
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: q/mpTx9Ricj3l33A8RQsMP4vLhSPj9dPIimnlazMPow=
Subject key identifier: F9:E1:F4:2F:47:E5:C2:92:17:60:C0:8F:74:B1:B2:E4:F9:78:54:A5
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 01A0C8FCD2E8A33D13F2B187FBEFB9F0FEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 0790
Signing time: Tue 22 Sep 2026 12:00:07 +0000
Manifest this update: Tue 22 Sep 2026 12:00:07 +0000
Manifest next update: Wed 23 Sep 2026 12:00:07 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: bBkxIRoQJq0OA6JRGRLFY+oEve5sU024VVyOPxGkK1M=)
2: h8DfFuvqdUk7YoMeApQAXPJqjdk.roa (hash: ye1ky96HscedkMqsQUVtxrgYXUC8cIgsxg/lZeSLzu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fc:d2:e8:a3:3d:13:f2:b1:87:fb:ef:b9:f0:fe:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Sep 22 12:00:07 2026 GMT
Not After : Sep 23 12:00:07 2026 GMT
Subject: CN=f9e1f42f47e5c2921760c08f74b1b2e4f97854a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fe:aa:3a:a9:2c:74:cf:f1:bf:75:ee:82:31:
b1:ab:f6:9a:36:7c:7c:5a:c5:c3:4b:12:16:d8:ac:
d2:a7:6a:7c:be:3b:2b:31:25:e3:72:50:d3:e3:5e:
52:78:d3:70:15:02:28:04:29:77:d0:50:68:89:cb:
69:8e:45:09:5b:59:6c:e9:a1:89:8c:6c:63:a1:85:
39:31:62:29:6c:19:51:a2:e4:0c:2d:f1:16:e4:a6:
01:74:a1:32:cb:1d:7d:f5:ee:ef:8c:fb:1a:ab:6c:
77:69:b6:75:a5:33:2f:9a:d5:73:c4:0d:58:a9:6d:
9d:81:68:aa:8f:0f:33:76:bf:dd:15:16:da:f2:77:
56:12:c8:15:23:94:bc:3b:bc:25:65:c1:8c:d4:e7:
9f:ec:b4:93:52:fe:42:13:db:c0:2a:d6:94:22:61:
94:20:0f:88:18:8c:78:d4:05:8a:c4:f4:4f:52:f1:
b2:91:03:f8:f0:14:e5:25:62:8a:94:57:22:51:51:
82:0b:c3:20:d9:80:0e:f4:6f:6c:d1:bc:36:4b:44:
e3:92:60:eb:5d:6a:50:bb:eb:58:75:a1:46:d2:70:
2c:b5:33:a5:72:3b:11:46:f2:b3:d3:37:1a:78:1e:
a1:78:87:7b:cc:db:7a:69:87:6d:e6:0e:ea:12:59:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E1:F4:2F:47:E5:C2:92:17:60:C0:8F:74:B1:B2:E4:F9:78:54:A5
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4e:ee:92:08:c0:35:63:ed:f0:f0:63:ec:77:60:06:2d:a1:
f4:13:57:82:04:ec:fe:15:ac:e8:e3:25:ec:ab:2a:37:b0:bb:
aa:96:ad:90:49:59:88:ca:81:78:8e:04:a2:df:d2:31:5d:6d:
98:2c:47:61:3a:c8:c5:23:3a:73:27:17:84:a7:27:7f:9e:70:
34:78:9a:13:34:c8:4a:ab:4c:21:42:08:5e:d7:47:d1:b1:e6:
c7:97:0b:a3:de:f6:1b:6f:65:5d:f9:3b:09:ef:0b:9e:1c:ca:
fa:3f:17:e1:14:ae:33:e8:57:ab:3e:7d:fa:1e:0d:f8:b4:bc:
85:ea:0b:f6:b8:8c:79:3b:e6:ff:09:fe:e4:8e:bc:d6:5a:96:
07:d1:d0:8e:c5:b9:c2:5a:fb:e2:2a:0b:eb:00:a3:8f:32:fa:
dc:15:c1:bd:80:93:0d:fd:c8:21:e8:f5:dc:95:66:92:24:95:
9a:c7:91:0d:10:d7:95:cd:a0:59:cf:17:4f:44:7f:08:03:40:
97:bb:99:fa:67:b6:35:de:69:2a:c3:d9:94:73:76:ad:ca:1d:
4a:e7:b6:58:55:15:90:0d:1b:19:76:eb:e4:05:f7:04:62:7b:
2b:9b:86:04:90:5c:c5:03:90:53:df:98:bf:a4:b9:9c:fa:68:
7f:17:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:11:15 2026 by rpki-client