Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: 3lMYcSk+U4LbDqzv1Fb6tGHRaINYe0pW6f3tGdvYBz0=
Subject key identifier: 82:E6:C2:17:53:B0:0E:63:CE:77:5D:45:53:A8:71:20:EA:8F:73:A5
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 019FA93E09EEEAA61234F3E21B17E4741011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 06FB
Signing time: Tue 28 Jul 2026 15:00:42 +0000
Manifest this update: Tue 28 Jul 2026 15:00:42 +0000
Manifest next update: Wed 29 Jul 2026 15:00:42 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: yp9JtpOD3XFgJXMBC+MxwJRqxi4g3YKBFBmIFHUWKYk=)
2: h8DfFuvqdUk7YoMeApQAXPJqjdk.roa (hash: ye1ky96HscedkMqsQUVtxrgYXUC8cIgsxg/lZeSLzu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:09:ee:ea:a6:12:34:f3:e2:1b:17:e4:74:10:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Jul 28 15:00:42 2026 GMT
Not After : Jul 29 15:00:42 2026 GMT
Subject: CN=82e6c21753b00e63ce775d4553a87120ea8f73a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:b2:d5:28:e0:92:f1:1f:86:99:60:6f:b9:
50:e6:14:5d:9b:68:ce:f7:22:d1:8e:f1:17:dc:da:
9a:27:d1:7c:1f:63:df:08:6c:ce:07:e6:06:8b:d5:
fb:40:13:47:c9:13:20:8e:9e:2b:21:fb:fb:d2:aa:
ca:52:04:19:29:7e:7f:d0:e6:74:28:bb:4e:6e:4b:
cd:67:34:01:4e:9b:ac:70:94:72:f2:8e:18:bf:b5:
29:5e:99:8c:ab:71:39:7f:55:35:58:21:6c:5b:74:
f7:72:a6:c0:00:99:25:87:0e:0b:e5:c7:54:41:b0:
f7:b8:79:a7:3b:f7:e0:f1:13:59:5d:df:cf:d5:68:
45:a3:7a:2b:de:42:e9:06:4b:f8:0b:57:4c:9f:d9:
c3:a9:72:5b:7a:5d:b8:4c:97:9c:90:4a:a9:22:af:
98:cc:b7:7c:fe:58:82:d3:29:c6:04:07:53:cb:8d:
1c:7d:48:a2:05:8f:3d:20:70:c7:a4:50:74:74:18:
11:c9:ba:46:ee:8e:4c:be:a2:0b:ea:52:a0:58:9f:
e6:d4:05:00:7f:a1:33:61:9f:a0:c3:0f:5b:f5:8a:
34:2f:af:ff:33:8c:53:03:4b:7a:af:99:16:59:e4:
ec:3b:2e:5e:57:b8:3a:60:be:6a:c3:c6:f1:d5:f8:
1a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E6:C2:17:53:B0:0E:63:CE:77:5D:45:53:A8:71:20:EA:8F:73:A5
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:49:95:ab:5a:da:ab:66:1d:30:46:0a:e8:6c:5e:0e:7e:9a:
2a:df:79:3a:d9:5a:f6:47:e0:e1:cc:29:25:03:54:dd:ed:31:
f4:d3:df:27:72:fe:28:36:8c:d7:9e:88:e6:ea:89:c6:5e:10:
52:f3:a0:7f:c9:db:5b:fe:94:44:6c:f4:a4:68:02:ea:b7:a3:
ae:9f:f2:dc:b0:c9:ba:88:31:8f:0b:3c:bc:0d:e8:85:81:ad:
c2:ce:3c:7c:d0:43:03:7e:45:22:34:79:f2:23:f6:60:9e:54:
df:e5:f3:63:55:90:98:a0:a3:bf:13:83:13:f7:e8:d8:bd:a8:
7b:39:df:70:5e:2b:8b:ab:d5:47:5d:d3:44:0c:42:4b:64:5c:
ee:1c:21:0a:bd:fb:4f:a5:67:58:13:1f:74:51:85:6a:83:ee:
76:3c:a3:2a:df:19:a1:e3:03:02:94:1b:a4:9b:53:b0:e1:96:
ef:e4:62:59:ca:ae:2b:9a:ae:f9:a9:f8:38:60:04:ba:ba:2b:
87:05:0d:fe:0f:18:7c:c8:9c:b0:be:85:5a:30:ce:fe:fe:8e:
d5:1f:74:9e:c9:40:1f:ce:62:f7:b5:c9:12:43:78:9c:a1:1d:
f0:70:f3:e2:4c:86:89:d8:07:80:5c:b1:32:88:4b:a4:94:ca:
3e:74:67:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:11 2026 by rpki-client