Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: ZhzV+McCn6SDw5cWoQD1Jk/KRNrFKLdMpHh9SYdA2o4=
Subject key identifier: FC:0B:F7:E1:F0:F5:BA:BE:E3:08:C2:48:8F:42:D7:D3:45:39:55:97
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 019FA906BE912454F4B886B9C1BB59363E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 094C
Signing time: Tue 28 Jul 2026 14:00:19 +0000
Manifest this update: Tue 28 Jul 2026 14:00:19 +0000
Manifest next update: Wed 29 Jul 2026 14:00:19 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: eEJo9mxFUvIp0CI5hLqwZF8us6Egr2RH9xqr1m3QYd0=)
2: 88lmdc-mnvLuh7LWT7ewTNitVbQ.roa (hash: 4ev2GHc0kZ6+DnkiGr59ZAC1o1ATDYyOeOGEjJWvhDk=)
3: iKuRCoQtqrfFDPhTIq-f2J6k_mI.roa (hash: 4bH7BrC7xILPkVZ3kcGwCvI7Oji+afFT1aTAsrKOTnM=)
4: mrolwK2KC0w8DkEJIzjFPnT8aDY.roa (hash: KWvJn4y2GSmF/qywBZLEL1QJaSchEcFy2JpZDDXnxyg=)
5: o4G9chIzN7uCnwtKmumyR2sTH_I.roa (hash: KfBs8CLUl46AX0/vUOMRNCDr9u0nNAN2TPcPPQgzWaA=)
6: oFfXrLBfH6lxJPqPhKKALIEnsRY.roa (hash: xv0fWfgOWHRGVoD3X/VZOFn9nwq6PPmmOVIp8EyiD2o=)
7: oovOX9XETodZiiuPtmCpoSGbNQc.roa (hash: P+TaVSkHOwUfOr3zgGexRmHGN3QYL0Fhy8MDYgpRxpU=)
8: yUZKLH7R2JtKQc0S4DdHsOUEQU0.roa (hash: wwrcXsGyyFttGj2nkBh3bs0XPOa0z7A1reDz9TIBgKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:be:91:24:54:f4:b8:86:b9:c1:bb:59:36:3e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Jul 28 14:00:19 2026 GMT
Not After : Jul 29 14:00:19 2026 GMT
Subject: CN=fc0bf7e1f0f5babee308c2488f42d7d345395597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:fb:56:2f:5c:f3:2c:37:31:3d:46:fd:b0:
9f:a7:4f:a3:e5:ef:06:9c:cd:3c:3d:45:ae:8a:8c:
11:22:56:c7:ae:75:52:10:3a:57:94:19:92:62:ce:
72:c9:b3:22:71:1d:24:89:ca:ea:2a:2b:8f:f3:9c:
62:dc:05:01:c8:5a:0d:a0:c7:86:4d:f8:cd:1b:e6:
1d:22:47:24:4c:07:8f:da:d1:1c:44:ce:01:00:88:
52:2c:ab:4a:c7:c8:c4:32:0c:58:0a:9f:60:48:01:
a3:7f:93:e6:ad:df:b8:a2:4c:9d:c6:e2:5f:1f:1a:
5c:85:a2:06:fc:5e:bd:c7:0f:3d:ee:b0:54:5c:f1:
53:95:0f:2d:f7:e7:3e:2f:41:4c:8f:05:86:64:22:
34:1e:de:ce:01:d7:8d:45:85:ed:08:03:0d:1b:f7:
78:20:d6:bc:a5:dd:fe:52:d5:ed:05:17:49:8c:ac:
30:5d:93:99:2f:42:81:49:08:b7:83:97:34:1b:2a:
4f:60:24:df:1c:ac:a6:96:f6:47:fb:de:b9:6c:75:
5e:de:7a:eb:cd:08:6a:22:76:66:9b:a5:4d:c8:13:
f4:8d:30:d3:93:d8:6c:d9:75:0d:79:07:26:61:f7:
88:dd:5c:16:4a:69:b9:67:f7:f2:e4:b0:04:60:1d:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0B:F7:E1:F0:F5:BA:BE:E3:08:C2:48:8F:42:D7:D3:45:39:55:97
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0f:f9:52:7b:be:bc:0e:08:db:9c:aa:a3:c5:85:58:6c:3d:
31:6e:f9:86:f8:58:fe:59:a1:fc:82:ff:94:17:9b:86:29:e7:
8a:96:10:8e:37:04:b0:7c:a1:78:37:83:b1:92:a9:3e:e8:00:
78:80:cf:b4:49:a8:70:2c:aa:ae:3c:48:12:bd:f6:db:9d:60:
c9:52:c2:90:80:84:14:9e:27:3b:55:7c:c8:4d:f7:04:b9:db:
8b:4f:bc:a6:d0:b9:79:14:69:6d:c7:55:42:94:ec:4b:5b:35:
b6:66:e8:72:2d:71:cc:6f:90:c0:3d:b9:60:bc:6a:dd:f9:02:
ac:34:8a:55:e6:46:f2:50:d6:fc:ff:5e:ee:3b:65:d8:7e:82:
13:e5:b7:c2:6f:c3:c5:66:21:d8:30:56:7d:1d:dc:a6:8d:08:
35:62:ad:b5:62:e1:65:4e:d4:42:15:30:69:c2:28:ec:54:5a:
ed:0f:8e:71:04:f5:d7:47:55:8e:c5:a3:f4:bb:33:47:62:fe:
32:a9:4e:16:5a:b6:2e:15:70:97:f0:8b:b1:ad:9b:ac:e1:49:
40:70:17:05:70:a3:1b:77:45:bc:43:48:7d:fa:3b:a4:0a:36:
f2:33:56:e8:36:e2:95:61:e6:fc:8b:dc:89:dd:ea:55:e4:fd:
ba:75:b6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:36:01 2026 by rpki-client