Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
File: 3fCc-W5fyHTuk5CXxWUci9hC5q0.mft (raw, json)
Hash identifier: QKcqdPa72Nt7xbX6vqkpR0KeycERaO3/LHFtHQxsfKM=
Subject key identifier: 37:35:20:E2:88:3C:D9:30:FA:17:7A:38:9F:7F:99:2A:25:64:29:40
Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Certificate serial: 01A13DEEF2B3F4FCF4851AF4B6CABED15FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
Manifest number: 07D7
Signing time: Thu 15 Oct 2026 05:00:32 +0000
Manifest this update: Thu 15 Oct 2026 05:00:32 +0000
Manifest next update: Fri 16 Oct 2026 05:00:32 +0000
Files and hashes: 1: 3fCc-W5fyHTuk5CXxWUci9hC5q0.crl (hash: /yp2OkppaH18WaeYXIQwHeQOCS9SCJmaLkpBHcLkVnQ=)
2: C60VxSBJDSdFCd1k1UlGSCrwJvY.roa (hash: KibtnUkNqe/Q4+yRw8o2hlvC70cIKXb1SxvsmfXdEPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:f2:b3:f4:fc:f4:85:1a:f4:b6:ca:be:d1:5f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Validity
Not Before: Oct 15 05:00:32 2026 GMT
Not After : Oct 16 05:00:32 2026 GMT
Subject: CN=373520e2883cd930fa177a389f7f992a25642940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:f5:a7:b7:a8:b4:e8:c1:da:bd:59:b0:10:
5e:20:e9:05:8d:06:dc:f9:b1:8c:51:d0:fd:9b:06:
bb:7b:8c:4a:05:e5:15:86:be:10:07:9c:fb:48:87:
67:7e:d1:fb:df:d7:d9:81:00:75:bd:d6:71:5a:16:
ed:29:df:d5:2b:67:29:02:2f:da:b3:49:db:51:31:
1d:d0:ff:64:9c:1d:79:54:b4:73:e3:06:e9:e6:88:
f7:97:a1:7f:21:80:22:53:4b:2d:be:33:fe:2d:db:
2d:50:f2:44:a5:13:84:c5:c7:b6:61:73:1a:c9:f3:
3d:32:0b:9b:00:28:29:0a:ee:8d:47:ad:2e:9c:c0:
d7:93:4d:15:4d:91:58:05:e5:72:46:23:80:d8:e5:
e5:1e:88:e4:ea:c0:6e:e6:f6:cb:d4:e8:6c:3a:5e:
35:f0:68:c8:29:a6:22:2b:89:59:42:dd:25:6a:8d:
03:6c:c6:f7:4a:b6:9e:fe:07:61:0f:e2:10:c4:d6:
b0:b7:63:8a:b3:ab:6d:bf:b8:7c:c4:71:dc:39:d1:
94:14:bc:57:f0:b8:25:8f:1c:8a:1d:e4:4a:9d:bd:
e5:2a:90:fd:12:80:a8:a8:93:98:5c:5c:d2:ec:f3:
c2:74:23:7a:75:8c:6b:b2:ef:26:9b:74:9f:fb:35:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:35:20:E2:88:3C:D9:30:FA:17:7A:38:9F:7F:99:2A:25:64:29:40
X509v3 Authority Key Identifier:
keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5a:5a:12:a5:54:68:d8:cf:d5:ad:17:96:ae:58:ab:5a:44:
2a:22:a3:b5:1f:bf:11:3d:cc:8a:82:00:83:76:73:6a:53:75:
94:6e:b2:4a:b7:06:03:9d:8f:90:24:38:4e:a9:a0:7e:bc:45:
1d:50:c7:2f:e1:5a:a2:c8:41:96:fe:7d:f8:75:a3:61:85:b3:
61:7b:de:80:3a:d6:4a:8a:16:44:61:5c:bf:b5:80:1c:3f:73:
a6:8b:fa:c9:49:8b:52:27:23:57:1b:58:5d:6d:67:08:ea:95:
2c:c4:80:31:e9:04:e9:1d:b0:c9:71:12:a3:9c:8f:30:6d:9b:
6a:d1:58:3d:c0:dd:ab:98:e3:4e:40:f6:07:21:91:54:46:64:
32:e2:62:c2:c9:25:f3:9b:fe:1c:8e:bb:73:14:ee:dc:71:17:
5f:60:a1:0d:5f:18:a7:91:4b:e5:e2:9c:a6:17:b3:9c:eb:01:
e3:0a:1c:9d:48:03:03:db:29:dd:91:1a:c7:43:cc:89:f9:20:
9b:e9:4d:d7:ac:5a:56:1f:57:79:fd:6a:b1:0c:be:ae:cc:51:
86:9f:34:de:aa:28:75:f3:8e:c9:40:40:3e:73:5b:44:6a:4b:
c9:86:bf:01:57:53:d1:6b:61:8b:22:b1:a7:d7:de:cf:90:74:
07:eb:a5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:57 2026 by rpki-client