Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: zvO2Qmfaik9BvoH/+sWnSM89+wvB1QwHv3cKtaWqCpU=
Subject key identifier: BD:7C:BD:56:EB:F3:82:BA:8C:0F:2D:1C:4B:FC:4E:FE:E6:77:C3:F2
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 019CAC472772936687616ED6B5699B3FBB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 17F3
Signing time: Mon 02 Mar 2026 02:01:09 +0000
Manifest this update: Mon 02 Mar 2026 02:01:09 +0000
Manifest next update: Tue 03 Mar 2026 02:01:09 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: judfdJBUf6ZXnrrGiM3gESfYyJ/bCqvuhNokd2DQOfE=)
2: 66xj8nJZJDodIpTEFYfIO2lI0pg.roa (hash: cnTcAyScXe7FLebnmc+X1hADlgaMe8Kz4UH8Ho7fCks=)
3: YC7q8GupNzZHSH1s2Vu8MGm0c2Y.roa (hash: TnzlosbHJ70+TNYLJ5XWl/2V3tal0xrZM8UfJyyEdK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:27:72:93:66:87:61:6e:d6:b5:69:9b:3f:bb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Mar 2 02:01:09 2026 GMT
Not After : Mar 3 02:01:09 2026 GMT
Subject: CN=bd7cbd56ebf382ba8c0f2d1c4bfc4efee677c3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:47:e7:01:f0:a0:e2:67:3b:e0:51:e8:2b:a9:
9b:8f:50:a7:ff:8e:a6:53:a9:67:0e:9b:d3:f1:57:
fa:4f:27:82:0a:c8:32:0c:71:b6:12:55:bd:cc:f8:
6e:51:27:5d:0b:15:3e:fd:3e:49:07:c6:90:37:e8:
f7:45:8b:69:c7:d7:98:f7:b7:36:d4:f6:03:ff:12:
c6:dd:89:cb:56:7f:a5:c3:74:cf:0e:98:c6:79:ad:
c3:a2:2d:34:64:49:f9:fb:c6:b0:82:87:47:a4:80:
2a:fb:ad:49:4b:d5:e2:1e:be:97:83:ba:0f:e6:6a:
1f:dc:2c:89:0e:eb:ea:3c:31:d8:fb:66:41:69:a2:
b6:c6:e2:05:57:b4:b1:4e:eb:79:90:cc:47:57:ef:
6f:6d:8a:c9:83:34:b4:3e:53:8c:3f:e3:1a:ce:50:
20:8b:6f:d4:be:3b:d0:5d:f9:a0:ab:1f:ae:54:f8:
57:0e:df:a1:dc:4a:0e:f8:57:80:5e:9b:36:04:c7:
6b:b4:dd:aa:81:1b:7e:52:05:3a:7e:ab:9d:67:3f:
76:df:71:73:f5:46:c2:19:f7:45:71:a6:2f:74:23:
03:0f:41:cf:6e:7a:7d:c9:31:02:b1:4a:c1:25:9a:
7b:6f:a1:a1:bc:65:17:04:e2:54:dc:c9:fb:ee:c3:
6c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7C:BD:56:EB:F3:82:BA:8C:0F:2D:1C:4B:FC:4E:FE:E6:77:C3:F2
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:68:71:32:45:ea:61:67:70:14:fe:b4:f6:66:c6:37:00:69:
47:c8:a8:fd:97:b7:00:21:77:53:99:42:39:34:2e:2d:ad:2a:
d0:05:c4:57:57:aa:83:6f:25:3f:fd:8a:27:5e:e0:0c:74:10:
b1:9a:e2:4b:20:5b:d9:e8:62:49:03:3e:93:60:70:29:88:3e:
fd:c3:5f:3a:3c:cc:94:4f:49:55:b1:3c:42:d9:a3:f6:17:cf:
84:f2:40:b4:26:0e:b4:18:e1:69:d6:ec:4a:fa:6c:07:f5:7d:
0e:6a:db:f5:e9:95:2c:1e:ec:17:16:1f:db:1a:3a:88:b1:73:
c6:cc:10:2a:eb:b7:b8:c7:25:ef:1a:63:db:29:cd:5a:5f:5d:
8d:bc:6c:57:9c:1b:7e:da:98:9f:1e:e1:1f:92:5e:bc:5a:6a:
91:8c:dd:1f:ee:9d:d7:e3:41:f1:59:94:71:a0:d1:84:94:58:
29:13:3a:ef:88:d1:98:ca:1f:2d:f3:06:4d:c2:60:6a:e0:70:
13:de:92:55:32:6e:77:35:12:b8:8d:92:c1:7f:77:cf:87:2a:
72:7a:a6:69:19:69:6c:da:6c:1c:43:c0:e8:a1:b3:83:f8:a4:
65:02:05:01:4a:44:68:d4:7c:c9:ce:0c:0c:a6:85:dd:3d:4d:
cc:2b:27:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:19 2026 by rpki-client