Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: v4K2N79ryvB0SVeBnoD7FA7V7MZtr6LNAcxctCP+Yr8=
Subject key identifier: 2C:A6:34:14:2C:94:3B:9F:BD:72:F7:87:E1:21:99:50:4A:7D:64:61
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 019CAA8F6A699EBFFB7C5B71B620109B362D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 056E
Signing time: Sun 01 Mar 2026 18:00:51 +0000
Manifest this update: Sun 01 Mar 2026 18:00:51 +0000
Manifest next update: Mon 02 Mar 2026 18:00:51 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: VB+TqxSbKlp+JmqGP4OyXR7ZZoGKYrY4cCAv9ssyi0M=)
2: h8DfFuvqdUk7YoMeApQAXPJqjdk.roa (hash: ye1ky96HscedkMqsQUVtxrgYXUC8cIgsxg/lZeSLzu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:6a:69:9e:bf:fb:7c:5b:71:b6:20:10:9b:36:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Mar 1 18:00:51 2026 GMT
Not After : Mar 2 18:00:51 2026 GMT
Subject: CN=2ca634142c943b9fbd72f787e12199504a7d6461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2a:68:bb:29:45:66:a5:7f:b6:30:d4:17:23:
48:ff:8d:9d:31:16:44:99:70:a6:9d:49:ab:53:c2:
93:66:74:fc:0e:ae:34:0c:05:15:3a:46:96:2b:41:
a2:d1:af:f2:e5:0e:44:8d:2d:4e:2c:0a:d4:99:cc:
a7:8f:71:4d:44:e4:f8:f7:05:0a:ab:e8:20:fa:5d:
19:55:e1:ce:30:fd:a6:69:4e:d8:aa:a5:e1:03:d6:
71:0f:93:85:fa:02:61:0e:4c:f6:74:45:c9:17:5a:
1c:12:c8:74:da:2e:b1:81:53:7b:10:3d:fd:b5:9e:
e7:13:92:57:4d:a6:f1:e2:42:27:94:fd:45:ac:73:
d0:ad:e0:5d:e9:3b:e5:fd:b8:f2:96:8d:5e:7c:16:
09:40:77:c9:88:32:3c:e6:ed:2c:51:02:7c:d5:47:
82:f2:7c:fb:6b:7f:13:c5:e6:dd:86:dd:16:93:6d:
bc:14:9d:36:dc:85:8d:c1:ed:88:32:c9:23:09:36:
1e:e1:bc:d6:e1:a4:d9:3d:59:ac:d0:d4:e8:98:9f:
fe:2e:a4:25:cd:09:5e:07:6e:16:e5:0b:6e:37:c5:
59:29:c7:be:0e:25:44:bf:43:96:4f:d8:da:2e:e6:
5a:4c:28:bb:c9:ca:f3:ca:8d:c9:ad:66:2f:5a:58:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A6:34:14:2C:94:3B:9F:BD:72:F7:87:E1:21:99:50:4A:7D:64:61
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:07:b5:2c:66:1f:dc:7c:8f:16:60:34:d5:99:d8:38:cf:d8:
b0:a8:a9:a9:95:3d:0e:45:d2:70:66:b3:fe:27:46:40:c7:15:
ff:f9:94:b2:3f:39:28:44:6c:09:f3:78:dc:3f:a2:1e:aa:2a:
97:f9:16:3e:b0:eb:d3:06:71:13:0b:41:39:60:12:15:fe:b8:
73:ca:65:94:97:54:8a:f5:7e:f6:df:2d:e5:7e:59:0f:76:fc:
b3:90:f1:f6:5c:73:20:e6:46:d0:81:aa:e3:f1:e4:24:d9:89:
01:e1:64:f5:57:f8:62:2f:bd:99:2f:b6:fc:f6:41:a9:ee:6a:
f2:d3:28:bf:b4:fb:f7:b0:a6:55:ac:62:76:55:96:d7:25:38:
dd:34:6d:11:87:94:b1:ee:21:ad:40:2a:39:bf:49:0b:c1:ff:
d5:4d:85:c9:2f:8a:27:65:5f:37:4f:b9:1c:94:29:6f:e4:58:
74:4f:ff:d5:a8:bc:b6:2e:10:9b:d9:bb:20:fb:6d:18:8d:2e:
7d:a8:be:32:37:37:91:bf:50:ca:e9:7a:2d:44:9a:bd:3f:68:
d4:0d:08:0a:55:1b:72:00:82:65:40:59:97:89:b7:bc:eb:df:
2a:26:56:fa:40:66:98:3c:83:65:88:6b:5c:7f:72:d4:16:94:
15:22:6a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:55 2026 by rpki-client