Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
File: 3fCc-W5fyHTuk5CXxWUci9hC5q0.mft (raw, json)
Hash identifier: XpWWIZ8JL/ayrtxvYzjzvIcB4moR5XLW4aDDJWUZ064=
Subject key identifier: 40:F7:E1:06:A3:49:30:0F:03:ED:78:FF:DC:A4:6E:C8:4D:DE:37:8A
Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Certificate serial: 019FAA50DE69240C29CA78B2EFE0E7D01554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
Manifest number: 0706
Signing time: Tue 28 Jul 2026 20:00:54 +0000
Manifest this update: Tue 28 Jul 2026 20:00:54 +0000
Manifest next update: Wed 29 Jul 2026 20:00:54 +0000
Files and hashes: 1: 3fCc-W5fyHTuk5CXxWUci9hC5q0.crl (hash: EzV+5AgJ+zl/F55tzfQ5BaPgHqD3mNd3z+afR8XQL5A=)
2: C60VxSBJDSdFCd1k1UlGSCrwJvY.roa (hash: KibtnUkNqe/Q4+yRw8o2hlvC70cIKXb1SxvsmfXdEPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:de:69:24:0c:29:ca:78:b2:ef:e0:e7:d0:15:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Validity
Not Before: Jul 28 20:00:54 2026 GMT
Not After : Jul 29 20:00:54 2026 GMT
Subject: CN=40f7e106a349300f03ed78ffdca46ec84dde378a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:d8:f0:e4:17:b3:e2:d9:97:a6:1e:72:98:
cc:c4:93:00:aa:b6:2a:7a:11:b8:e5:f0:a1:6e:46:
fb:7a:96:77:83:c7:82:18:c4:0f:f5:38:0c:67:d4:
b9:9f:70:e3:68:13:24:61:ee:5e:03:b7:c5:db:4e:
25:a6:18:15:72:5f:ca:56:ff:fe:c0:5e:b0:2b:5f:
7d:96:04:74:47:a6:b5:b6:cf:33:ef:be:d0:6a:a0:
b2:8f:87:b8:e1:59:61:0f:dd:af:4d:bf:14:c7:f5:
21:f4:c5:5b:1f:32:5d:92:d4:97:a3:54:f8:cd:ef:
cc:78:68:19:48:33:9c:9e:f6:99:2a:5a:5c:48:64:
ab:df:fd:90:e8:b3:14:4e:61:9c:6b:6f:2e:30:9f:
6a:89:5e:5c:06:ae:11:00:41:29:81:b6:78:65:33:
16:a7:31:02:0a:e3:0c:13:56:22:d4:45:72:48:c8:
2b:e4:8b:3d:92:fe:d5:3c:8c:d7:ca:62:aa:3e:51:
9d:a4:f4:5a:c1:fc:b0:63:53:d8:93:60:db:4b:63:
bf:05:79:88:1e:69:21:b6:ee:76:16:a9:f3:e3:06:
a2:6e:3c:0f:32:f8:f0:04:db:af:4e:cb:16:53:a9:
c7:f0:eb:0e:58:7b:7b:ec:21:e9:17:9e:07:ed:9b:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F7:E1:06:A3:49:30:0F:03:ED:78:FF:DC:A4:6E:C8:4D:DE:37:8A
X509v3 Authority Key Identifier:
keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:69:4b:45:28:8c:90:e8:42:c5:31:6c:67:31:04:18:5f:c3:
96:68:7e:34:e5:fc:fe:3a:59:23:e5:c9:0d:60:19:94:d7:5d:
10:f2:a1:93:c2:0b:7d:89:b3:fd:3c:19:0e:15:bd:72:9a:c0:
d8:87:da:35:77:75:2c:f6:52:c3:73:66:b1:43:83:0e:31:ab:
ab:01:6d:67:d2:05:2c:b2:29:2b:d0:7a:47:b8:24:cc:8d:46:
7a:82:35:d6:f7:a5:cd:f8:77:44:cc:c9:b7:89:6c:59:4a:7b:
ff:27:a8:80:d2:2a:75:36:31:aa:4b:51:c2:a7:7a:51:98:19:
40:a7:a1:61:23:7e:75:45:2d:4b:fa:77:8b:8c:5d:30:4a:61:
f0:e0:c3:12:0d:16:62:b2:d5:1e:ce:64:f8:ff:74:d3:7a:27:
01:e4:b1:13:2e:78:c1:98:ae:18:f8:2b:cc:05:06:0f:94:36:
dc:31:df:ba:6e:d2:5f:bf:9a:d8:6d:d4:21:fd:38:65:76:d9:
b8:5e:5f:40:3e:af:6e:c3:4b:38:bf:96:bd:14:fb:fb:c9:36:
fa:a9:de:35:e5:a8:d9:11:4c:22:74:f4:ed:a0:cf:9a:5d:db:
4e:79:c7:24:c9:c1:d7:c4:9d:10:2d:fd:85:33:8f:63:05:ef:
91:0e:e1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:30:03 2026 by rpki-client