Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File: 3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier: ik1Ja82A99gFA2gYVSI1RZY8riwumsPS4WUd+evl71s=
Subject key identifier: 57:26:07:3D:36:2C:78:93:E9:00:26:65:3F:9C:49:05:71:5F:4D:83
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer: /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial: 019FA974E90141CA72756379F15FD7ACC3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number: 06C5
Signing time: Tue 28 Jul 2026 16:00:39 +0000
Manifest this update: Tue 28 Jul 2026 16:00:39 +0000
Manifest next update: Wed 29 Jul 2026 16:00:39 +0000
Files and hashes: 1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: Ag949nOkWbX4fmm8xW5gPbKQxgoYrlgNY3vR0/kxeIM=)
2: PWpDsLMHEz8TOyrA-SyzsSx50x4.roa (hash: 3QKMuAcr+JgQ4o/2LQdy62QLuMBtccj8bJckjR3bodQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:e9:01:41:ca:72:75:63:79:f1:5f:d7:ac:c3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Validity
Not Before: Jul 28 16:00:39 2026 GMT
Not After : Jul 29 16:00:39 2026 GMT
Subject: CN=5726073d362c7893e90026653f9c4905715f4d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:ec:fb:0a:ae:f0:2c:28:8b:48:b0:aa:d9:
1a:54:30:29:b7:44:f0:0f:5d:2a:e7:e1:3e:ec:54:
68:45:cd:57:7b:bf:bd:43:54:b0:76:7c:f1:22:c8:
16:7a:a7:28:ed:55:54:3f:9e:86:b1:41:43:70:9c:
02:7e:56:78:fe:83:e0:e6:98:86:3a:eb:81:d5:d3:
2f:72:ab:94:e4:72:92:1b:d5:09:b4:b0:77:14:d9:
68:f5:a2:be:08:fc:1f:62:87:d8:ea:e6:75:d9:6f:
ac:9f:27:93:ef:e0:ba:a8:ea:02:33:50:14:62:30:
8f:8d:16:ec:e1:2c:ad:ac:4c:fd:4d:0d:e6:d8:c8:
cd:79:0b:01:5d:1e:b1:4b:a0:89:3d:87:af:ca:23:
80:00:9b:20:2a:e9:47:c3:9b:de:c2:58:53:0e:e7:
db:35:42:a5:db:9b:f6:1d:9e:13:ba:37:6f:26:c0:
b5:f4:cd:db:9c:f3:ba:da:98:9b:22:ec:72:c6:51:
df:15:ea:ba:f1:70:54:6e:c5:5b:57:31:49:03:e8:
39:1e:8b:e6:fc:87:9a:a5:a9:22:ec:53:8b:4b:be:
51:c7:05:da:10:20:9d:a9:e5:ad:b8:ac:1f:7c:16:
0d:ba:0f:3b:f8:4a:4e:94:3b:ba:6d:d9:4b:7b:48:
c9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:26:07:3D:36:2C:78:93:E9:00:26:65:3F:9C:49:05:71:5F:4D:83
X509v3 Authority Key Identifier:
keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d8:25:9e:a5:91:75:ce:35:61:0e:75:ee:4f:14:be:ab:e2:
8e:14:94:2c:25:e4:42:ca:48:7a:89:90:51:7e:35:e4:cd:70:
34:93:28:3c:50:e6:d4:02:ec:c8:4c:1e:fc:7a:6f:cd:4a:7c:
84:7a:c1:b9:94:ac:d0:02:8f:29:a2:92:2a:ed:a1:c7:dc:60:
1f:a9:19:10:6d:9b:ef:f1:3e:66:e2:e2:3b:67:21:21:75:1c:
a1:24:47:61:97:48:db:2e:8f:6d:ff:3a:0a:f1:06:74:11:a1:
96:6d:95:e6:25:9b:cb:f3:a3:5a:64:f3:96:90:0b:5c:d6:17:
f3:10:20:d7:0e:9f:3c:90:e5:5e:2e:52:d3:76:67:56:a9:18:
85:66:41:db:f3:e3:e6:d4:50:2e:bd:93:1c:5b:7c:34:1b:86:
ed:46:22:a2:e2:6d:bf:64:e5:88:5b:c3:0a:0e:95:62:b7:19:
5b:f0:dd:ca:8f:9d:ea:42:93:38:d3:d9:ae:32:9f:ce:3b:ce:
d6:88:69:76:84:e6:23:6f:ac:32:17:6f:36:6f:ac:3d:31:05:
5b:83:93:7a:7c:2d:b4:9d:e4:44:45:5b:ee:69:5a:fb:38:68:
01:01:70:ca:33:65:62:3c:16:ae:5e:8f:40:5b:a5:19:ba:51:
36:97:b4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:34:47 2026 by rpki-client