Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: fOxve8uyEe7oHsenDyyU5JvudFlt31vnZmGH95YZuU8=
Subject key identifier: 12:42:E3:82:42:77:65:0D:23:35:34:C7:58:82:5F:3C:6C:1E:76:68
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 019EBFC8F367B224F78E29966DE6F329E7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 07:01:18 +0000
Manifest this update: Sat 13 Jun 2026 07:01:18 +0000
Manifest next update: Sun 14 Jun 2026 07:01:18 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: bHsjERXjHWeUULb468K/pllxneJ5djipSPi4Xp6+eGo=)
2: ZpkUGalQzjbOCY8XhdJNlnimnsg.roa (hash: MXToSyiqqbrIQ6LzLNHLxYBkJdAsscwP6hbYfaiM+Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:f3:67:b2:24:f7:8e:29:96:6d:e6:f3:29:e7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Jun 13 07:01:18 2026 GMT
Not After : Jun 14 07:01:18 2026 GMT
Subject: CN=1242e3824277650d233534c758825f3c6c1e7668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:50:2f:41:62:dd:05:4c:e8:54:39:4a:b4:
5f:af:7f:c0:5a:e3:1b:8c:a2:08:c8:4e:b7:69:da:
16:de:ca:9b:b4:3c:85:3c:df:c7:2a:4b:b2:86:90:
6e:ac:70:29:4f:16:b2:ad:20:20:7e:2b:17:02:e4:
ae:04:aa:81:9b:36:b3:b7:ba:3f:01:bb:41:43:10:
ea:81:0b:8a:fa:35:84:1b:a4:b0:80:c9:38:75:ae:
1e:36:f3:ca:22:4a:99:e8:b9:29:1a:5e:72:bf:59:
5d:ca:0e:58:05:2b:13:a0:ad:88:21:1f:5a:d0:d1:
f0:ee:dd:48:57:ac:db:2e:a1:1f:db:23:82:c3:b9:
26:d4:7a:36:2b:c8:56:ee:84:15:29:0c:b8:6a:6d:
ba:57:42:ad:58:ab:5e:0d:00:d2:c6:e1:61:14:af:
0f:5d:e7:e7:ff:d3:6a:7d:28:44:c4:db:d8:de:e8:
b7:df:ec:41:99:83:8e:7d:df:cd:b2:e7:23:51:f4:
ca:c7:e6:19:d0:f2:1b:e7:d9:3b:b6:00:e4:7c:68:
09:c6:2c:4e:bd:3a:6f:0e:82:38:98:2c:13:f8:66:
89:9f:d5:e7:a0:6a:c7:9b:b1:11:18:1f:c9:47:3e:
a4:1f:29:fe:e5:b1:dc:13:f4:47:a4:fc:83:78:cf:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:42:E3:82:42:77:65:0D:23:35:34:C7:58:82:5F:3C:6C:1E:76:68
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5b:87:4d:c7:43:79:f3:a3:c2:d2:36:91:3f:e7:99:f1:79:
79:98:49:e4:59:4b:bf:da:d3:da:67:f8:53:c0:70:8a:7d:7f:
19:82:9a:1c:a3:0f:fe:79:44:f0:7b:04:99:4b:37:46:7d:cc:
0d:4c:e7:ce:3a:67:27:72:c9:9e:96:7e:99:9d:4e:7d:c0:65:
09:14:f1:81:93:fc:20:d2:f8:b1:94:0a:28:20:f9:df:06:7a:
72:a6:da:5b:cb:be:48:3e:6f:7f:1e:28:4a:bd:57:2c:5e:6d:
ae:6d:65:9e:4f:49:eb:35:d8:c8:09:d0:9d:93:4b:78:d6:3f:
17:28:30:7b:ab:bb:4e:a0:b6:d3:35:6f:33:df:a6:8c:0a:da:
3e:d1:f3:d4:f9:b9:a6:de:a0:08:47:2c:8c:18:c4:fd:f7:5f:
26:19:0e:dc:e1:1e:78:a0:46:37:23:e7:3a:31:8f:6c:c4:c7:
61:26:51:a1:93:af:cf:b3:e3:0d:7c:09:59:9c:ed:d1:35:9c:
72:9c:4c:d9:46:84:f1:44:82:ea:c2:5e:6b:08:9f:03:86:32:
fe:da:a9:79:c6:0c:d5:0d:42:9c:39:e9:61:29:1e:72:35:75:
06:1f:4d:bd:a8:13:7d:2a:dc:77:58:11:e0:e2:42:48:53:5c:
d9:82:b6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:42:02 2026 by rpki-client