Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier: JAZ70RiS8OPPj7omsEC4FsqziQlMuBvB6VLWdn8axSA=
Subject key identifier: 3F:3F:F6:EB:29:13:40:44:C0:E2:2D:2F:1D:A6:0F:41:C6:00:E0:AB
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 01A0CA46700AAFFEF64B4242B7C7FEE882D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number: 0F3A
Signing time: Tue 22 Sep 2026 18:00:08 +0000
Manifest this update: Tue 22 Sep 2026 18:00:08 +0000
Manifest next update: Wed 23 Sep 2026 18:00:08 +0000
Files and hashes: 1: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: DQ7FAsFoP9WroTrFYy5MSfibE3/OEnZ7ru0k593Gz0o=)
2: 9SyzUnhmTlTJs5-Xn7cO2eyXMsA.roa (hash: 2gNqd/WCXuzG4uv+GgfK3/vw/CmTadqijVQ5eKcLJXU=)
3: nSQSUiEOU-zHAWMn8ZKwogzTrM8.roa (hash: AC48o16lY1gJTiGIXk1jqfPVhEWM02EA+wJRG7sg7HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:70:0a:af:fe:f6:4b:42:42:b7:c7:fe:e8:82:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: Sep 22 18:00:08 2026 GMT
Not After : Sep 23 18:00:08 2026 GMT
Subject: CN=3f3ff6eb29134044c0e22d2f1da60f41c600e0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:8c:c2:e6:5f:c2:c8:d6:28:31:28:89:74:
17:14:a5:26:6f:7d:66:c4:47:a0:8f:65:4d:78:bb:
cb:51:e7:36:a5:d7:1e:bf:03:ff:69:cc:f6:6e:ae:
5e:2c:d5:9a:f5:88:05:15:81:a2:f7:a9:43:23:1d:
cd:f4:2d:2d:f4:a9:a5:f8:03:61:38:ce:f7:94:9f:
67:9e:8e:f2:ac:db:ec:0b:03:a5:4e:6e:9e:b7:24:
db:80:c0:70:4c:9a:33:cd:71:f6:b8:d1:9c:d2:ea:
70:2b:a9:a6:3a:2a:26:45:9c:f3:66:41:6e:3c:c9:
dc:73:e9:2c:6d:35:82:71:48:25:e4:66:c6:10:7a:
11:07:f0:32:21:82:dd:da:69:f5:13:73:70:53:0c:
36:45:db:1e:64:69:e1:ac:4a:c2:dd:7d:3a:9c:db:
4d:3b:b0:54:e1:39:f8:91:70:f5:93:fb:b9:97:51:
3b:c9:af:e8:19:26:f7:25:61:d0:4d:58:4c:78:d5:
4a:37:c8:91:4e:ac:f7:6a:da:ef:6e:d4:54:dc:16:
d0:8b:0e:99:d3:e9:6b:6e:ed:2b:a3:e1:30:c5:97:
e5:32:8e:7b:4f:33:88:de:92:0c:c6:b3:a2:1d:c4:
92:0b:88:37:1d:72:86:88:96:73:be:31:a1:c7:97:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3F:F6:EB:29:13:40:44:C0:E2:2D:2F:1D:A6:0F:41:C6:00:E0:AB
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b3:00:f8:67:a6:93:d9:7b:4b:05:c1:52:82:d8:4f:f2:c8:
c4:aa:74:2a:12:bd:4d:32:ee:87:d1:0e:7b:68:d4:10:3b:21:
89:1d:45:f6:1a:02:87:26:c6:93:71:70:df:68:e3:85:76:a0:
25:74:63:52:f6:24:5a:95:1a:e7:67:e6:ff:e0:9c:7c:7b:fc:
4b:8f:ac:28:67:b3:ee:66:c1:a4:ee:08:10:07:5a:99:fd:1d:
e7:3e:b6:6d:95:92:7f:80:d7:2c:43:11:a1:c3:23:66:8b:aa:
c7:e8:dd:3a:c4:37:75:3a:44:ef:11:5e:a1:0d:56:4b:39:5c:
a4:03:27:c8:96:ce:b5:0a:5c:61:be:ab:60:46:12:57:e5:66:
c7:8d:6f:43:55:d2:0c:15:fe:2f:d6:dd:ca:e8:e0:b4:e9:19:
1f:3a:a2:44:9f:ad:db:b0:09:01:3e:57:52:b7:3d:ea:43:6f:
f9:0d:f3:6c:8c:00:b8:6c:d4:1c:d9:9d:de:42:71:9c:5b:b7:
eb:9e:61:fb:f9:1e:ae:2b:36:47:42:f5:e6:7f:f1:bc:ad:98:
38:18:b9:87:d8:61:03:60:ee:b7:f9:36:e0:3b:82:2c:2d:40:
0f:5f:7d:41:b5:b4:3d:13:7c:cd:08:c9:b3:4a:af:7f:ed:7f:
a8:d4:05:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:18:47 2026 by rpki-client