Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File: 3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier: WTg/3MepQDR8D+ZdhdBsz/IDJIlZubvbtGUlpw1cPO4=
Subject key identifier: E6:2F:C1:FF:C8:59:79:58:88:99:9D:FC:6E:8F:C0:E7:66:04:48:C6
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer: /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial: 019D37C012B3D3D0F74E3CED291FBE3C5B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number: 0581
Signing time: Sun 29 Mar 2026 04:00:27 +0000
Manifest this update: Sun 29 Mar 2026 04:00:27 +0000
Manifest next update: Mon 30 Mar 2026 04:00:27 +0000
Files and hashes: 1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: P2FWhrMrDygAPVQUBQBtJpNn2kYXV/fEN4WgwWTKoJQ=)
2: PWpDsLMHEz8TOyrA-SyzsSx50x4.roa (hash: 3QKMuAcr+JgQ4o/2LQdy62QLuMBtccj8bJckjR3bodQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:12:b3:d3:d0:f7:4e:3c:ed:29:1f:be:3c:5b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Validity
Not Before: Mar 29 04:00:27 2026 GMT
Not After : Mar 30 04:00:27 2026 GMT
Subject: CN=e62fc1ffc859795888999dfc6e8fc0e7660448c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:e9:05:ea:7b:d0:fc:fa:40:11:3b:d0:54:
9f:3d:bd:a7:37:cb:ae:1b:c1:13:dd:67:8a:a5:5d:
ea:ec:59:6b:28:02:44:44:c5:84:bd:d8:a3:d5:48:
2a:42:26:6a:27:a4:b6:48:26:ca:df:6e:48:f6:2a:
61:b8:c6:74:0e:ba:9d:64:a7:a7:d3:d8:47:80:93:
b6:d9:aa:22:ba:80:c6:10:d2:5c:ba:f2:2b:e3:10:
9b:cb:44:a4:4d:77:59:f3:39:a2:f6:88:5a:94:c4:
d0:82:02:1f:00:8f:80:30:ec:f8:ca:ca:67:31:7a:
69:41:41:53:9a:2b:e8:2c:0d:47:4e:38:9a:1b:e9:
0e:89:b6:f9:0b:fa:a7:44:19:d3:13:2a:9e:f5:15:
02:72:a5:c3:00:25:af:b2:4b:3c:5d:13:a4:b4:c3:
eb:a8:6c:cc:b6:3d:af:e7:80:e2:ac:31:ea:6b:08:
c7:84:3b:de:91:ff:e6:91:38:45:ad:25:ef:5a:02:
46:b8:90:e7:03:80:8a:70:01:bf:52:60:5e:47:35:
28:a5:32:74:4b:24:a2:2c:3e:f7:73:14:c3:d8:23:
24:3e:69:2e:44:72:b6:c9:17:9c:7f:85:bb:4a:b5:
21:ad:56:34:8d:de:32:0f:17:f8:f4:6e:ee:64:a6:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2F:C1:FF:C8:59:79:58:88:99:9D:FC:6E:8F:C0:E7:66:04:48:C6
X509v3 Authority Key Identifier:
keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4d:a1:e7:8c:5b:6e:83:23:65:be:8c:81:fd:1f:aa:ec:46:
fb:73:8d:2f:5a:63:d0:8e:ac:48:bc:72:ac:00:99:36:cc:5c:
92:6f:34:05:75:16:a9:c1:2d:cd:dd:78:19:e4:8c:db:4d:6d:
03:16:e6:26:e4:4c:38:47:ae:f0:0f:4d:12:20:3f:c4:42:31:
0e:0e:3d:37:8f:2e:53:fc:c7:65:cd:67:ae:16:c5:47:28:6b:
50:f5:b4:79:99:32:5c:9e:ac:1e:b1:99:d2:6c:21:9d:8f:85:
1b:f4:02:ca:36:d2:86:f5:0d:18:79:75:35:91:eb:c2:46:26:
1b:5d:ab:61:5b:65:10:e3:4e:c8:28:2f:c0:65:a2:db:59:f4:
5a:be:d6:45:3e:eb:9c:f1:d8:ac:5f:c5:cd:81:85:e8:b6:4e:
29:69:c8:d7:29:0c:50:ba:b6:f9:79:b2:93:2e:77:ad:cc:0f:
28:68:74:ac:54:79:9c:11:18:3e:e0:f5:23:3f:e2:c4:2c:c3:
2d:2e:d9:f8:a9:9c:77:93:0a:4c:96:cf:16:6c:0f:f4:14:c2:
7f:04:8a:5e:d8:81:20:0a:63:4d:da:6e:92:e4:40:09:8b:77:
88:b6:9b:80:a4:de:d9:66:14:74:5a:42:24:73:b7:ee:a9:32:
67:df:fb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:43 2026 by rpki-client