Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File: 3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier: +HV2s2EVFlJl4NcjcPO2Yp1xsWF8AhP4ua4cdLdEd3o=
Subject key identifier: 2A:4B:25:04:02:F8:BB:61:33:75:D6:FD:9C:D0:AA:E6:78:49:27:30
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer: /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial: 01A13F02ABB7A1838F9AC4CA8EBD00A49AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number: 0797
Signing time: Thu 15 Oct 2026 10:01:41 +0000
Manifest this update: Thu 15 Oct 2026 10:01:41 +0000
Manifest next update: Fri 16 Oct 2026 10:01:41 +0000
Files and hashes: 1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: TPVsrmq6hsE1O/Mn4l4JeRuqrhFF/V8C6xtEET1/KcY=)
2: PWpDsLMHEz8TOyrA-SyzsSx50x4.roa (hash: 3QKMuAcr+JgQ4o/2LQdy62QLuMBtccj8bJckjR3bodQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:ab:b7:a1:83:8f:9a:c4:ca:8e:bd:00:a4:9a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Validity
Not Before: Oct 15 10:01:41 2026 GMT
Not After : Oct 16 10:01:41 2026 GMT
Subject: CN=2a4b250402f8bb613375d6fd9cd0aae678492730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:e9:3d:49:90:54:e2:e2:e4:e1:f3:ee:69:
53:0a:d3:87:57:c5:63:5e:bc:a0:6c:09:b6:00:9d:
79:db:3c:0d:3a:b5:01:c0:1f:39:1c:ac:ee:5c:00:
5d:f6:db:53:91:15:af:e5:74:f3:26:6d:e1:c9:36:
95:80:af:22:3c:60:6b:d0:66:e9:de:4e:16:31:fc:
aa:5b:84:8b:36:80:c5:9c:02:b0:4e:fb:90:41:23:
00:9a:1d:1b:96:0f:dc:f9:7e:88:79:79:39:cc:61:
0b:84:3f:ea:8e:d1:f2:43:80:3f:52:10:76:a4:98:
68:03:43:0e:1c:d3:05:19:d3:e6:35:90:64:1f:6f:
d2:b9:4e:2d:bb:db:4c:9f:6f:f5:eb:8a:17:52:76:
1d:b3:72:d6:92:ff:12:54:4b:88:39:f2:73:08:03:
c7:bc:54:c4:47:06:00:1d:00:a8:80:f8:db:20:78:
28:10:d5:ba:9d:81:c6:c9:d8:27:5e:bb:77:f0:ba:
67:f1:ab:98:ab:d7:6c:df:94:61:b8:12:da:7a:1a:
b9:64:fd:b2:82:17:9b:3b:d8:20:3e:88:bf:25:7c:
3d:69:ea:7f:a7:6a:13:f7:53:99:e6:a5:04:9e:8f:
16:83:9d:09:ff:dd:a6:d8:e5:fb:55:ed:63:40:81:
e4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4B:25:04:02:F8:BB:61:33:75:D6:FD:9C:D0:AA:E6:78:49:27:30
X509v3 Authority Key Identifier:
keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d9:9b:47:36:74:7b:2b:c2:f1:52:61:d7:39:35:0a:2e:58:
49:b4:86:6c:11:11:93:34:20:cd:16:f2:80:37:12:c4:f6:e8:
16:bd:ce:cb:d4:ff:1c:7e:e7:fe:44:a2:97:69:e6:8a:65:2d:
1c:6c:38:bb:7c:20:99:64:4d:2c:15:35:84:98:8b:3a:01:27:
28:d4:b1:ce:1c:d2:1b:37:a8:81:89:d4:c6:23:4a:fc:5e:78:
f5:23:9a:5a:9a:de:b9:26:16:1f:68:f0:b6:a9:a3:86:bb:3f:
8a:1a:d9:ee:38:4a:a7:40:00:bb:33:6c:07:5b:ca:b1:e2:8e:
09:08:36:cd:0f:55:e2:0b:89:9c:8f:ca:34:7a:96:42:81:87:
62:01:69:ed:d6:33:1f:e6:df:a3:26:b1:4e:b6:ca:82:98:12:
15:aa:6f:f0:0f:7b:a6:01:c6:44:cd:f2:43:bb:3a:e2:52:03:
8e:5f:8c:68:6d:c7:d6:9e:27:c9:7f:b1:0a:05:8e:2b:da:2b:
50:a6:b6:e1:8e:e2:25:5c:f6:a3:a6:cf:06:b2:d3:5b:f2:f9:
cc:55:8d:43:c7:6d:20:f8:bd:ec:c6:58:02:c6:85:f2:54:0d:
1a:12:d1:12:d4:53:0a:04:b6:78:f2:d9:f8:14:1b:89:8e:86:
14:32:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:08:43 2026 by rpki-client