Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
File: ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft (raw, json)
Hash identifier: t0V3oOkf1HT6EiAvC0lRdc1akV2gxTqme5m6wr054lk=
Subject key identifier: E6:7E:26:DC:85:50:33:97:15:E9:18:29:E9:F0:9A:3F:7E:5F:6B:6C
Authority key identifier: 65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
Certificate issuer: /CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Certificate serial: 019FAB2C029368BC85CF973E36A823EFA6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
Manifest number: A3
Signing time: Wed 29 Jul 2026 00:00:15 +0000
Manifest this update: Wed 29 Jul 2026 00:00:15 +0000
Manifest next update: Thu 30 Jul 2026 00:00:15 +0000
Files and hashes: 1: 3zMRh1jlUnNdxEr1g7CUVjVS7Io.roa (hash: sT+SSBni7dZcvlHSV+3jhOFDUsj7LFoenmqYmqUNvq8=)
2: ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl (hash: WFecYeLf5J9zRc/40gmD9w4wzjwNBRbgE8Pe4A2b+P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:02:93:68:bc:85:cf:97:3e:36:a8:23:ef:a6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Validity
Not Before: Jul 29 00:00:15 2026 GMT
Not After : Jul 30 00:00:15 2026 GMT
Subject: CN=e67e26dc8550339715e91829e9f09a3f7e5f6b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:bb:02:c9:f9:c0:f8:e2:80:78:5b:cc:a2:
8f:5a:af:6d:96:58:f4:43:f2:e2:11:ef:6b:ea:94:
e6:e3:cd:1c:8d:86:cc:7e:22:8f:33:35:15:23:0a:
73:4e:5f:d8:02:1e:bc:50:86:73:08:17:d8:2c:d1:
86:8c:72:f9:b6:41:4d:a3:72:08:bf:de:24:35:73:
6c:f9:4a:12:d3:47:5c:f5:56:fd:60:de:91:e5:62:
2f:06:87:ca:da:c6:36:fe:77:31:22:76:0a:6f:8b:
97:66:ec:4e:f9:bb:bb:b0:e7:b4:f1:3d:b6:52:b3:
d1:46:4a:b2:63:ac:18:ad:59:bf:b2:7e:c2:e1:ac:
d0:53:ba:f3:ca:eb:f8:17:23:b2:2a:ac:5d:86:8a:
44:22:9a:47:c3:82:e6:7f:68:61:15:6a:fd:8f:41:
12:a7:8d:4b:3d:e2:72:d1:a0:b8:c4:3f:e2:bc:6a:
61:b4:f8:e7:62:e1:75:a8:97:04:e5:fc:2e:e2:91:
5d:53:70:84:ea:86:7f:27:d9:56:43:8d:86:2e:b2:
c0:c0:5c:0e:27:0d:0b:0e:64:0d:04:8f:1a:c6:ec:
be:d8:bf:88:94:0f:8e:19:1c:28:96:17:26:1a:e6:
63:5a:ad:26:74:13:e2:38:53:36:41:11:61:59:ae:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7E:26:DC:85:50:33:97:15:E9:18:29:E9:F0:9A:3F:7E:5F:6B:6C
X509v3 Authority Key Identifier:
keyid:65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d0:6c:74:31:56:fd:a3:b2:66:a9:c8:c5:ae:81:a3:f2:6d:
d8:5a:20:e1:47:af:19:5e:1e:85:15:ae:90:8f:4b:11:0a:3f:
92:61:9c:21:93:b9:6c:4a:55:e4:60:a6:6a:b3:82:03:bd:bb:
9d:6c:59:fc:83:db:34:9b:7a:a3:5e:e0:59:c5:92:64:e3:d2:
03:50:49:3b:b5:0c:af:88:8f:4b:5b:62:f9:61:71:6b:c1:2e:
75:f7:e5:27:8a:c6:fc:af:52:b8:5b:a9:79:30:70:12:67:e1:
66:01:d3:6b:7f:a4:47:54:5c:4c:3b:f4:81:78:fd:8e:b6:0f:
00:31:80:6b:e5:d0:84:31:ac:b8:68:82:b9:e3:e8:df:47:b1:
ca:c6:9d:e1:42:8f:3c:5e:10:17:af:13:5d:b2:13:e4:14:69:
4d:9c:07:05:71:2d:56:5f:7a:47:ac:37:04:a8:95:71:a7:78:
1c:d1:29:83:be:05:17:bc:d3:fe:34:c0:d9:10:96:55:ff:96:
d0:6a:2c:c7:d3:d0:98:8d:69:43:32:a8:70:61:af:52:4b:59:
a1:20:6f:3e:d3:d6:2e:ea:0d:cc:39:ee:af:f8:93:fe:d2:bd:
f7:8a:00:b1:03:2c:d7:2e:29:d8:20:30:3e:07:52:b9:ce:2f:
47:d7:68:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:28:39 2026 by rpki-client