Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: aZO8X7NkvYI+1DYjHsoz2Sc3i69FmEz3VvYkhOo+1Fc=
Subject key identifier: A6:C0:51:82:CE:6A:FF:C7:C0:69:2F:7D:08:5F:99:77:96:99:5A:85
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 019D9818B024CBCFD9707BE009046542C8B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 05E9
Signing time: Thu 16 Apr 2026 21:00:47 +0000
Manifest this update: Thu 16 Apr 2026 21:00:47 +0000
Manifest next update: Fri 17 Apr 2026 21:00:47 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: SLcr0bdXk0mPRL20Td9vxdTFw+Kcm0OFk/MChTLnlSU=)
2: h8DfFuvqdUk7YoMeApQAXPJqjdk.roa (hash: ye1ky96HscedkMqsQUVtxrgYXUC8cIgsxg/lZeSLzu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:b0:24:cb:cf:d9:70:7b:e0:09:04:65:42:c8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Apr 16 21:00:47 2026 GMT
Not After : Apr 17 21:00:47 2026 GMT
Subject: CN=a6c05182ce6affc7c0692f7d085f997796995a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3f:4f:a4:e9:42:36:dd:c3:fb:ec:0f:b4:1c:
4e:5c:fb:1b:e5:58:35:88:e7:e4:70:5c:c3:70:40:
c2:8b:d2:e0:82:ab:51:f6:2e:b6:2b:fd:91:15:c4:
15:82:91:98:3c:13:7d:f7:5f:50:22:1f:3b:fd:48:
ac:35:73:50:d8:4b:b7:a3:87:b6:e9:bd:ae:6c:73:
84:09:35:3b:34:5e:34:b1:75:38:07:ce:24:46:ba:
94:a2:33:2d:46:e6:ba:57:25:dd:8f:e3:79:3e:9f:
49:09:38:23:f6:06:5d:28:0b:bf:f8:01:4c:74:c2:
9d:09:f1:22:12:3a:2f:28:06:d2:13:95:38:00:da:
78:e8:8b:da:a5:a0:a4:91:f2:9a:7e:15:84:7b:aa:
8d:66:3c:33:b1:d7:7b:61:bc:ac:f5:b7:41:ea:fa:
a0:56:73:84:f3:90:2b:73:73:c4:0d:da:c1:91:f9:
ab:ef:2b:a5:c1:74:67:7d:ac:18:36:32:9d:29:fc:
fe:ef:ca:02:b8:2b:2b:4f:7e:fd:40:a7:0e:08:78:
68:b2:b2:2f:b2:41:1a:ee:f9:5f:c8:5a:49:70:4e:
fe:61:00:b9:01:ab:df:04:26:9f:98:31:10:5c:15:
91:aa:6d:ca:02:57:d2:a9:85:df:57:05:eb:2e:39:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C0:51:82:CE:6A:FF:C7:C0:69:2F:7D:08:5F:99:77:96:99:5A:85
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:09:3c:57:b6:00:c7:d8:d1:b3:b7:5b:e6:51:0f:4a:5d:fe:
94:66:ba:26:df:c1:17:1e:33:99:13:8f:67:18:80:19:88:44:
58:6e:5a:a9:22:35:59:63:5a:51:a9:9a:b6:bb:bb:56:c8:96:
c8:25:27:03:10:f3:18:27:b6:1d:27:ea:12:f1:16:73:19:75:
d3:66:da:8c:f5:3d:14:a2:c2:fe:3a:dc:bc:ae:8b:1c:d0:38:
d1:3e:c8:13:63:7a:61:46:43:19:c6:3a:30:ed:20:66:3a:67:
60:b0:fa:26:9f:a1:86:57:c6:61:87:be:22:2f:5d:e4:b4:43:
a2:fd:50:8c:ff:b0:2f:d2:ff:53:bb:d2:58:8c:91:4c:a7:4a:
6c:06:cd:1b:8c:f4:97:35:48:03:bc:bb:28:4b:e7:c4:db:12:
07:0c:f9:89:b6:e5:60:29:7c:e7:a0:91:78:1f:15:f7:5c:de:
35:2e:ba:5f:13:89:f0:11:cc:56:58:6d:62:22:ba:1a:9f:c2:
ad:ac:ab:64:ae:39:7a:98:51:a9:cc:6a:2c:f7:0c:0e:73:90:
b3:e4:26:c1:60:f8:08:de:1c:e8:65:99:26:a4:7a:b3:a6:a7:
09:76:2c:db:af:52:4b:85:d6:01:cc:91:8c:86:c1:6d:b2:a4:
a0:f7:a6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:16 2026 by rpki-client