Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File: 3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier: Qgcrsb3vG6GSXLSCa2+1Kz5BDI903Ugg1pOkp1yFHFM=
Subject key identifier: F8:46:D7:1A:6E:92:33:16:16:65:0C:8E:C9:76:C2:63:F2:9C:1B:8F
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer: /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial: 019F189E2F150EA16EFF9D4916220DF8AAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number: 067A
Signing time: Tue 30 Jun 2026 13:00:47 +0000
Manifest this update: Tue 30 Jun 2026 13:00:47 +0000
Manifest next update: Wed 01 Jul 2026 13:00:47 +0000
Files and hashes: 1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: 2kGWgdW0laDtMitMmnSF0/Zb7SE27zyWfiAtG4UYazk=)
2: PWpDsLMHEz8TOyrA-SyzsSx50x4.roa (hash: 3QKMuAcr+JgQ4o/2LQdy62QLuMBtccj8bJckjR3bodQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:2f:15:0e:a1:6e:ff:9d:49:16:22:0d:f8:aa:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Validity
Not Before: Jun 30 13:00:47 2026 GMT
Not After : Jul 1 13:00:47 2026 GMT
Subject: CN=f846d71a6e92331616650c8ec976c263f29c1b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:6b:77:02:c5:c7:a5:ae:e8:bf:4c:24:23:
aa:db:85:2a:44:98:06:df:79:c6:ae:e2:21:de:ed:
06:1b:13:ee:b3:a1:9a:2d:7b:88:ab:7e:a3:18:a3:
c4:42:a6:fa:b8:01:56:75:35:51:80:c2:cd:98:c2:
03:0a:3b:fe:58:66:66:1f:0f:f1:7e:b7:a8:18:42:
63:ba:9f:ca:3e:31:cb:b0:7d:ec:ef:ee:31:ac:c5:
16:87:2d:14:e2:bf:2b:9c:e3:9b:a3:58:7c:0e:80:
05:b5:af:0d:8f:c1:02:fb:0b:3f:c5:eb:11:5a:58:
44:6f:0f:fb:8f:59:33:74:de:67:5c:d4:2f:4d:1f:
64:41:82:7e:73:c8:23:45:4b:e1:f2:fc:f5:b2:ca:
82:b3:84:76:e9:9d:60:1c:85:21:5a:41:a5:ae:ac:
0a:a1:46:52:b0:94:4e:97:04:b4:6e:32:c0:33:c3:
ce:9e:3e:19:97:30:b7:30:5d:dd:52:b8:7e:8e:35:
ce:47:a0:f5:26:2c:f0:07:0d:ed:01:33:04:21:83:
38:aa:3d:64:71:e4:85:1f:f8:c4:08:62:0c:d9:c6:
29:64:46:1c:62:b3:87:28:72:7d:57:6a:d8:1b:c5:
43:0c:b2:67:61:4a:43:f2:62:3b:2a:3f:ce:ff:ec:
16:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:46:D7:1A:6E:92:33:16:16:65:0C:8E:C9:76:C2:63:F2:9C:1B:8F
X509v3 Authority Key Identifier:
keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:65:20:57:5e:a4:d1:67:e4:aa:5c:7c:1a:19:f3:29:9d:f1:
e5:bc:84:b9:5c:ca:87:bc:62:da:c2:27:7c:8c:fc:4b:dc:db:
1b:d4:19:9a:cd:35:af:b5:e3:55:02:13:06:bf:10:bb:a8:30:
61:32:82:72:54:03:6f:53:07:4a:99:26:4a:51:52:7e:3d:59:
0b:84:27:ab:98:4d:c2:a2:63:23:7b:ac:44:dc:7e:fb:dd:1c:
8e:4f:ed:cd:a8:e0:02:fa:23:b8:f0:66:b3:6b:02:6d:97:30:
5d:0a:10:d0:26:45:f1:9c:26:00:90:c0:5f:fa:c5:6d:fa:24:
fe:8b:74:de:ee:1b:08:67:10:36:55:da:2e:9d:0e:f7:69:2d:
1d:2a:87:c8:99:fd:23:6c:db:41:7c:91:1e:b9:46:f0:9e:2d:
b2:8e:68:09:85:da:e3:70:d0:71:fa:65:31:60:15:22:4b:da:
46:d6:14:16:46:35:5d:59:24:bd:fa:14:5b:3a:df:18:89:90:
8f:04:1f:83:b2:c1:fb:df:82:f9:8e:20:ce:e6:26:8e:9a:dc:
6f:8c:4f:b2:77:57:4f:c3:4a:0a:59:85:47:ee:62:81:ce:01:
9c:33:92:6f:32:89:21:8e:c9:c0:85:d9:0a:aa:43:e5:44:a6:
1f:1b:4b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:42 2026 by rpki-client