Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
File: 3fCc-W5fyHTuk5CXxWUci9hC5q0.mft (raw, json)
Hash identifier: VGjf3sOqTgSDJo7x8XmONorsA1ttQmejbFEhOj/d0g0=
Subject key identifier: 4E:E8:AB:21:07:6D:EA:AC:9B:15:30:5D:93:97:CC:2D:D3:C4:20:07
Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Certificate serial: 019CA9B3893462FB5F6BB181106A7F371E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
Manifest number: 0578
Signing time: Sun 01 Mar 2026 14:00:41 +0000
Manifest this update: Sun 01 Mar 2026 14:00:41 +0000
Manifest next update: Mon 02 Mar 2026 14:00:41 +0000
Files and hashes: 1: 3fCc-W5fyHTuk5CXxWUci9hC5q0.crl (hash: rzMa66WYuS7KrOpzSLzFjcbkOyHgs9z0K3gGGoMkRV0=)
2: C60VxSBJDSdFCd1k1UlGSCrwJvY.roa (hash: KibtnUkNqe/Q4+yRw8o2hlvC70cIKXb1SxvsmfXdEPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:89:34:62:fb:5f:6b:b1:81:10:6a:7f:37:1e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Validity
Not Before: Mar 1 14:00:41 2026 GMT
Not After : Mar 2 14:00:41 2026 GMT
Subject: CN=4ee8ab21076deaac9b15305d9397cc2dd3c42007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:05:3a:f1:50:7e:cf:4e:63:db:8d:ca:a4:
01:49:f5:a5:b6:c3:30:64:53:f4:c5:8b:15:7d:d5:
f6:d0:9a:58:97:6b:27:5d:77:b1:c9:fa:b0:54:ac:
4a:4c:fe:b2:a4:3a:10:93:55:df:8b:ee:c1:d5:63:
21:47:1b:cd:5e:d4:1e:95:19:d8:98:00:82:2c:8a:
16:cf:96:9c:73:25:fa:82:c0:99:f5:16:5b:f5:cc:
56:fe:52:45:f2:39:6b:68:cb:5b:2b:f5:a0:a1:45:
cf:aa:23:35:64:d9:c9:47:d5:6d:f9:31:bb:27:35:
81:f4:e3:f5:44:ed:26:a0:e9:bf:bd:ec:b9:52:b1:
26:16:46:f9:de:f7:fd:0b:fb:13:5b:d4:7a:5a:01:
92:a5:19:60:e6:54:01:e7:5c:1a:95:4e:55:ca:c7:
f9:bf:e5:02:1d:df:5c:02:6b:39:f9:fd:ef:d0:93:
84:e3:c8:69:31:79:c2:1e:db:17:3d:de:81:23:59:
55:27:d8:1c:86:cd:a4:67:93:77:32:76:44:75:4a:
61:84:1c:f2:7e:26:74:0e:2b:a0:fd:d1:ed:77:7f:
49:35:84:2e:0b:99:89:0a:73:4f:67:44:64:b6:42:
39:b2:0a:28:4b:4d:c3:c4:47:5a:12:7d:ff:4d:cf:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E8:AB:21:07:6D:EA:AC:9B:15:30:5D:93:97:CC:2D:D3:C4:20:07
X509v3 Authority Key Identifier:
keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b1:44:9d:6b:9d:c9:1c:46:18:47:53:70:66:4b:bc:a0:15:
57:ab:90:b1:f8:a4:e5:f3:6b:71:9d:47:bc:d1:da:36:85:4b:
0e:d0:bf:b2:3a:7e:c1:c7:5c:88:17:94:da:1e:ec:9c:45:22:
18:9f:da:d3:9a:c5:d9:b3:4a:a5:30:ea:92:88:38:08:bc:f9:
8b:7b:67:61:7e:a9:4a:fd:d6:56:5a:de:e0:69:2c:60:b3:85:
e1:25:8e:47:3f:fd:96:b3:05:52:30:1e:84:df:ad:ad:92:7b:
ca:ee:95:f3:9c:56:ab:52:a9:9e:0a:13:89:3d:47:7a:9e:3c:
a1:6f:55:57:63:6b:07:1f:9a:b6:1e:ae:00:19:a2:6f:bf:06:
76:02:29:5a:73:ed:90:92:38:ff:9c:67:b5:c5:18:03:9b:71:
84:6b:4e:0f:ec:70:cb:d2:fd:94:11:08:6a:7a:a8:71:f2:fb:
1c:d4:fc:0b:1b:15:46:4c:3a:df:44:9c:80:e5:21:f7:e2:e4:
f5:25:00:3a:46:c8:be:2a:a7:1a:93:bf:cb:ab:e3:c9:68:e1:
d9:45:5b:53:3b:63:e9:bc:33:d1:fb:e5:3e:0e:04:e5:97:43:
af:12:97:04:61:44:3a:58:e9:c4:27:75:05:fa:49:63:78:ab:
27:54:c9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:47 2026 by rpki-client