Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
File: 3fCc-W5fyHTuk5CXxWUci9hC5q0.mft (raw, json)
Hash identifier: U0vLh77GvjhWWq4m8ChHy+0RaBElOt15XK/X2odumIs=
Subject key identifier: F7:D1:00:A3:85:56:8E:EC:7C:06:F9:C4:5C:33:41:7A:AA:70:14:F8
Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Certificate serial: 019D992B48737ADEE1CC7B406B47CBEE8BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
Manifest number: 05F4
Signing time: Fri 17 Apr 2026 02:00:43 +0000
Manifest this update: Fri 17 Apr 2026 02:00:43 +0000
Manifest next update: Sat 18 Apr 2026 02:00:43 +0000
Files and hashes: 1: 3fCc-W5fyHTuk5CXxWUci9hC5q0.crl (hash: sSVoOytD7vdWuOhOLc1TXML9Nm83BP+G4MX3ElUC0ho=)
2: C60VxSBJDSdFCd1k1UlGSCrwJvY.roa (hash: KibtnUkNqe/Q4+yRw8o2hlvC70cIKXb1SxvsmfXdEPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:48:73:7a:de:e1:cc:7b:40:6b:47:cb:ee:8b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Validity
Not Before: Apr 17 02:00:43 2026 GMT
Not After : Apr 18 02:00:43 2026 GMT
Subject: CN=f7d100a385568eec7c06f9c45c33417aaa7014f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:d0:8b:87:6c:55:90:2d:3b:8f:72:dc:19:
66:5f:7b:b9:3c:49:57:e4:10:87:61:da:c6:f4:b2:
a8:c3:0b:4c:75:c9:cd:38:61:37:0a:dc:1f:0d:17:
07:f3:cb:d3:7b:5c:ab:4a:d8:54:0a:b2:92:be:7a:
5f:6f:c9:b0:6d:16:af:2c:75:4e:06:7b:55:76:be:
a1:cb:bf:46:36:62:4d:04:9d:d1:3d:74:a5:23:bb:
6c:19:23:47:14:27:cf:56:ba:2a:8d:40:a2:b4:14:
92:06:ab:63:cd:dc:30:97:ef:7e:de:61:38:29:67:
ad:59:1b:ab:26:a1:13:6e:64:3a:70:32:0c:61:f7:
2d:85:10:ef:f8:0e:5a:c1:ae:70:54:eb:78:52:b2:
67:2c:eb:57:69:a7:9c:76:16:69:46:d9:70:e8:86:
30:82:18:10:01:b4:55:0c:d1:4a:7d:b3:d0:14:d5:
4a:3a:18:30:6b:ca:cd:a2:67:ab:9a:3d:22:2c:4e:
0c:c3:79:6c:9f:d7:bd:82:e2:ca:d1:91:df:0c:3f:
ae:aa:00:83:c0:2a:a1:53:22:b5:be:9b:f5:5e:94:
34:1a:ed:ef:c2:00:d7:ff:26:a3:3c:2d:72:32:c1:
3e:11:00:3c:e5:94:f1:cc:94:0e:da:3d:41:d5:19:
33:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D1:00:A3:85:56:8E:EC:7C:06:F9:C4:5C:33:41:7A:AA:70:14:F8
X509v3 Authority Key Identifier:
keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0c:5a:81:7e:2e:d1:8a:f8:1d:4a:bf:11:99:fa:53:49:db:
f5:1c:f4:7b:5c:30:40:cc:bd:dd:1c:31:f8:89:8c:e1:cc:39:
e9:c0:dd:3e:a6:66:16:65:62:d3:e9:99:52:cd:6a:9f:81:05:
c3:cb:91:80:01:59:ff:ce:50:09:a8:dd:c1:9f:24:bb:1d:f3:
f3:a9:fb:59:5f:1b:99:89:21:7c:7e:72:1a:32:ba:a1:2d:c9:
ca:a2:00:a6:90:96:e5:67:b9:c6:16:96:6d:5f:26:c0:5d:79:
fa:34:7d:24:25:3f:f1:85:59:a3:57:0e:8f:9d:a5:5f:03:9b:
e5:61:fe:82:f9:c5:d9:2c:46:9f:84:06:5b:df:6f:47:6d:f3:
b4:41:38:91:b6:51:61:07:54:46:a0:d4:68:7d:06:5b:42:34:
da:e7:e1:6f:0d:74:79:6c:5e:f4:11:61:51:4a:dd:27:f5:81:
86:95:2a:3d:9b:2f:ba:25:c6:9e:1e:7a:c9:0d:40:3e:ca:25:
42:1a:24:d4:b3:94:ed:c7:83:8f:a5:f9:a1:71:11:88:ae:4f:
27:15:8f:18:59:08:94:86:e3:6a:39:a1:24:26:93:b7:02:d4:
4b:d7:c9:19:6f:c2:45:75:97:b8:8d:8c:86:eb:b3:e2:ad:9d:
03:7e:c7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:38 2026 by rpki-client