Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
File: 3fCc-W5fyHTuk5CXxWUci9hC5q0.mft (raw, json)
Hash identifier: +v6H+oy9sDNeMCRf9JgB5YX+VWYLVD7K+BD4sbI4GtQ=
Subject key identifier: C8:4C:D0:67:A2:C8:5F:91:80:B1:4E:37:F7:75:95:64:85:90:46:B9
Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Certificate serial: 01A0CBFE4704ACB04E92EC6D35C11AB9B9E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
Manifest number: 079C
Signing time: Wed 23 Sep 2026 02:00:34 +0000
Manifest this update: Wed 23 Sep 2026 02:00:34 +0000
Manifest next update: Thu 24 Sep 2026 02:00:34 +0000
Files and hashes: 1: 3fCc-W5fyHTuk5CXxWUci9hC5q0.crl (hash: lKcCxMH2C8ZeALbg1Xl/aG0vU6KwjPVpGTk63gGc2E0=)
2: C60VxSBJDSdFCd1k1UlGSCrwJvY.roa (hash: KibtnUkNqe/Q4+yRw8o2hlvC70cIKXb1SxvsmfXdEPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:47:04:ac:b0:4e:92:ec:6d:35:c1:1a:b9:b9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Validity
Not Before: Sep 23 02:00:34 2026 GMT
Not After : Sep 24 02:00:34 2026 GMT
Subject: CN=c84cd067a2c85f9180b14e37f7759564859046b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:af:fc:f8:94:3d:6e:03:94:47:17:18:e3:
13:ce:78:72:46:60:88:d1:fa:fe:84:e3:f1:46:a4:
3c:56:53:5d:67:de:ee:57:23:19:2a:02:8d:ae:5f:
6c:47:20:a4:7d:d0:f1:e0:66:19:46:01:26:d4:c3:
25:24:18:de:87:55:4c:bd:90:d7:95:ef:27:8d:bf:
f7:95:25:6e:cf:dd:a3:76:50:cc:94:5b:47:2f:22:
d0:71:27:99:90:e5:ee:44:1d:81:e1:d1:aa:22:65:
58:07:bd:44:d1:92:43:72:7e:16:d0:ef:43:41:25:
01:ef:23:84:f9:fe:d6:1c:28:c2:b1:34:d8:65:fb:
1d:6e:e8:03:c2:83:e4:d5:f0:e7:0c:0d:c7:ec:eb:
6e:01:c1:64:b6:a0:6c:2c:e9:4c:99:fa:e2:43:7c:
66:6a:50:e0:f2:9e:00:9a:ed:20:05:53:10:ff:eb:
79:a6:48:c7:c8:d4:d6:42:7a:84:1e:c8:cf:5c:0b:
9f:f7:78:d3:f2:88:74:23:90:7e:66:dc:41:fb:b3:
8e:8d:ea:89:7e:a3:c0:03:0f:91:b0:0d:78:7d:d9:
57:bd:64:59:d3:19:d7:56:6b:1a:5e:a8:dd:69:1d:
2c:a9:71:aa:d0:9a:74:ef:28:26:34:7a:dd:f2:ab:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4C:D0:67:A2:C8:5F:91:80:B1:4E:37:F7:75:95:64:85:90:46:B9
X509v3 Authority Key Identifier:
keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1b:53:cd:d4:b9:2f:44:8c:cf:96:ea:63:74:27:dd:b6:23:
1c:99:7a:74:3b:af:c6:c7:ae:54:7b:ac:1e:21:a3:5e:76:24:
80:c9:f6:1b:8e:02:25:11:df:99:b2:c6:71:97:f7:d6:ec:06:
b9:d5:95:cb:b0:8c:e3:95:f4:5d:a3:f4:22:46:d2:de:4d:4d:
0a:fc:ac:ba:75:e1:85:ff:f2:fa:1d:f1:39:f4:0a:cc:1b:d9:
84:98:72:b6:da:6f:cd:e2:1e:68:f0:70:82:3f:29:85:1c:e6:
57:ac:fc:85:ca:41:34:46:8e:94:f2:5c:66:99:1e:eb:26:cf:
4e:a1:3f:88:56:03:06:6a:8f:31:50:d7:ce:19:de:72:d0:4d:
7e:f4:6e:60:a7:9f:46:a3:b8:e7:d9:12:fe:90:ea:ae:0d:d8:
b8:50:ce:35:cf:21:89:a0:a2:cf:c0:06:4c:45:b7:e0:1c:33:
f4:9e:80:4f:d7:30:25:c9:50:0b:5d:53:18:40:80:98:e6:5e:
1b:26:f6:8a:41:ab:ea:28:e3:ce:7e:a3:b4:37:02:94:74:16:
02:96:25:ee:a1:3a:6b:f4:78:68:a0:e9:11:be:87:d0:30:19:
cf:73:f4:74:19:bd:5c:25:db:cf:8c:c4:b5:a6:0b:23:7f:39:
9e:78:09:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:21:33 2026 by rpki-client