Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier: +GIcR/knTjlTZZFqx4UMJZkSaJMrUZXIPD+bM1kE3mE=
Subject key identifier: 5C:2F:20:25:06:BD:CB:7B:4C:1B:57:69:ED:DF:6C:6E:04:72:37:25
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial: 019CAAFD64FA7824E2AB2CBCDDAC8303B76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number: 0CB0
Signing time: Sun 01 Mar 2026 20:00:58 +0000
Manifest this update: Sun 01 Mar 2026 20:00:58 +0000
Manifest next update: Mon 02 Mar 2026 20:00:58 +0000
Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: 1BvElu2cWyf5KQAkg1HS2HbiOIXXRuJOMnWoqP5W16k=)
2: N905L8-7YxH2DGuKT4TqyLtH9hg.roa (hash: 8pMSMPosiUUfB8gsw6Yi/Z3lOaNd4MGcuLKeWx/SoOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:64:fa:78:24:e2:ab:2c:bc:dd:ac:83:03:b7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Validity
Not Before: Mar 1 20:00:58 2026 GMT
Not After : Mar 2 20:00:58 2026 GMT
Subject: CN=5c2f202506bdcb7b4c1b5769eddf6c6e04723725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:73:9b:da:48:15:de:7d:1d:38:b5:8c:23:
24:52:45:65:13:ae:af:e4:22:c2:0b:b2:5c:3f:9b:
43:72:f6:c2:dd:1f:e5:4a:f8:59:87:79:13:04:97:
76:ec:eb:af:bb:fb:87:71:f5:54:3e:1e:2b:14:a4:
95:d7:07:e4:b2:24:c6:16:e9:82:59:d3:cc:30:01:
9f:b6:14:1b:dc:54:6c:d0:cc:99:ec:a1:a4:6f:b3:
e6:d3:92:a1:79:37:96:7e:ad:f0:49:9e:72:53:1f:
26:8c:5c:a3:15:b8:1b:43:d1:3f:28:7b:c0:fd:98:
01:55:2a:c5:0a:6e:0d:14:a9:5c:46:31:fe:1c:99:
06:a9:d1:8a:da:2d:05:ac:24:42:9d:89:8b:60:3d:
3e:86:83:30:50:1b:fe:1a:51:98:60:d2:81:ac:4c:
9d:70:b0:70:89:8d:a0:c3:da:08:28:94:c0:82:48:
93:0f:4f:39:fe:37:4c:39:d7:fd:ad:34:d0:c3:0b:
8e:4a:7c:18:35:73:d8:02:26:bd:86:38:8e:01:2c:
71:aa:44:8b:de:01:e0:bf:70:1d:8f:e2:20:1e:9d:
f5:a5:57:7e:25:a7:de:34:94:b4:98:03:e5:b3:b2:
06:67:76:ea:1c:27:30:a7:ec:f4:79:a6:3a:be:0c:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2F:20:25:06:BD:CB:7B:4C:1B:57:69:ED:DF:6C:6E:04:72:37:25
X509v3 Authority Key Identifier:
keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:97:ba:d3:24:83:fb:0b:50:d7:72:6b:a4:84:6b:55:b9:1f:
62:aa:83:be:fc:b2:07:11:79:22:a7:2a:4c:a5:37:04:d8:01:
73:d1:97:d8:a3:e9:7d:6c:94:65:c7:6c:90:10:5b:a9:d9:c2:
85:cd:d4:57:8d:7b:60:0f:bb:b5:6d:94:96:ee:87:62:43:36:
4f:ed:15:42:1b:40:58:23:d6:a6:1e:39:6c:a6:f8:d9:bb:7a:
6f:ed:8d:11:a7:52:c2:4b:0f:b1:30:aa:cb:4d:d8:a5:c5:64:
3e:2d:d1:df:4a:50:53:ce:05:86:a6:b4:cb:5a:64:51:96:6f:
77:0d:3e:5f:87:11:38:b6:92:2e:ad:96:42:24:68:b1:bb:d2:
ea:0b:55:5a:d4:11:63:3b:35:d0:c0:2e:27:89:bc:95:80:c4:
99:e9:eb:76:7d:2a:ef:fd:2c:2c:58:e9:8d:1f:c7:4f:73:6d:
87:9e:04:61:a9:e5:f6:0e:9d:56:45:7f:b2:6c:f3:18:73:cf:
e4:12:7c:b5:69:fb:c8:1e:92:81:28:c7:ff:ce:a6:30:63:cb:
a4:6c:2d:d6:ed:d1:e2:8e:ef:f8:87:50:a6:d6:ad:4e:dd:e4:
24:db:3c:f1:56:c3:7c:e5:0a:a5:a1:f0:18:f8:f0:f8:46:e0:
08:ae:b0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:11 2026 by rpki-client