Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File: 3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier: 5HmxrQBONL1OR8860Sh7qfDoWbfWd/G/M/kenxaC5ho=
Subject key identifier: 67:43:55:7D:8C:4F:12:CD:41:F3:29:44:CF:35:B4:7D:97:42:9B:18
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer: /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial: 01A0C557AAA7E978E9D1E85CF8DDB88ABBA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number: 0758
Signing time: Mon 21 Sep 2026 19:00:51 +0000
Manifest this update: Mon 21 Sep 2026 19:00:51 +0000
Manifest next update: Tue 22 Sep 2026 19:00:51 +0000
Files and hashes: 1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: vU9D//Sp1QZy93nrB2ciJENdbsoxfHREID/7FwPQzXI=)
2: PWpDsLMHEz8TOyrA-SyzsSx50x4.roa (hash: 3QKMuAcr+JgQ4o/2LQdy62QLuMBtccj8bJckjR3bodQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:aa:a7:e9:78:e9:d1:e8:5c:f8:dd:b8:8a:bb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Validity
Not Before: Sep 21 19:00:51 2026 GMT
Not After : Sep 22 19:00:51 2026 GMT
Subject: CN=6743557d8c4f12cd41f32944cf35b47d97429b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:86:9f:1c:8d:c9:13:73:64:4e:5d:92:79:
a8:09:58:c5:60:ae:24:e6:8f:22:ba:59:92:5b:70:
80:1c:c2:4b:51:65:1d:bc:ef:c6:27:db:6f:2b:47:
75:cd:7a:b2:6e:a5:ef:a3:94:12:97:c3:16:b6:13:
40:0c:02:ab:97:c1:3e:07:70:45:63:33:80:ef:52:
e2:30:ff:4c:62:9e:ae:c9:96:8f:e9:93:61:67:8b:
a9:c8:ec:d9:51:86:10:08:71:fc:20:d7:58:19:83:
f5:17:87:4f:f9:51:27:66:05:1e:3b:7f:73:b4:16:
35:f0:e1:e8:6f:cc:be:c3:87:a9:76:10:4f:45:cd:
22:01:39:cf:cd:1e:7e:3a:cc:ea:b9:10:88:f6:e8:
25:34:cc:53:d8:cd:24:d3:90:61:f1:73:b3:b6:ca:
6d:9a:dd:87:6d:44:0f:03:5c:be:ba:23:cf:78:8a:
ab:bd:a1:44:2d:e2:a6:08:f4:ae:ef:c7:b6:1f:15:
d9:5a:ec:f7:e8:e5:41:dd:b4:13:b1:dc:80:e5:97:
28:7f:a1:a3:3b:d7:d1:71:9c:54:2e:44:54:5c:40:
38:28:70:d8:69:c9:b7:8e:30:7c:84:32:eb:c9:d5:
ad:da:bf:7d:b4:90:7d:e8:ef:62:00:bb:00:a9:25:
ea:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:43:55:7D:8C:4F:12:CD:41:F3:29:44:CF:35:B4:7D:97:42:9B:18
X509v3 Authority Key Identifier:
keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bb:ea:66:28:97:57:ff:c6:5a:ff:18:e1:d7:e7:4e:49:48:
1d:09:1c:f6:e7:45:34:64:fa:fa:51:60:f9:a1:21:c5:d5:86:
4a:ee:d4:e0:20:5c:35:d6:a9:78:08:6f:d4:52:ba:5a:d8:54:
bc:e1:11:2b:dd:cb:91:7c:ab:73:18:85:4a:d0:64:a1:59:d7:
15:da:01:72:c4:c2:60:08:27:ba:f4:8e:ac:87:78:dd:c6:03:
02:e2:82:1f:9e:eb:ed:97:63:68:41:a9:b7:6d:49:f5:fa:e7:
58:c4:ec:fd:3b:b2:32:87:7f:ec:f0:47:d1:4b:fe:95:d4:a2:
e9:f8:e6:93:df:98:7a:fb:bd:47:31:b5:af:d8:2f:a5:5e:b0:
30:6d:d3:0f:49:1b:06:58:bd:64:db:5b:37:fa:6a:e0:64:61:
29:55:41:e2:02:73:b7:d6:bc:b2:2a:df:2b:40:a3:50:b5:a2:
85:46:64:0b:eb:21:e8:57:ec:86:82:c9:f5:df:da:e5:e2:f7:
13:a8:b2:a0:2c:c1:40:7a:24:d3:01:db:dd:5b:a2:c2:83:b2:
ae:34:c4:e7:3a:9e:06:33:ac:26:64:20:2f:71:01:be:a3:fa:
73:db:14:e8:72:67:54:cf:01:73:de:2a:0c:98:d6:18:70:22:
26:7b:ce:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:31:07 2026 by rpki-client