Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: ryqQ0rUI8cosbCYn/bc8lTpya4LQSwbRvGl1z2VDi9M=
Subject key identifier: 76:63:C5:C1:A6:5F:16:5F:82:29:F5:08:8B:76:40:D5:8E:86:2D:ED
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 019CAAC723B614ACB56BD340D6E827E4AE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 19:01:43 +0000
Manifest this update: Sun 01 Mar 2026 19:01:43 +0000
Manifest next update: Mon 02 Mar 2026 19:01:43 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: m7yuLEWeEKgL81ZoZFW02tfAaLpN7ZA0kC4X7tr8ssk=)
2: ZpkUGalQzjbOCY8XhdJNlnimnsg.roa (hash: MXToSyiqqbrIQ6LzLNHLxYBkJdAsscwP6hbYfaiM+Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:23:b6:14:ac:b5:6b:d3:40:d6:e8:27:e4:ae:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Mar 1 19:01:43 2026 GMT
Not After : Mar 2 19:01:43 2026 GMT
Subject: CN=7663c5c1a65f165f8229f5088b7640d58e862ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:77:88:95:8c:e7:87:f3:ec:7d:26:c7:53:
4c:f0:85:0b:5f:f0:2c:1a:79:05:b8:53:96:a4:1b:
4c:92:b9:7b:ea:88:1b:ee:0d:77:80:12:5d:3c:fc:
eb:f7:28:27:c7:f1:66:f0:52:9b:63:5e:79:46:d0:
28:23:e2:14:d5:86:29:26:a9:80:cf:d5:05:9b:04:
a2:80:a9:31:09:97:c5:06:9f:50:2a:93:00:96:f2:
80:1f:b0:cf:a9:d3:28:1c:ca:54:99:41:30:dd:a4:
da:a5:23:10:f5:c7:75:04:97:01:c2:d7:f0:29:69:
de:1f:5c:d5:7a:9f:65:0f:f3:5c:8f:c3:9c:07:c3:
ba:2c:ea:97:a3:30:eb:46:cd:d6:9d:fb:cb:2f:3b:
44:99:98:91:62:2f:54:aa:07:e7:f9:47:0f:94:3f:
48:6a:8c:ce:d4:df:27:ad:88:1b:fb:0c:7a:80:df:
a1:88:fd:f4:a6:af:86:38:76:76:96:ff:77:9e:3a:
ff:74:0b:d1:33:ca:1b:6e:7d:f5:d9:c1:9d:32:1b:
e7:ee:b3:bc:cf:4c:36:47:8b:79:49:39:82:70:c2:
90:93:73:ea:9b:72:3f:53:49:53:72:d2:25:9e:9e:
a1:a4:01:bb:31:a6:dc:5d:e9:5c:af:41:c6:cf:d0:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:63:C5:C1:A6:5F:16:5F:82:29:F5:08:8B:76:40:D5:8E:86:2D:ED
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:82:50:af:41:2e:49:00:fc:03:b8:64:11:1b:c0:84:e2:2d:
12:58:eb:39:96:fb:5d:72:7c:67:01:d3:ba:3b:2d:96:1a:7b:
93:80:05:d3:c0:e2:69:78:0c:e8:83:c2:29:c3:b2:a0:66:90:
7a:f9:63:4e:b3:c6:4d:dd:c1:b8:69:68:d8:34:f1:cb:22:2d:
60:f2:70:0f:8e:d9:3e:02:1d:7d:e5:6a:c9:7f:3d:d7:9f:78:
64:0c:f2:6f:4b:2b:90:51:dc:2c:03:90:a7:ef:92:3b:37:bf:
b2:bf:6d:4b:87:aa:69:3a:9f:a8:98:de:69:b7:21:62:98:6f:
e2:b5:0f:7b:1b:f6:ed:da:bc:14:fc:e4:65:98:d0:41:0e:3b:
45:8e:31:92:b8:92:57:d6:f6:2b:91:ed:b7:68:81:77:6b:59:
d8:29:18:0f:21:ed:0c:08:79:17:b4:a0:f4:be:d7:a6:fa:c2:
eb:38:e1:f7:81:1d:98:99:91:e8:79:ae:b6:e7:f3:f6:7c:69:
96:cc:90:9f:f5:4a:fd:de:3a:a3:4b:4a:73:65:3d:81:d5:8a:
55:f6:88:dd:47:ec:59:e7:f9:83:dd:bd:9c:7b:75:1a:60:e5:
6c:48:3b:47:b1:ab:5c:5b:a7:c7:4d:15:29:c6:a0:10:e4:05:
2b:cd:1b:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxyO2FKy1a9NA1ugn5K5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I4MjAwNWZkYmU5NjEwMjBmNzQwYWI0M2M1NTRlNWEz
ODQ1MWYwHhcNMjYwMzAxMTkwMTQzWhcNMjYwMzAyMTkwMTQzWjAzMTEwLwYDVQQD
Eyg3NjYzYzVjMWE2NWYxNjVmODIyOWY1MDg4Yjc2NDBkNThlODYyZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx13iJWM54fz7H0mx1NM8IULX/As
GnkFuFOWpBtMkrl76ogb7g13gBJdPPzr9ygnx/Fm8FKbY155RtAoI+IU1YYpJqmA
z9UFmwSigKkxCZfFBp9QKpMAlvKAH7DPqdMoHMpUmUEw3aTapSMQ9cd1BJcBwtfw
KWneH1zVep9lD/Ncj8OcB8O6LOqXozDrRs3WnfvLLztEmZiRYi9Uqgfn+UcPlD9I
aozO1N8nrYgb+wx6gN+hiP30pq+GOHZ2lv93njr/dAvRM8obbn312cGdMhvn7rO8
z0w2R4t5STmCcMKQk3Pqm3I/U0lTctIlnp6hpAG7MabcXelcr0HGz9AxrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZjxcGmXxZfgin1CIt2QNWOhi3tMB8GA1UdIwQY
MBaAFN87ggBf2+lhAg90CrQ8VU5aOEUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAt
MzdjMTQwOTJlYjI3LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAtMzdjMTQwOTJlYjI3
LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoJQr0Eu
SQD8A7hkERvAhOItEljrOZb7XXJ8ZwHTujstlhp7k4AF08DiaXgM6IPCKcOyoGaQ
evljTrPGTd3BuGlo2DTxyyItYPJwD47ZPgIdfeVqyX891594ZAzyb0srkFHcLAOQ
p++SOze/sr9tS4eqaTqfqJjeabchYphv4rUPexv27dq8FPzkZZjQQQ47RY4xkriS
V9b2K5Htt2iBd2tZ2CkYDyHtDAh5F7Sg9L7XpvrC6zjh94EdmJmR6Hmutufz9nxp
lsyQn/VK/d46o0tKc2U9gdWKVfaI3UfsWef5g929nHt1GmDlbEg7R7GrXFunx00V
KcagEOQFK80bww==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:36 2026 by rpki-client