Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
File: 3ZapfPzU67oF9hUkAJ8sFco0P8U.mft (raw, json)
Hash identifier: N4+EGaCRNW5sLoXzA0Fy16kWWWNFqFTfYAs3ge5UgRo=
Subject key identifier: FB:C3:D1:CD:11:59:90:9C:FE:2A:F0:27:7B:11:F4:65:3F:91:AF:B2
Authority key identifier: DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5
Certificate issuer: /CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
Certificate serial: 01A136DAA349056FA817395844631F27D3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
Manifest number: 02FE
Signing time: Tue 13 Oct 2026 20:01:00 +0000
Manifest this update: Tue 13 Oct 2026 20:01:00 +0000
Manifest next update: Wed 14 Oct 2026 20:01:00 +0000
Files and hashes: 1: 1-mqYp0wbZd3hGyth9JUHZNjDZwI.roa (hash: r3TYLoZQHdWU8RlOoG6zBAduGAPckAKmqupyfEfHJFg=)
2: 3ZapfPzU67oF9hUkAJ8sFco0P8U.crl (hash: JEmrA3iBK1Tb1VWEzJmwxGL9oCC53NjZkdsW8ysx75U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:da:a3:49:05:6f:a8:17:39:58:44:63:1f:27:d3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
Validity
Not Before: Oct 13 20:01:00 2026 GMT
Not After : Oct 14 20:01:00 2026 GMT
Subject: CN=fbc3d1cd1159909cfe2af0277b11f4653f91afb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:8e:1e:88:9a:a5:ef:58:db:9f:4e:a2:a9:
e9:7a:f3:02:fa:ee:f5:7a:03:74:1c:3a:5a:29:96:
7e:09:17:19:51:5b:19:5b:da:79:2f:ea:13:8e:cb:
58:47:84:af:e9:15:21:67:03:ff:43:87:d6:2c:bb:
bd:d0:2a:c0:aa:6a:a5:40:65:15:a7:78:e3:2b:1b:
39:57:61:28:c2:78:7c:14:2e:f2:79:0d:4e:75:35:
db:30:43:17:00:14:40:de:f7:20:88:9c:1f:81:40:
ea:88:58:0e:0b:a0:ed:01:ea:70:a9:27:2a:1b:71:
b2:3f:49:22:68:e3:79:fa:da:2e:8f:63:cd:d6:df:
8e:42:c1:8f:63:8a:7a:7c:29:16:e6:cb:c9:13:42:
0a:4a:8b:25:dc:f6:4f:3d:37:15:73:45:6d:c4:11:
f1:9f:ea:5a:32:5b:59:8f:8f:dd:89:f7:77:88:fa:
04:15:fc:e3:7f:58:2e:48:33:98:83:f3:67:27:bf:
c8:0e:76:5b:24:9c:6a:49:12:e5:4b:00:e7:90:3f:
3a:16:01:3f:8f:c8:2e:39:7c:b1:ba:00:48:e6:29:
dc:1a:88:5b:30:4c:0e:13:04:86:7d:1b:c9:be:ba:
7e:65:9b:8b:23:59:31:73:eb:fe:15:54:de:ea:3d:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C3:D1:CD:11:59:90:9C:FE:2A:F0:27:7B:11:F4:65:3F:91:AF:B2
X509v3 Authority Key Identifier:
keyid:DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1e:02:0a:90:1b:95:4b:ab:aa:2d:26:5b:f4:0a:b8:cc:df:
d3:b2:12:b1:4c:c5:4b:8a:79:4a:ca:d9:6d:e0:9f:8f:7f:69:
4b:52:53:f7:1e:93:89:c5:7b:82:71:a5:23:95:ca:fe:1f:1c:
92:9e:1b:23:9b:39:b2:0d:87:9b:04:80:74:df:53:8b:26:dc:
f3:a8:62:e6:3b:7d:a5:e3:ff:6a:60:be:96:6f:d4:8c:79:e9:
a1:1f:c8:f2:31:40:97:33:7d:3d:5a:92:2c:ad:2a:08:db:cf:
39:79:4d:60:aa:c4:5b:01:99:a5:08:f7:b3:99:98:0d:17:88:
f5:53:29:33:44:f5:5a:81:88:7c:de:2b:cc:93:95:e3:54:ab:
37:a1:1f:04:b7:3c:e1:55:01:3b:6c:35:35:d1:31:39:5f:b1:
e7:1c:4b:9b:bf:5b:9a:b7:8a:83:a9:3d:b1:fb:66:e6:2f:8d:
dc:79:f0:5c:67:71:af:c7:09:ce:fa:34:5c:6f:1d:da:bb:73:
6f:c7:38:76:a6:67:fe:7b:f3:2b:60:eb:eb:99:25:9d:fe:04:
1d:a0:f0:b5:2a:53:30:16:9f:3f:9b:7c:60:f0:01:de:31:1f:
a8:e0:62:cf:55:75:9f:de:25:68:3e:0f:6b:43:d5:34:b2:28:
95:de:69:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:12:49 2026 by rpki-client