Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier: o8icSregBfklbnDwC5xJipk5vG12+xIV/mhKjwpUdWI=
Subject key identifier: 73:C7:7C:0F:D6:14:19:72:BB:CA:3A:ED:90:81:42:57:F6:64:01:07
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial: 01A0DCBC095DD406870AEC5D4870E34813C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number: 0EDC
Signing time: Sat 26 Sep 2026 08:01:45 +0000
Manifest this update: Sat 26 Sep 2026 08:01:45 +0000
Manifest next update: Sun 27 Sep 2026 08:01:45 +0000
Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: KSdDCgLdWlYIoq95CEqv2kCC4qsq+HVj6CFGG9SoDNQ=)
2: N905L8-7YxH2DGuKT4TqyLtH9hg.roa (hash: 8pMSMPosiUUfB8gsw6Yi/Z3lOaNd4MGcuLKeWx/SoOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bc:09:5d:d4:06:87:0a:ec:5d:48:70:e3:48:13:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Validity
Not Before: Sep 26 08:01:45 2026 GMT
Not After : Sep 27 08:01:45 2026 GMT
Subject: CN=73c77c0fd6141972bbca3aed90814257f6640107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:72:fe:5d:f4:4d:6b:24:01:c6:ea:c9:ff:
83:b1:27:c8:d0:64:34:28:82:91:2f:33:4e:98:c3:
05:0e:89:d9:5f:ff:2b:07:e9:bc:fe:12:30:6e:1d:
36:71:ac:5c:bb:ff:b0:27:64:60:26:7b:79:a8:32:
ad:1b:82:9b:85:e8:06:8b:55:c7:ac:ce:9f:0c:4f:
f9:09:23:1a:c8:7f:02:08:a0:f0:07:62:5e:04:b9:
2d:d5:7d:e4:7a:e0:ce:a6:b7:19:98:01:ba:ab:65:
76:7f:ea:cb:38:a0:bf:af:80:0c:3a:a9:c0:6e:0d:
3f:8f:31:12:37:0f:fc:e7:70:bf:9b:1e:91:08:18:
6f:18:e8:df:48:8f:1f:9e:07:0e:8e:9c:c8:47:4c:
9c:4a:e9:87:b8:4d:ad:c3:d9:1a:b6:9a:54:9d:05:
14:62:26:01:64:80:20:06:ea:d0:1c:80:12:2e:07:
57:b7:a9:b5:cf:de:71:2c:40:27:0c:d7:30:6f:51:
d7:c1:f2:04:3a:d8:ef:25:00:f6:2d:d5:f9:46:7f:
42:ea:f0:b6:5c:6f:f5:08:5b:a6:12:36:57:41:1b:
4f:4d:a2:e6:22:f2:91:f0:9f:37:06:10:cb:95:73:
9a:a8:16:67:82:41:9f:18:f1:ac:6a:ac:4f:91:cd:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C7:7C:0F:D6:14:19:72:BB:CA:3A:ED:90:81:42:57:F6:64:01:07
X509v3 Authority Key Identifier:
keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:75:99:98:15:52:6b:ce:23:ce:9c:9b:03:00:a6:9a:48:6f:
32:e7:96:77:61:8b:f1:2c:f9:89:dc:5c:5b:ad:c9:6e:2f:31:
0c:0c:10:a5:2a:a7:f8:1e:7e:78:f8:e4:9d:ea:e1:b4:94:c4:
76:e6:4d:6f:17:65:24:84:47:50:54:74:53:52:4c:14:bd:b4:
65:f8:63:37:ac:23:ac:8b:18:c9:1a:d5:58:5a:dd:a8:e6:c8:
93:15:c7:6e:ba:2b:3e:62:e1:1c:bb:e5:20:fa:f7:27:a0:89:
48:45:da:3c:63:a7:7a:b0:70:47:b9:5f:a5:00:7e:23:1c:7f:
4f:f1:e2:f9:78:fd:ad:fb:b7:1b:d9:50:fa:d9:86:eb:e2:20:
59:58:8e:d9:13:a0:a0:e5:19:5e:bf:2b:a6:3e:3e:28:fe:5b:
9a:06:44:fc:5e:1a:7d:55:b5:d2:73:65:55:47:41:21:f7:af:
5d:e0:4d:06:0d:ce:4d:90:20:a7:7b:40:d1:77:98:97:6b:1b:
53:84:9d:a9:df:c5:79:5b:59:8a:d9:99:51:68:ed:af:40:b6:
b6:60:24:39:c7:d5:50:25:b8:95:69:54:20:a9:55:ff:4c:9f:
db:9a:e2:a7:26:85:54:bb:d8:fc:9b:a8:92:7e:22:92:f8:ab:
17:af:7e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:08:35 2026 by rpki-client