Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: HM2Ih5lvSk2XYnlNLEaXrsrvELsAev2dz71RiPdr9kw=
Subject key identifier: 14:6A:77:9D:39:89:35:22:F0:14:8C:00:D4:DD:46:B9:97:CA:7F:38
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 019CAA58764EE5D03985BA8E71FE8875FDF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 07BF
Signing time: Sun 01 Mar 2026 17:00:50 +0000
Manifest this update: Sun 01 Mar 2026 17:00:50 +0000
Manifest next update: Mon 02 Mar 2026 17:00:50 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: 9qg8Mw/7k3vA6J8morXokLnCO3v1InICUXBlscYdVV0=)
2: 88lmdc-mnvLuh7LWT7ewTNitVbQ.roa (hash: 4ev2GHc0kZ6+DnkiGr59ZAC1o1ATDYyOeOGEjJWvhDk=)
3: iKuRCoQtqrfFDPhTIq-f2J6k_mI.roa (hash: 4bH7BrC7xILPkVZ3kcGwCvI7Oji+afFT1aTAsrKOTnM=)
4: mrolwK2KC0w8DkEJIzjFPnT8aDY.roa (hash: KWvJn4y2GSmF/qywBZLEL1QJaSchEcFy2JpZDDXnxyg=)
5: o4G9chIzN7uCnwtKmumyR2sTH_I.roa (hash: KfBs8CLUl46AX0/vUOMRNCDr9u0nNAN2TPcPPQgzWaA=)
6: oFfXrLBfH6lxJPqPhKKALIEnsRY.roa (hash: xv0fWfgOWHRGVoD3X/VZOFn9nwq6PPmmOVIp8EyiD2o=)
7: oovOX9XETodZiiuPtmCpoSGbNQc.roa (hash: P+TaVSkHOwUfOr3zgGexRmHGN3QYL0Fhy8MDYgpRxpU=)
8: yUZKLH7R2JtKQc0S4DdHsOUEQU0.roa (hash: wwrcXsGyyFttGj2nkBh3bs0XPOa0z7A1reDz9TIBgKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:76:4e:e5:d0:39:85:ba:8e:71:fe:88:75:fd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Mar 1 17:00:50 2026 GMT
Not After : Mar 2 17:00:50 2026 GMT
Subject: CN=146a779d39893522f0148c00d4dd46b997ca7f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9a:7e:36:fe:fa:e8:23:fd:c7:ff:64:e9:79:
0e:97:a7:35:5b:1a:04:fc:f3:3f:c6:8c:d2:f1:1d:
5c:e4:d4:7d:e3:28:ca:e4:33:b3:8d:0e:90:d3:0e:
ff:64:e0:34:c3:78:b5:f4:fc:40:21:d5:17:15:16:
75:46:fd:8c:da:04:4d:23:6a:f2:76:80:25:97:60:
77:6c:cc:ae:dc:bf:81:84:41:3c:38:2d:5d:1e:fd:
ce:fb:e1:8d:4f:d3:87:5e:ad:bd:78:3f:67:5d:9d:
4a:45:0f:db:4e:41:bf:88:9f:09:ac:6e:84:02:f1:
95:e2:4a:68:45:83:8e:2e:1e:33:f4:aa:fa:2f:da:
49:c2:51:7b:a5:6a:7e:23:f0:ea:67:3a:9b:de:69:
11:ec:7a:39:69:7b:47:a6:00:fe:d6:bb:07:3a:bc:
e7:42:b5:67:de:7b:01:26:e4:b7:d9:80:07:09:0f:
95:df:57:77:c7:28:83:0e:b6:08:61:fd:e3:0e:f8:
ca:b0:97:17:ad:2a:42:c5:e6:6d:f1:6c:3a:61:66:
a8:fd:93:85:39:07:80:2e:e5:52:b7:54:fe:7d:5e:
53:54:88:00:10:8a:9d:47:3d:6a:19:7e:ca:ca:05:
1e:dc:30:be:b2:19:86:60:1d:8c:5d:7d:f1:09:95:
7b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6A:77:9D:39:89:35:22:F0:14:8C:00:D4:DD:46:B9:97:CA:7F:38
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:10:ed:28:4c:db:cb:49:ac:ee:14:d8:fb:9f:87:33:53:df:
12:b9:6b:cc:f6:23:2f:e8:f4:c4:3c:08:a1:3d:0e:b4:ab:93:
bb:ad:4c:c1:94:2e:f5:44:ab:23:7b:d9:d2:b3:33:60:52:87:
40:5c:16:65:c6:8a:55:fb:f1:5d:b8:a9:1c:0f:fb:da:71:57:
2a:60:54:dc:f2:45:bf:d6:8b:e3:94:fc:aa:52:e1:43:75:77:
ba:8b:a7:ac:35:38:38:9e:bb:57:8d:cf:4e:5e:b7:63:ae:62:
24:d8:b6:3c:84:4f:88:dc:96:9a:0c:1e:d8:06:12:9a:4a:f8:
5a:10:e3:1d:80:1c:66:75:12:d9:89:df:74:46:77:d6:43:7d:
71:a6:ab:ba:b8:e0:64:8f:7e:6a:a1:38:c7:5a:be:d3:7c:5c:
2e:be:3c:ff:41:64:66:9a:8c:6b:ee:c6:4b:69:f8:f0:10:e0:
3b:e5:fc:77:93:a9:9c:29:dd:9c:40:3d:96:15:9b:3e:e6:56:
99:07:36:9b:55:e9:25:8d:d9:ec:f6:02:f1:8c:3f:85:1f:a3:
cf:4c:b9:1f:8d:cc:f4:c2:54:7b:7e:e8:86:3e:3c:fd:1a:48:
55:10:3e:f0:ef:3a:98:8d:24:7a:f2:0b:29:a0:93:e6:05:04:
bc:3c:5f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:08 2026 by rpki-client