Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier: hRKE+ejEeurN40f83eZmE7GsQY+W4DnbKrnTbOul63s=
Subject key identifier: 3F:7B:86:89:BA:57:9D:2B:64:EE:E8:F8:E8:AE:08:7B:1D:91:72:FA
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial: 019D9A753CDD89D2B4B2FE9761C3C4FD6EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number: 0D2C
Signing time: Fri 17 Apr 2026 08:01:07 +0000
Manifest this update: Fri 17 Apr 2026 08:01:07 +0000
Manifest next update: Sat 18 Apr 2026 08:01:07 +0000
Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: 05Tij48GJVV6Dr2wEIiGqE2qif/ckMH3oRhzoqMi2tI=)
2: N905L8-7YxH2DGuKT4TqyLtH9hg.roa (hash: 8pMSMPosiUUfB8gsw6Yi/Z3lOaNd4MGcuLKeWx/SoOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:3c:dd:89:d2:b4:b2:fe:97:61:c3:c4:fd:6e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Validity
Not Before: Apr 17 08:01:07 2026 GMT
Not After : Apr 18 08:01:07 2026 GMT
Subject: CN=3f7b8689ba579d2b64eee8f8e8ae087b1d9172fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:1a:52:a2:49:30:7d:0a:fb:a6:a5:fe:61:
3e:55:03:82:a5:0c:45:c0:d4:f2:da:ae:9b:f5:db:
78:f8:3c:bf:f9:db:41:2f:a0:66:0e:55:8f:3e:2d:
6c:fe:bc:ab:d8:84:34:2d:6f:3e:e9:ab:02:9c:e2:
1b:79:c5:3f:1f:26:d7:2d:b0:27:f8:d8:ea:ab:2a:
8d:2f:1c:dd:19:4f:fb:41:07:97:1e:a1:97:e4:e6:
65:c0:9f:92:b1:ae:19:88:76:7e:2a:2f:4e:1b:b9:
58:db:07:42:06:b0:2c:f6:02:3d:62:b4:0f:f0:75:
b2:f5:9f:0c:d2:80:b3:fd:43:c9:4a:d0:6a:42:12:
9f:84:84:3d:fb:19:5f:bd:20:f1:d8:13:e8:a2:d6:
1b:96:06:12:fe:cd:af:e0:3a:d1:95:fb:90:58:f3:
f6:a8:2c:69:80:a3:bd:17:e9:75:3f:8e:66:55:08:
79:a3:24:82:3d:4f:d6:90:69:9e:bf:4e:51:bf:c9:
62:66:07:8f:fa:d1:42:c2:0d:20:ce:46:84:c4:d2:
e0:2b:10:77:a8:c8:bd:8e:70:7c:0c:a8:e1:89:5c:
42:83:62:7f:8c:ac:5d:de:ae:9f:59:f3:3d:fa:d0:
f5:01:8e:b6:ab:91:f3:14:46:6b:f0:cf:af:98:64:
14:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7B:86:89:BA:57:9D:2B:64:EE:E8:F8:E8:AE:08:7B:1D:91:72:FA
X509v3 Authority Key Identifier:
keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:73:72:e2:59:b5:4a:d1:37:54:8b:3c:ee:5e:ce:77:81:cf:
77:c9:87:e5:45:a0:10:91:e0:71:69:86:80:d4:55:e8:ba:8d:
f5:f7:86:0b:1d:b2:59:ef:8a:26:99:42:4e:7a:85:df:71:08:
35:05:b5:cc:5b:19:31:88:02:02:1f:9d:3e:d5:06:67:6e:ec:
e1:dd:17:fa:88:fc:c5:a4:71:84:b1:91:fd:6f:4d:ff:38:1b:
d7:84:09:b7:be:74:91:80:47:42:11:c0:fc:39:87:b9:70:a4:
04:7d:ff:d4:ff:93:60:38:2c:0e:07:a1:72:6a:00:47:ef:eb:
8a:03:c4:f8:1f:a4:a4:21:b8:31:ce:78:38:84:8e:73:94:18:
bf:24:ab:2c:9f:6e:b8:5e:03:e1:e8:b1:4f:16:5a:d2:b7:63:
cc:a1:7e:3b:76:3f:2d:90:81:6f:28:2a:12:a1:c7:66:4b:3c:
3b:52:d0:3e:0c:c5:f4:82:f2:56:47:60:0d:22:43:0a:74:21:
c1:fa:0c:b6:48:f0:80:f6:9e:7e:58:4b:87:ca:c0:27:33:bb:
68:62:72:45:57:04:54:97:6f:89:c2:a9:61:70:be:e8:9a:53:
54:45:c5:58:58:24:b5:32:d8:21:04:27:a3:4f:73:b2:35:37:
7d:a0:81:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:25 2026 by rpki-client