Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: 2Y1SvFOhE9OSULCZGtlM0hYDKZYZRUsRH6dNl55gV2Q=
Subject key identifier: AA:04:60:40:20:C6:FC:1A:6E:49:4E:D1:A4:C2:BF:EA:B9:BD:0F:5A
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 01A0C39FFB7979EF3BB72B80A9FFEADB292D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 11:00:36 +0000
Manifest this update: Mon 21 Sep 2026 11:00:36 +0000
Manifest next update: Tue 22 Sep 2026 11:00:36 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: D73yxKgnTtaDvQOVJNbYhEbUGwPk/eBOvApRmMNC4OM=)
2: 3zlYESujx6iqyh6hQsCczNEcHfA.roa (hash: giiowx0wopsav1ocUyq7di4cnnYmyvwdPI251v0t4Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:fb:79:79:ef:3b:b7:2b:80:a9:ff:ea:db:29:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Sep 21 11:00:36 2026 GMT
Not After : Sep 22 11:00:36 2026 GMT
Subject: CN=aa04604020c6fc1a6e494ed1a4c2bfeab9bd0f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:3b:10:70:35:cd:9c:cd:49:77:8e:9f:be:
d4:06:95:27:7c:0d:d5:73:09:43:85:cd:54:54:81:
6b:2b:d8:9e:4b:78:bd:dd:5a:18:f6:ea:44:ee:58:
11:73:16:3d:6d:ca:fb:67:74:30:2f:e5:45:4e:ee:
90:a1:1e:88:c2:ca:3e:62:54:6b:8d:77:2c:c0:b6:
28:b0:d5:ff:ce:cb:1e:2b:90:c0:19:12:45:bd:0a:
08:2c:a0:23:42:69:2b:4b:ce:05:3f:b3:b2:ae:16:
06:f6:4a:a4:ea:01:df:79:6a:2d:91:e8:07:e1:68:
ce:40:c6:40:b5:a6:a5:39:88:d8:0c:c3:75:35:d1:
d0:04:e2:93:ad:14:f6:f5:c3:f4:bf:3b:a5:e7:b8:
34:af:61:56:95:de:21:92:4d:60:db:35:d7:c5:00:
8d:26:c1:d9:d7:93:c6:51:f0:32:cf:96:49:e9:c7:
0b:bf:67:30:4e:6f:4c:1b:29:9b:14:09:1f:a1:7c:
fd:43:fa:17:29:11:a6:dd:a9:37:f7:16:4b:7c:0c:
ef:4d:80:6f:f8:cf:16:5e:aa:82:13:30:ea:7a:96:
c4:9c:01:47:91:5f:19:e7:87:22:cf:e4:3c:d0:37:
62:db:b6:f8:ac:65:26:4b:1b:a6:04:55:7a:36:bc:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:04:60:40:20:C6:FC:1A:6E:49:4E:D1:A4:C2:BF:EA:B9:BD:0F:5A
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:8b:c8:b9:17:15:7e:4a:b1:8f:ab:73:95:c0:18:42:bd:0e:
93:06:b6:53:ab:a6:eb:e5:7c:58:fa:c2:27:33:5c:a7:6c:37:
d0:f2:11:bb:db:29:f4:d8:b8:a9:c4:8b:0e:20:b2:dc:ed:c4:
d2:13:b2:92:d7:86:f2:ef:9d:8e:fc:1a:c7:23:a8:e1:4c:f3:
7c:20:b1:61:3a:40:8c:02:10:03:45:9b:b1:ac:1a:68:27:d2:
9d:f4:67:f4:94:46:91:8e:6f:ac:17:f4:02:fb:c6:2e:a5:8f:
20:cd:1c:52:37:3f:4d:93:84:19:1f:be:e9:e5:2f:60:cb:c5:
40:08:c2:af:73:15:73:be:72:83:83:89:bc:b3:6d:8f:6c:6d:
b9:06:83:07:73:fe:b4:7c:05:f7:df:0c:17:7e:f1:cb:03:3e:
38:1a:e5:e4:64:ab:d8:c4:b1:25:88:e5:f5:38:f2:da:f1:12:
86:5d:da:1c:82:ea:b1:d0:c4:4b:bc:4a:28:9a:dc:e0:26:9a:
a9:87:38:d6:99:c2:85:e9:71:48:67:03:58:e7:3e:35:9e:b7:
de:fc:96:e8:df:37:15:79:bc:ec:2f:bc:e4:e6:b7:bf:cb:66:
26:de:f7:67:79:a2:da:c6:fe:be:3b:50:02:36:d7:da:78:ab:
72:d5:fd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:12:22 2026 by rpki-client