Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
File: 3ZapfPzU67oF9hUkAJ8sFco0P8U.mft (raw, json)
Hash identifier: DdzPTs40/2diwDQpvjzQJC65BLp43pcqaluCrXBw7RE=
Subject key identifier: 4E:AD:D2:EB:9A:E6:E1:E0:48:BA:29:21:7B:F5:7A:C5:FC:07:DC:3B
Authority key identifier: DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5
Certificate issuer: /CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
Certificate serial: 019D9F9BE257B13D5D8459D8ECB98FBB2A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
Manifest number: 0122
Signing time: Sat 18 Apr 2026 08:01:26 +0000
Manifest this update: Sat 18 Apr 2026 08:01:26 +0000
Manifest next update: Sun 19 Apr 2026 08:01:26 +0000
Files and hashes: 1: 1-mqYp0wbZd3hGyth9JUHZNjDZwI.roa (hash: r3TYLoZQHdWU8RlOoG6zBAduGAPckAKmqupyfEfHJFg=)
2: 3ZapfPzU67oF9hUkAJ8sFco0P8U.crl (hash: /QVn7v/7q6PYXqljLdnq6po2wGBhdbDgKkocJqbF6is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9f:9b:e2:57:b1:3d:5d:84:59:d8:ec:b9:8f:bb:2a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
Validity
Not Before: Apr 18 08:01:26 2026 GMT
Not After : Apr 19 08:01:26 2026 GMT
Subject: CN=4eadd2eb9ae6e1e048ba29217bf57ac5fc07dc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:6a:61:65:fc:8d:61:d1:94:d6:ad:d3:56:
ce:2c:4c:09:10:e8:2a:ae:c5:c0:49:ac:f1:f2:34:
23:4f:89:34:bb:d9:98:1c:90:0c:d4:49:7c:f5:bb:
fd:25:66:d2:73:54:3d:14:47:c7:ba:de:6b:66:3e:
3d:e6:23:00:35:20:cf:f6:fd:e0:72:20:4a:04:ad:
ec:2d:e0:b8:1e:61:9b:e4:b7:f3:ee:88:cd:a2:54:
b0:bd:f0:95:bc:4f:51:a7:71:51:12:b9:e5:14:ea:
63:95:21:75:63:c5:a2:06:28:22:ec:34:38:da:2d:
e9:fa:9d:56:96:d0:5a:4d:ad:a3:cf:5e:2a:ca:a3:
29:a2:3c:b4:ec:2f:7c:70:54:88:15:ce:bd:d2:e7:
f7:5b:b9:6c:48:8f:0b:11:38:1a:cd:9b:2a:c2:54:
87:14:a3:dd:58:78:e8:54:fb:eb:05:70:94:c5:4e:
ee:c6:ca:75:14:8c:c5:6d:9f:1b:8a:33:43:88:5d:
fa:dd:fd:8f:9d:a6:d4:42:8a:40:38:ee:c0:12:7e:
62:35:af:f2:54:b9:84:e0:92:58:d9:f8:3b:d8:b2:
b6:9b:fd:73:b1:93:15:14:db:0e:13:f3:0b:7d:83:
8e:c1:3a:22:13:d9:c4:99:3f:9f:d8:b0:33:80:63:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AD:D2:EB:9A:E6:E1:E0:48:BA:29:21:7B:F5:7A:C5:FC:07:DC:3B
X509v3 Authority Key Identifier:
keyid:DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5a:46:b9:5a:9e:b2:24:ce:90:36:c3:82:ec:41:34:cc:14:
a5:d1:30:d5:00:8d:02:40:45:20:56:77:ac:8a:d8:3d:0b:4e:
6a:52:8f:ac:7e:b0:8a:2b:92:2a:7a:46:c2:b4:79:6f:bd:7a:
6c:e0:05:b1:56:f0:7d:74:e1:e2:72:59:f9:94:63:b9:f8:0a:
8e:98:0d:5b:76:db:3f:ee:d6:40:54:5a:7b:2b:06:6c:8b:5c:
7f:54:0b:0d:88:fd:c3:16:79:51:94:0d:e1:be:cb:78:f5:ff:
47:56:12:82:7b:ee:5e:0d:ec:80:6f:36:32:a6:91:a8:3e:88:
e7:be:e5:9f:1a:b1:a6:03:3d:e6:62:8d:91:56:7b:b7:e0:f7:
b8:0f:86:1f:08:4a:5d:44:ae:ed:61:ac:81:20:e2:6a:11:06:
1a:c6:bf:ee:f5:48:56:3a:b9:70:91:a9:2f:1a:df:9d:44:ab:
51:e8:e1:21:eb:1b:ba:6b:88:60:93:20:0f:e4:ad:b3:6d:26:
cb:15:d2:39:73:49:69:46:6d:49:16:d2:a0:dd:ed:66:3e:ac:
d1:63:07:f5:d1:df:3a:e7:e5:dc:4d:47:d5:7e:57:8d:f6:cd:
9b:12:55:52:ae:9c:3f:20:94:90:71:9d:d1:a9:c2:e3:e4:13:
0d:88:a4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:28:08 2026 by rpki-client