Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: yj5ldK3hRvovf21fAZgtja1UWK3hy/nCZnlrl/oRNaw=
Subject key identifier: CC:DA:B3:A2:EE:2D:AD:BB:56:64:3E:B5:DA:FD:6C:9C:44:84:3E:6D
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 019CAC46FF33C737268FD53C08DF119E53A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 07C0
Signing time: Mon 02 Mar 2026 02:00:59 +0000
Manifest this update: Mon 02 Mar 2026 02:00:59 +0000
Manifest next update: Tue 03 Mar 2026 02:00:59 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: xohZ8OkkWMKdXIGKdTT6nCRDD6yNCOjOR19IGTJajUg=)
2: 88lmdc-mnvLuh7LWT7ewTNitVbQ.roa (hash: 4ev2GHc0kZ6+DnkiGr59ZAC1o1ATDYyOeOGEjJWvhDk=)
3: iKuRCoQtqrfFDPhTIq-f2J6k_mI.roa (hash: 4bH7BrC7xILPkVZ3kcGwCvI7Oji+afFT1aTAsrKOTnM=)
4: mrolwK2KC0w8DkEJIzjFPnT8aDY.roa (hash: KWvJn4y2GSmF/qywBZLEL1QJaSchEcFy2JpZDDXnxyg=)
5: o4G9chIzN7uCnwtKmumyR2sTH_I.roa (hash: KfBs8CLUl46AX0/vUOMRNCDr9u0nNAN2TPcPPQgzWaA=)
6: oFfXrLBfH6lxJPqPhKKALIEnsRY.roa (hash: xv0fWfgOWHRGVoD3X/VZOFn9nwq6PPmmOVIp8EyiD2o=)
7: oovOX9XETodZiiuPtmCpoSGbNQc.roa (hash: P+TaVSkHOwUfOr3zgGexRmHGN3QYL0Fhy8MDYgpRxpU=)
8: yUZKLH7R2JtKQc0S4DdHsOUEQU0.roa (hash: wwrcXsGyyFttGj2nkBh3bs0XPOa0z7A1reDz9TIBgKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ff:33:c7:37:26:8f:d5:3c:08:df:11:9e:53:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Mar 2 02:00:59 2026 GMT
Not After : Mar 3 02:00:59 2026 GMT
Subject: CN=ccdab3a2ee2dadbb56643eb5dafd6c9c44843e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:28:f3:2b:6f:c7:9f:3e:4c:d9:03:7d:98:
21:f3:28:91:c1:ec:e2:51:53:6c:d8:d2:2d:55:c7:
90:1b:96:9b:22:09:41:6b:9b:e4:8b:5a:79:4b:cc:
c7:8c:f4:b5:e7:11:d9:a8:9a:e0:bc:37:2c:e0:13:
fb:a5:14:2d:03:b7:2a:02:32:b8:76:fd:0a:a6:ff:
84:f9:1d:3e:70:26:71:b2:c4:53:b5:ca:d7:96:bb:
35:9f:ea:46:e0:d2:d9:a0:40:5e:30:0f:e3:65:93:
8e:8f:3b:ff:28:23:b4:1c:0d:bf:db:2f:cf:d4:8d:
cf:05:d1:41:38:16:b6:f5:ae:dd:7c:fc:09:8a:83:
29:4a:25:65:a3:54:06:f7:11:33:51:d5:f5:a4:78:
3c:51:42:f9:2a:11:b1:93:1a:fb:df:fa:a9:53:9f:
cc:c4:21:e4:cd:f6:f5:79:81:c9:f9:68:0d:10:c6:
ac:e2:3d:4f:06:d6:60:f1:33:71:70:35:dd:ec:07:
71:c0:d7:ae:8d:13:7e:15:55:53:96:c5:98:d0:dd:
ec:c2:5d:46:6f:ae:d0:9b:fa:6b:27:53:27:91:6f:
c9:95:e7:25:56:22:65:0d:9e:6e:d9:e6:13:04:ac:
2c:d7:1b:1d:34:82:09:04:8c:52:1f:0b:fe:6a:75:
2f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DA:B3:A2:EE:2D:AD:BB:56:64:3E:B5:DA:FD:6C:9C:44:84:3E:6D
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d8:c0:dc:00:ce:ea:ef:68:29:6b:8d:c7:c3:8a:71:10:f5:
47:85:e7:4f:69:da:b2:0d:16:78:a8:b3:2d:ea:03:90:1a:3b:
ed:19:8f:fb:aa:06:7d:2f:bf:29:89:37:9d:a7:82:5b:d1:c6:
3f:52:5a:ac:25:e4:92:1f:b9:e1:86:24:09:2c:48:23:37:0f:
32:04:51:9a:2d:72:b7:ed:57:47:f5:5b:c6:ec:77:c6:2d:5c:
59:0b:fb:f4:47:6f:ab:f4:dc:cd:2d:48:07:fc:8a:e1:d6:fe:
1a:9c:90:95:b5:4c:f5:e8:e2:9e:a6:02:7c:21:47:6a:b8:b1:
70:cc:5a:a9:c3:1c:fe:e1:dd:98:84:5f:3e:28:ee:ed:9f:f4:
cc:b4:a9:d2:c2:4d:b7:ec:a6:80:65:87:4f:ab:e1:6b:2c:fd:
af:d2:6d:c6:e5:96:d3:b6:54:c7:7c:dc:5b:3c:39:aa:c8:27:
75:a9:bb:fb:4f:cb:d4:0c:3c:ca:e9:0d:81:77:05:ab:a3:6c:
7d:b4:45:cf:10:b3:0a:29:69:5c:e2:1c:9c:fd:77:1c:6a:d7:
61:40:27:64:7d:fa:18:f7:71:b3:d9:b9:a6:b0:40:dc:a1:d3:
1c:e3:69:4b:05:ee:3a:0f:1e:9c:16:c9:4e:21:df:4c:ff:24:
62:dd:93:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:43 2026 by rpki-client