Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: EO1BDbOYWiHIRiXW8IuATTc+LXyOgwpqdfqtbd0jb1M=
Subject key identifier: 22:FF:01:55:1F:A0:FC:04:59:5F:EC:D2:50:C5:D2:7A:7D:24:07:47
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 019DA3AF0CC35119A9ADAE172E4BF4D2529F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 05EF
Signing time: Sun 19 Apr 2026 03:00:51 +0000
Manifest this update: Sun 19 Apr 2026 03:00:51 +0000
Manifest next update: Mon 20 Apr 2026 03:00:51 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: 5sH9EQMr1DAs2v8e9fMqVSFwpCcH8Gz47GMUQr2iUXA=)
2: h8DfFuvqdUk7YoMeApQAXPJqjdk.roa (hash: ye1ky96HscedkMqsQUVtxrgYXUC8cIgsxg/lZeSLzu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:0c:c3:51:19:a9:ad:ae:17:2e:4b:f4:d2:52:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Apr 19 03:00:51 2026 GMT
Not After : Apr 20 03:00:51 2026 GMT
Subject: CN=22ff01551fa0fc04595fecd250c5d27a7d240747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:bc:40:11:66:8b:cf:8a:03:82:59:1f:8c:ab:
04:75:8d:36:48:99:dc:53:fa:9c:0e:44:92:fd:0f:
19:9f:85:31:3d:4a:1c:b3:ac:88:b5:55:6a:2a:6e:
70:cb:61:bf:52:61:d6:ab:51:be:e5:61:c8:86:91:
4a:55:30:9a:61:9a:9f:aa:27:44:5f:d7:25:c8:e6:
55:31:a4:28:69:da:f2:bc:eb:02:11:78:3e:a7:3e:
e4:75:45:bc:5c:ad:54:cc:10:93:e4:13:77:81:7e:
a9:02:86:97:15:34:81:da:54:f8:a4:51:ff:5c:26:
f9:31:58:88:01:5e:78:2d:d9:47:63:27:c5:82:0c:
9c:05:74:00:05:5d:35:a2:72:48:ba:23:15:3d:2b:
e7:a9:ba:b4:1e:b5:a6:e8:2b:4f:80:90:7c:96:36:
75:56:b7:26:f4:07:d0:f4:82:24:24:d3:d9:8d:50:
e0:23:78:22:8a:8e:d5:2e:6c:98:9c:22:0b:c6:a8:
82:52:33:c0:c3:97:02:5b:6c:a9:51:76:78:6d:05:
d8:ef:12:58:e8:d9:6b:96:48:2f:e4:88:13:b9:db:
ad:93:c5:e1:e6:da:af:13:38:fe:4e:70:2a:6c:43:
3d:bc:23:4c:0a:08:e5:96:0c:2d:6c:76:81:19:c2:
46:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FF:01:55:1F:A0:FC:04:59:5F:EC:D2:50:C5:D2:7A:7D:24:07:47
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:77:63:17:ce:44:45:10:4b:36:6a:2c:f4:f4:aa:03:66:2f:
5a:9e:68:b9:4c:59:51:ae:e3:0a:9f:df:92:68:49:c8:7a:dd:
ac:d4:f6:b6:8f:65:89:21:eb:a4:0d:98:6f:fb:63:fc:db:87:
da:f6:11:e4:46:71:97:c0:ce:fe:1f:80:38:18:d0:98:1f:97:
5e:5d:03:4e:45:12:11:dc:80:ee:c9:3e:a8:97:30:44:64:6b:
e6:c2:9e:bb:ca:63:60:ab:b7:76:f5:9f:79:66:ba:af:ca:8c:
60:aa:d7:8d:2e:65:9d:30:ed:cc:db:09:69:24:4f:ca:68:50:
c7:d4:d6:95:af:26:85:bd:dd:b9:36:3c:65:bf:1f:b7:84:66:
80:fe:0f:d9:10:3b:bc:9d:b5:60:a1:8d:a3:57:e9:00:bb:76:
1f:a8:ab:fa:42:86:15:95:02:ec:37:5b:67:a0:03:dc:8e:8d:
9b:ec:34:b5:3b:d5:81:1d:38:68:48:e0:2b:31:03:68:78:b9:
8c:79:3e:34:db:ca:e8:b8:f2:7a:73:2b:3e:ef:2c:06:d7:f7:
e7:79:44:c4:0e:13:ba:c9:be:c4:b1:b0:d1:02:4c:13:30:84:
10:8c:8e:7e:9d:22:d4:bb:f0:7d:5a:e0:bd:bd:44:bd:22:54:
69:3b:02:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrwzDURmpra4XLkv00lKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOTE1OGUzZTQxZjYwZmZiZjdlY2FmZjcyMzA3ZDNkYzk1
Mjc3ZjUwHhcNMjYwNDE5MDMwMDUxWhcNMjYwNDIwMDMwMDUxWjAzMTEwLwYDVQQD
EygyMmZmMDE1NTFmYTBmYzA0NTk1ZmVjZDI1MGM1ZDI3YTdkMjQwNzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bxAEWaLz4oDglkfjKsEdY02SJnc
U/qcDkSS/Q8Zn4UxPUocs6yItVVqKm5wy2G/UmHWq1G+5WHIhpFKVTCaYZqfqidE
X9clyOZVMaQoadryvOsCEXg+pz7kdUW8XK1UzBCT5BN3gX6pAoaXFTSB2lT4pFH/
XCb5MViIAV54LdlHYyfFggycBXQABV01onJIuiMVPSvnqbq0HrWm6CtPgJB8ljZ1
Vrcm9AfQ9IIkJNPZjVDgI3giio7VLmyYnCILxqiCUjPAw5cCW2ypUXZ4bQXY7xJY
6Nlrlkgv5IgTudutk8Xh5tqvEzj+TnAqbEM9vCNMCgjllgwtbHaBGcJGdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCL/AVUfoPwEWV/s0lDF0np9JAdHMB8GA1UdIwQY
MBaAFN2RWOPkH2D/v37K/3IwfT3JUnf1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUt
NDNkN2ViNzI1NTFkLzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUtNDNkN2ViNzI1NTFk
LzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAndjF85E
RRBLNmos9PSqA2YvWp5ouUxZUa7jCp/fkmhJyHrdrNT2to9liSHrpA2Yb/tj/NuH
2vYR5EZxl8DO/h+AOBjQmB+XXl0DTkUSEdyA7sk+qJcwRGRr5sKeu8pjYKu3dvWf
eWa6r8qMYKrXjS5lnTDtzNsJaSRPymhQx9TWla8mhb3duTY8Zb8ft4RmgP4P2RA7
vJ21YKGNo1fpALt2H6ir+kKGFZUC7DdbZ6AD3I6Nm+w0tTvVgR04aEjgKzEDaHi5
jHk+NNvK6LjyenMrPu8sBtf353lExA4Tusm+xLGw0QJMEzCEEIyOfp0i1LvwfVrg
vb1EvSJUaTsC3A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:39 2026 by rpki-client