Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: 5O99ydhFk7KKLbpmPhE2n4OhfXq9mDucjK6J2T+juCc=
Subject key identifier: 9B:A9:68:A0:12:BF:54:2C:D7:86:F7:9D:71:DB:F3:89:73:D2:3A:DD
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 019EBF5A4C405B3B939F3034077ADDD12C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 08D3
Signing time: Sat 13 Jun 2026 05:00:26 +0000
Manifest this update: Sat 13 Jun 2026 05:00:26 +0000
Manifest next update: Sun 14 Jun 2026 05:00:26 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: zlSIlSIaxq35+oHfhD/YsPBSJ7+XXvfzQD9oMHoT2xY=)
2: 88lmdc-mnvLuh7LWT7ewTNitVbQ.roa (hash: 4ev2GHc0kZ6+DnkiGr59ZAC1o1ATDYyOeOGEjJWvhDk=)
3: iKuRCoQtqrfFDPhTIq-f2J6k_mI.roa (hash: 4bH7BrC7xILPkVZ3kcGwCvI7Oji+afFT1aTAsrKOTnM=)
4: mrolwK2KC0w8DkEJIzjFPnT8aDY.roa (hash: KWvJn4y2GSmF/qywBZLEL1QJaSchEcFy2JpZDDXnxyg=)
5: o4G9chIzN7uCnwtKmumyR2sTH_I.roa (hash: KfBs8CLUl46AX0/vUOMRNCDr9u0nNAN2TPcPPQgzWaA=)
6: oFfXrLBfH6lxJPqPhKKALIEnsRY.roa (hash: xv0fWfgOWHRGVoD3X/VZOFn9nwq6PPmmOVIp8EyiD2o=)
7: oovOX9XETodZiiuPtmCpoSGbNQc.roa (hash: P+TaVSkHOwUfOr3zgGexRmHGN3QYL0Fhy8MDYgpRxpU=)
8: yUZKLH7R2JtKQc0S4DdHsOUEQU0.roa (hash: wwrcXsGyyFttGj2nkBh3bs0XPOa0z7A1reDz9TIBgKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:4c:40:5b:3b:93:9f:30:34:07:7a:dd:d1:2c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Jun 13 05:00:26 2026 GMT
Not After : Jun 14 05:00:26 2026 GMT
Subject: CN=9ba968a012bf542cd786f79d71dbf38973d23add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:39:81:ee:3d:f4:50:d8:3a:8f:2b:06:d3:
b7:86:92:e4:61:f6:a1:2c:6f:c0:d9:41:ca:a3:d4:
a9:bb:32:c9:92:12:43:01:3f:ae:b5:56:78:05:70:
75:f0:7f:e7:b9:d4:95:ba:7c:96:e3:0f:09:db:24:
4e:72:db:a0:5a:19:11:73:06:b2:ab:46:89:22:0b:
77:e1:98:fa:43:09:26:8e:e8:56:9a:2f:98:74:64:
ad:c9:6b:82:11:ff:67:c6:1c:fa:8b:28:12:9b:2f:
31:23:43:65:03:e2:50:28:58:d1:26:0e:5b:73:79:
9b:07:a5:87:7a:f6:79:66:fc:64:e0:85:77:2f:35:
d3:ee:f5:05:07:8f:58:ba:43:cc:e0:8e:86:9c:3f:
23:a5:fb:e4:6b:03:00:81:66:ff:e8:08:ad:d0:0a:
01:64:83:e2:26:66:48:c4:bf:fd:4c:52:ea:6f:32:
f0:22:d4:eb:0b:2f:46:c2:5c:08:79:4d:77:21:c0:
20:17:62:41:09:fd:92:ad:79:5e:bf:da:31:bd:79:
d4:9c:1b:26:b5:27:7b:9d:f6:98:fc:b1:fd:52:c9:
e4:20:a0:2c:7b:80:df:6d:ef:5b:51:ca:72:ea:01:
1a:46:f6:cf:8c:72:81:38:84:5f:1b:18:e9:19:38:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A9:68:A0:12:BF:54:2C:D7:86:F7:9D:71:DB:F3:89:73:D2:3A:DD
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3a:80:09:55:5f:28:47:7f:77:9b:72:2e:29:57:4a:76:40:
ca:f6:f6:6b:23:52:50:db:2b:0a:1c:f3:91:2d:d6:10:42:7d:
3f:b9:1c:06:83:18:c1:48:d4:15:4e:3d:b3:e9:64:de:09:a2:
54:20:26:0a:38:a0:a3:a6:62:ee:d5:40:a1:05:74:ca:8d:38:
ff:d1:38:fb:41:43:03:43:02:61:b2:cc:3b:9d:0e:47:0b:7b:
1f:1d:a4:98:f9:53:fb:7d:47:8d:09:7e:a7:e1:09:0b:3f:75:
11:cd:55:59:58:b4:86:a5:02:b4:6c:9b:a4:35:70:b0:7b:f7:
ce:81:37:32:f5:f6:48:21:96:a1:01:5b:e0:77:10:b5:c0:07:
14:63:9a:b1:14:28:60:80:a9:83:bf:54:42:ff:8f:8f:ab:1c:
83:b2:7b:56:16:77:e4:32:eb:24:ce:b8:2d:fc:bf:2b:d9:f7:
88:75:48:cd:01:6d:4e:e8:fb:36:e4:46:4e:71:b1:01:7a:2f:
54:96:e7:99:bc:a5:21:5e:ef:f1:dc:c1:45:a0:ff:1c:36:a3:
0a:4f:3f:9f:d2:bd:76:e9:b3:47:28:b1:01:78:18:07:00:d3:
a1:7f:e3:8c:1a:dd:11:b5:ce:7a:fe:a8:5a:1b:c2:6f:f6:a8:
f5:c8:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:51:21 2026 by rpki-client