Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: 3vtmA3WVym6rve5v5F2B2ceP4HDLMqxzS7spZDGBYo0=
Subject key identifier: 32:5C:D2:74:FC:24:3A:B2:B5:B1:B6:73:6E:10:A4:7D:A2:6B:48:5C
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 01A134ECB141334B4BBEF06CE25CC8EDC5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 1A4C
Signing time: Tue 13 Oct 2026 11:01:29 +0000
Manifest this update: Tue 13 Oct 2026 11:01:29 +0000
Manifest next update: Wed 14 Oct 2026 11:01:29 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: CLcqcpXbcHi2T2eRf8bYxTXvfTbBQfQC6ntGEX5bYk4=)
2: 66xj8nJZJDodIpTEFYfIO2lI0pg.roa (hash: cnTcAyScXe7FLebnmc+X1hADlgaMe8Kz4UH8Ho7fCks=)
3: YC7q8GupNzZHSH1s2Vu8MGm0c2Y.roa (hash: TnzlosbHJ70+TNYLJ5XWl/2V3tal0xrZM8UfJyyEdK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:ec:b1:41:33:4b:4b:be:f0:6c:e2:5c:c8:ed:c5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Oct 13 11:01:29 2026 GMT
Not After : Oct 14 11:01:29 2026 GMT
Subject: CN=325cd274fc243ab2b5b1b6736e10a47da26b485c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a1:d9:6c:56:ff:9e:df:0a:1a:88:a6:71:5e:
32:64:6a:fd:93:a2:d2:3c:75:78:b8:b3:a7:ee:25:
fd:3b:75:8d:66:c2:30:39:22:e4:eb:f3:d8:5e:d5:
79:57:6e:de:90:31:17:32:18:82:00:1b:2b:45:4e:
8f:f7:40:2a:67:9a:5b:b8:7a:69:71:f7:81:76:72:
8d:e8:ee:3e:7d:f8:24:96:fc:97:2f:5b:21:fd:8e:
01:de:21:f4:a1:23:72:2b:ba:2f:8b:97:27:64:70:
ce:15:85:af:a2:ff:93:43:bd:d5:ab:4b:44:29:82:
98:c3:a1:53:04:a4:a1:89:1f:53:8c:1a:2d:af:b2:
51:57:95:7f:47:8e:0c:62:2d:3f:2e:c8:3c:47:c2:
a7:0c:73:c8:ab:59:09:52:58:c3:ac:28:db:6f:a7:
75:81:5c:63:07:0e:93:ec:39:9a:e0:6b:63:c2:bd:
25:51:01:cd:12:7f:5c:c7:70:f3:cb:68:7a:9a:80:
48:74:e2:9e:47:db:09:9b:85:e3:1d:83:9e:5c:bc:
7b:38:3a:f2:fc:59:52:d2:02:d7:c4:e5:60:e1:75:
65:80:d1:0c:05:c7:33:16:52:3e:c6:43:de:12:51:
b7:01:55:7b:57:58:79:9c:7d:c9:f2:d1:65:17:94:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5C:D2:74:FC:24:3A:B2:B5:B1:B6:73:6E:10:A4:7D:A2:6B:48:5C
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:86:77:2f:5b:9c:5e:1a:88:99:7a:ea:ec:0b:1b:25:90:39:
ed:0f:71:21:9f:20:24:cf:80:07:d8:71:07:c2:e8:6a:7b:85:
8a:84:f7:f9:6a:68:1a:a2:d9:2d:42:a9:79:2f:39:62:65:27:
5a:02:ec:61:96:ec:e3:e5:52:09:7c:3e:2f:b1:a5:6f:91:ee:
65:85:c4:ef:be:dc:72:e4:42:1f:65:6f:5a:3d:33:71:8c:cc:
18:97:af:69:cc:c4:c2:20:96:05:63:6e:e9:c9:24:e8:bf:51:
80:16:81:ca:26:9d:19:b0:af:ee:1f:dd:37:32:34:cf:40:20:
39:e1:8f:fe:55:fa:d0:90:6d:83:16:d5:81:c6:81:35:15:20:
db:e8:50:67:fb:f3:6d:03:0f:5b:a9:09:2e:05:b4:d8:ea:91:
ed:59:66:f6:2f:1e:04:e0:4e:2a:0a:aa:50:7e:1f:87:cf:17:
99:2c:12:0c:a6:96:22:0a:74:a1:45:e5:85:de:8f:27:75:20:
1b:66:53:df:bd:ee:cf:39:14:e2:fb:18:a1:d3:75:2a:1c:5b:
ea:18:b2:f5:49:6e:69:d8:c1:3c:15:36:5d:a1:dd:b1:d8:25:
bd:90:5c:b6:f1:58:53:4a:fb:f9:0c:16:82:09:17:95:0d:58:
06:05:a0:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE07LFBM0tLvvBs4lzI7cXMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOTgyZjk3OWEyZDI1ZWJiMmRhYjI2NTRiOGMyN2M5Mjhj
ZjVhYzcwHhcNMjYxMDEzMTEwMTI5WhcNMjYxMDE0MTEwMTI5WjAzMTEwLwYDVQQD
EygzMjVjZDI3NGZjMjQzYWIyYjViMWI2NzM2ZTEwYTQ3ZGEyNmI0ODVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaHZbFb/nt8KGoimcV4yZGr9k6LS
PHV4uLOn7iX9O3WNZsIwOSLk6/PYXtV5V27ekDEXMhiCABsrRU6P90AqZ5pbuHpp
cfeBdnKN6O4+ffgklvyXL1sh/Y4B3iH0oSNyK7ovi5cnZHDOFYWvov+TQ73Vq0tE
KYKYw6FTBKShiR9TjBotr7JRV5V/R44MYi0/Lsg8R8KnDHPIq1kJUljDrCjbb6d1
gVxjBw6T7Dma4Gtjwr0lUQHNEn9cx3Dzy2h6moBIdOKeR9sJm4XjHYOeXLx7ODry
/FlS0gLXxOVg4XVlgNEMBcczFlI+xkPeElG3AVV7V1h5nH3J8tFlF5QTIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJc0nT8JDqytbG2c24QpH2ia0hcMB8GA1UdIwQY
MBaAFN2YL5eaLSXrstqyZUuMJ8koz1rHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8zN2VhMTktNmYyNS00MmJjLWFkMjct
OTg4NmNiMWI2NDBlLzEvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8zN2VhMTktNmYyNS00MmJjLWFkMjctOTg4NmNiMWI2NDBl
LzEvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIZ3L1uc
XhqImXrq7AsbJZA57Q9xIZ8gJM+AB9hxB8LoanuFioT3+WpoGqLZLUKpeS85YmUn
WgLsYZbs4+VSCXw+L7Glb5HuZYXE777ccuRCH2VvWj0zcYzMGJevaczEwiCWBWNu
6ckk6L9RgBaByiadGbCv7h/dNzI0z0AgOeGP/lX60JBtgxbVgcaBNRUg2+hQZ/vz
bQMPW6kJLgW02OqR7Vlm9i8eBOBOKgqqUH4fh88XmSwSDKaWIgp0oUXlhd6PJ3Ug
G2ZT373uzzkU4vsYodN1Khxb6hiy9UluadjBPBU2XaHdsdglvZBctvFYU0r7+QwW
ggkXlQ1YBgWgiA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 16:15:40 2026 by rpki-client