Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: gzNC3nA47GH8+ew1mKOaEKbbzvRHzsnmm8/9TIwFNVw=
Subject key identifier: BF:A9:60:73:F2:AC:11:C2:F1:48:20:1A:06:E0:FD:16:63:F5:FD:3A
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 019EBF911DADB484CBC45314C2248C59919C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 0682
Signing time: Sat 13 Jun 2026 06:00:19 +0000
Manifest this update: Sat 13 Jun 2026 06:00:19 +0000
Manifest next update: Sun 14 Jun 2026 06:00:19 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: sr0oNh3MAmZHQBxk/keqChCYmm6aGtNrGeI8agwmteA=)
2: h8DfFuvqdUk7YoMeApQAXPJqjdk.roa (hash: ye1ky96HscedkMqsQUVtxrgYXUC8cIgsxg/lZeSLzu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:1d:ad:b4:84:cb:c4:53:14:c2:24:8c:59:91:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Jun 13 06:00:19 2026 GMT
Not After : Jun 14 06:00:19 2026 GMT
Subject: CN=bfa96073f2ac11c2f148201a06e0fd1663f5fd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:87:e4:b2:21:42:15:8d:e2:3a:d9:bc:88:
15:55:a8:51:1f:72:a5:0c:5f:f9:9e:19:24:ce:2f:
8c:4b:a7:e1:8e:38:e1:46:8e:e2:da:d8:6c:07:80:
81:db:ee:1f:8c:d4:b4:e3:dc:25:26:e9:c3:36:11:
93:bf:cf:e5:6d:a0:5c:1a:13:3f:e2:7f:de:12:42:
2c:79:c5:3d:9c:25:0b:04:2c:0e:74:2e:7d:a8:ea:
1e:01:62:14:8b:4f:aa:a5:e7:8b:2b:1e:44:ab:3c:
fd:4e:97:e1:b0:b6:ee:e3:49:f9:71:0e:73:1a:c7:
1d:47:e9:f9:75:42:d1:de:8e:d9:c6:73:17:21:42:
69:29:5b:b6:ee:f0:16:eb:c2:c3:b3:b3:c2:e4:d0:
f8:52:64:b5:eb:7d:e9:71:70:24:65:e0:99:0f:b8:
3d:10:b7:8d:17:40:8c:e9:19:20:56:d8:84:9d:54:
f1:23:6d:db:cf:99:e2:2c:5e:0f:56:b5:81:0f:eb:
1c:14:a3:81:3c:47:57:6b:74:62:bc:9c:8c:3a:03:
7c:fa:da:67:8c:8d:fd:ad:83:0a:39:55:10:44:a5:
35:35:1a:f4:e1:7a:1b:51:96:33:31:f2:a2:b9:50:
eb:7a:fb:11:c2:78:a8:3a:13:2e:5d:a1:9d:02:01:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A9:60:73:F2:AC:11:C2:F1:48:20:1A:06:E0:FD:16:63:F5:FD:3A
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cd:fc:d3:04:53:d1:b7:37:67:d0:c9:45:58:27:b7:00:eb:
a8:d0:d2:c4:42:1a:a0:ec:5f:d8:79:6f:a4:c0:92:c1:02:40:
51:6f:b4:81:12:52:b2:26:b3:20:90:d8:b4:ff:82:eb:66:08:
a2:32:6a:03:53:ca:54:23:91:40:4f:66:38:d7:bb:05:a2:e5:
c7:d0:0b:b2:60:4b:15:ba:3e:aa:f3:eb:67:0e:1c:c4:e3:a4:
5d:af:9e:86:8f:dd:54:76:65:da:cb:4f:ae:20:33:99:5f:8f:
cb:fd:97:c5:58:b3:e0:bb:06:5e:89:73:22:f6:e1:dd:28:86:
1d:06:fd:8c:68:bd:c8:01:a1:cc:1f:c5:68:a7:d7:12:54:a5:
10:93:61:f8:f0:8e:ba:0b:bb:79:55:39:06:94:47:2d:ff:b5:
4d:13:9d:02:ae:a8:3b:1e:55:32:bd:1c:7d:c5:a0:a5:b1:ca:
17:75:ed:57:0c:6e:da:67:eb:c8:c0:da:69:b6:dc:02:d4:c6:
ac:0c:b3:c3:c8:85:b3:77:c3:9f:5b:72:c5:c9:4f:fd:20:85:
40:d1:42:03:dd:ee:ad:a1:c0:57:e2:f6:64:33:46:4c:ea:ef:
82:95:04:5b:8d:6b:e4:0b:e2:69:66:a0:8c:63:5b:5e:1a:2d:
27:c9:b0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:19 2026 by rpki-client