Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
File: 3ZapfPzU67oF9hUkAJ8sFco0P8U.mft (raw, json)
Hash identifier: x7dNgogjc4F4vrilmgu1X5k2zBOv2bGmJpwC3/dUNWs=
Subject key identifier: 0F:95:43:B8:DE:51:86:58:4E:B2:07:BC:97:DB:7F:86:DA:ED:F2:56
Authority key identifier: DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5
Certificate issuer: /CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
Certificate serial: 019FAAF5B93262CEC07D3F99B142F1DD19C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
Manifest number: 0231
Signing time: Tue 28 Jul 2026 23:00:58 +0000
Manifest this update: Tue 28 Jul 2026 23:00:58 +0000
Manifest next update: Wed 29 Jul 2026 23:00:58 +0000
Files and hashes: 1: 1-mqYp0wbZd3hGyth9JUHZNjDZwI.roa (hash: r3TYLoZQHdWU8RlOoG6zBAduGAPckAKmqupyfEfHJFg=)
2: 3ZapfPzU67oF9hUkAJ8sFco0P8U.crl (hash: Vppjqm8Ryw87xBx8vUHod7Ac6+YvoadOkhNxz9GSZNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:b9:32:62:ce:c0:7d:3f:99:b1:42:f1:dd:19:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
Validity
Not Before: Jul 28 23:00:58 2026 GMT
Not After : Jul 29 23:00:58 2026 GMT
Subject: CN=0f9543b8de5186584eb207bc97db7f86daedf256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:b6:3d:e2:95:0b:08:dc:b0:cb:7a:35:a7:
71:a9:52:7d:c7:74:66:fe:fd:05:2c:8b:05:57:c8:
a1:92:d5:39:a8:ad:d6:d6:51:9c:53:7e:6e:e7:cf:
41:e6:64:18:6e:2e:9f:3a:af:f9:0a:c7:e4:62:47:
5b:13:87:af:23:c8:0a:60:a1:95:4c:e6:9f:ab:bb:
da:a5:c6:e5:c7:b1:a7:e8:6a:c0:5b:55:aa:f0:94:
ff:e3:1e:3d:b0:a9:25:62:61:f7:f5:d6:47:8c:82:
7c:11:03:3b:85:d6:cf:e5:87:82:79:09:7e:40:74:
e7:12:b3:62:16:98:6c:9c:e8:31:f0:2e:c2:72:34:
37:ed:a3:bf:dd:5d:99:b0:ea:8c:4a:b0:90:89:54:
67:04:1c:f7:93:44:01:1b:1f:b5:06:1f:e0:14:38:
75:d6:15:10:51:8a:8e:33:0f:3a:2d:a2:e5:17:ad:
c1:1c:72:3c:24:11:88:d2:83:5d:2d:40:2a:a4:f2:
4a:24:34:52:99:3c:ae:c9:c2:b8:2f:4b:c9:ac:55:
29:49:b1:51:a5:18:44:35:67:ba:62:6e:3a:12:92:
74:99:53:6b:a8:28:ce:d2:c0:76:d2:9d:45:da:85:
71:36:07:08:8b:c8:7a:0d:e6:04:8b:4f:11:f3:21:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:95:43:B8:DE:51:86:58:4E:B2:07:BC:97:DB:7F:86:DA:ED:F2:56
X509v3 Authority Key Identifier:
keyid:DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e6:7c:d7:cf:8d:0f:ba:55:63:93:5f:4d:8f:fd:cc:55:94:
53:53:6a:d7:f8:09:ba:ea:fb:8b:cc:c8:7e:f4:7f:4d:cf:da:
9d:1c:56:fe:b2:8d:61:77:41:61:75:88:b6:e7:70:8f:ed:55:
fd:ea:eb:b8:e3:a3:55:70:b6:bd:7d:02:d0:3b:70:51:fd:05:
cb:ce:d9:fe:3e:4b:6b:a7:13:66:c1:56:f4:45:b0:e9:09:49:
81:55:77:cc:38:d7:6d:27:d1:bc:72:d1:bd:86:7c:42:37:a9:
d8:00:44:36:fb:55:cd:f9:d2:21:f3:07:b2:a4:9c:17:e4:02:
ab:e7:c0:08:c9:17:d0:bb:24:80:05:59:78:3b:0f:e3:47:f5:
b7:c1:51:b2:18:3a:97:9f:c6:cb:eb:e8:ee:7c:18:91:41:4e:
b1:38:0f:21:c3:11:4c:34:aa:3c:c5:ef:f2:52:b4:b8:7a:7a:
9b:9b:0b:4d:23:fc:93:55:d9:19:7a:7a:89:5b:57:a6:63:f0:
29:c8:af:ef:43:e8:a8:3e:f9:4d:0b:aa:ab:54:3a:9e:da:f8:
d6:d0:77:7f:7c:2a:cc:9e:15:ea:01:3a:aa:1d:14:58:38:a2:
2b:f1:8f:3f:52:6a:b1:6d:2f:b1:3e:9d:58:24:14:f9:ce:17:
4c:59:89:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:06:53 2026 by rpki-client