Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier: 5MGHDJOXRxG+339xmT7LH6FSClurEZ9MIUWsJ8lwc2M=
Subject key identifier: EE:20:57:C9:C5:51:37:92:0D:94:E8:71:DF:7B:B6:FF:00:8E:BF:51
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial: 019FA9AC2A982092B70DB59FB9BABFDC8325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number: 0E3D
Signing time: Tue 28 Jul 2026 17:01:00 +0000
Manifest this update: Tue 28 Jul 2026 17:01:00 +0000
Manifest next update: Wed 29 Jul 2026 17:01:00 +0000
Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: HRBDQwITwRIzVSzY74Xa/R6uCDyJnBY8RYHd3cKGkmo=)
2: N905L8-7YxH2DGuKT4TqyLtH9hg.roa (hash: 8pMSMPosiUUfB8gsw6Yi/Z3lOaNd4MGcuLKeWx/SoOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:2a:98:20:92:b7:0d:b5:9f:b9:ba:bf:dc:83:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Validity
Not Before: Jul 28 17:01:00 2026 GMT
Not After : Jul 29 17:01:00 2026 GMT
Subject: CN=ee2057c9c55137920d94e871df7bb6ff008ebf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:a4:ac:d7:51:f9:ab:02:55:e4:79:bd:b4:
9f:a8:84:29:71:25:6e:ee:99:6e:84:9a:e0:6f:55:
b4:ca:cf:f1:5e:18:c0:bc:5b:48:57:40:6d:4d:26:
43:35:20:24:bc:d5:2d:9c:9a:3b:85:64:a5:39:95:
a0:b4:80:b1:84:7c:3a:f4:58:3e:29:1f:e6:63:53:
ae:68:d4:4a:87:64:2e:4c:c1:40:b6:23:06:e9:dd:
e1:41:9e:49:fe:2e:e5:4c:a2:4d:d9:45:e7:d7:73:
b2:6a:4e:e4:40:88:3d:08:a6:33:e7:31:7f:74:46:
d2:c1:19:72:80:a8:b6:53:e8:c8:ea:23:d2:24:6a:
07:71:51:51:22:3f:39:a0:37:1b:63:30:84:22:ff:
50:b0:97:97:90:b6:d8:e2:d6:c3:99:80:d3:81:81:
93:6b:17:78:91:66:34:9f:ba:c5:1e:d9:24:b7:3b:
5c:e0:e1:8e:bb:c8:23:77:aa:ec:1d:3b:b3:a2:73:
79:50:15:d6:f7:64:1f:dc:45:60:1b:a9:c1:50:a0:
df:d1:d7:cf:bb:02:f2:4f:db:00:a0:e3:16:49:30:
d7:2d:f4:c6:c7:20:d5:7c:5b:23:84:8a:47:e4:d7:
d4:76:cd:bb:7c:1b:b4:46:1f:8f:ab:4a:cc:76:fe:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:20:57:C9:C5:51:37:92:0D:94:E8:71:DF:7B:B6:FF:00:8E:BF:51
X509v3 Authority Key Identifier:
keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:02:12:d4:d9:2f:bb:3a:5b:a6:9c:5c:7d:4c:72:92:13:3b:
c4:9d:cb:ae:36:e7:38:bb:aa:0d:bb:e9:db:64:62:a0:e1:9f:
e8:a5:90:33:87:7a:eb:85:97:3a:4f:f4:d8:81:a6:81:57:2e:
dd:be:d8:f1:43:dd:f4:86:91:49:03:e8:1e:69:11:9d:05:c9:
78:56:88:8a:49:f7:b0:c7:72:a6:4e:98:4e:ba:ca:5a:b1:b4:
6e:7d:d6:a2:ad:92:4e:cd:f0:45:68:9c:6b:ae:99:3f:9a:af:
d6:e8:23:22:08:44:d0:4a:ed:5a:90:6f:15:ab:c5:25:3b:fb:
00:36:76:d6:86:a9:32:e0:74:8f:d7:11:50:1a:cc:43:41:d8:
4c:8a:2a:6f:50:fb:68:d7:6c:30:b7:7b:ed:87:78:64:1f:bd:
4f:1d:79:f0:28:ad:9a:4a:cb:6d:57:f9:dd:da:96:9c:ec:0e:
9f:43:8d:17:83:43:9d:d9:48:f9:88:dd:56:6c:1d:3d:55:f2:
59:aa:3d:2f:03:53:5a:37:95:c7:11:bb:fb:fd:1f:cf:40:af:
bd:74:f7:49:a7:9b:f7:a1:6e:da:f3:cf:9e:02:b3:78:77:33:
c3:7c:74:6c:45:ca:89:96:0e:18:3c:58:b3:67:fb:8b:e5:91:
be:7e:50:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:53 2026 by rpki-client