aa:1e:
ff:58:0b:39:d3:1b:2d:18:cf:8b:3c:b5:d9:1b:19:
ff:68:42:7f:9c:fc:ea:73:f0:b1:e9:32:60:f3:48:
4e:29:3f:0e:35:1c:76:cc:26:74:be:ed:10:35:d0:
59:3b:a9:14:f8:42:e2:b7:c6:fe:97:84:e7:b2:a9:
0d:8b:e4:f8:6d:1b:e0:b4:e4:7b:e4:2d:ca:49:dd:
8a:b2:99:d9:54:cf:ce:d1:1e:af:c9:c0:01:8b:e5:
61:a8:e3:81:72:64:59:b6:91:d3:f4:05:24:11:28:
eb:8c:25:3c:34:4f:53:4f:bd:71:a6:87:5c:c2:92:
f0:83:79:20:6d:70:63:78:78:12:be:52:93:80:65:
7d:eb:46:b7:1f:6c:14:40:5f:e6:da:26:f4:ee:ed:
d4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:18:2B:1B:25:CA:CE:25:6A:4E:00:68:2A:AA:F8:A5:EE:45:5F:FF
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:76:1a:d5:0c:06:3c:86:17:03:6d:b4:4c:3d:e5:14:eb:a7:
68:6a:e0:e9:c0:f6:df:cf:6a:9e:90:a6:f1:4b:e8:e6:54:d8:
a9:20:6d:b1:f0:25:a7:4a:f5:25:ba:d6:ce:57:31:4f:17:d2:
e0:cb:4e:45:28:c1:f3:9a:b7:0e:50:bb:37:c0:45:00:2a:e0:
ae:31:4f:8a:ae:68:e0:5d:b1:e4:e7:d8:64:37:09:66:77:b4:
2e:53:35:76:68:42:d2:b5:45:fa:7a:75:6e:9d:07:34:a2:4d:
23:91:d5:42:ed:82:7b:9b:97:c9:82:9b:70:2a:fa:a2:a6:1f:
36:b8:f0:5b:97:c7:35:c3:99:48:e1:55:75:c1:1a:6d:d1:46:
c7:7e:d1:af:b5:b3:50:b3:84:af:3a:22:07:5e:f6:5f:78:3d:
4c:2c:ad:73:d8:bb:be:24:ea:20:a8:4e:fc:3e:46:2a:af:2b:
34:13:54:bf:98:95:b1:a9:a6:f8:f3:2f:57:6b:48:dd:de:3a:
ec:e2:a0:b1:f4:42:da:6a:59:a2:01:83:a3:1f:65:94:28:b6:
c1:c1:f7:3c:b5:db:2f:7a:9e:70:20:f0:fa:1c:e5:99:76:e3:
a9:a7:98:ef:94:03:ff:9a:fe:68:0f:1b:a6:93:eb:10:c2:2c:
de:4b:21:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:26:12 2026 by rpki-client