
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File: 3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier: W1vnQG7fCk7rb7ib6nzy0A92wyCq7XAGTbNMKBJzErA=
Subject key identifier: 1C:8F:2D:30:72:C6:95:71:6A:D9:1A:52:B5:3F:68:B5:BF:A2:E9:1D
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer: /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial: 01A0024B0B07B0D448E209A935000274F40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number: 06F3
Signing time: Fri 14 Aug 2026 22:01:07 +0000
Manifest this update: Fri 14 Aug 2026 22:01:07 +0000
Manifest next update: Sat 15 Aug 2026 22:01:07 +0000
Files and hashes: 1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: x+1rYuXqFCRJ+RGVarmIsvrCI+NAT2n3bUZS0cY5MlQ=)
2: PWpDsLMHEz8TOyrA-SyzsSx50x4.roa (hash: 3QKMuAcr+JgQ4o/2LQdy62QLuMBtccj8bJckjR3bodQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:0b:07:b0:d4:48:e2:09:a9:35:00:02:74:f4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Validity
Not Before: Aug 14 22:01:07 2026 GMT
Not After : Aug 15 22:01:07 2026 GMT
Subject: CN=1c8f2d3072c695716ad91a52b53f68b5bfa2e91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4c:7f:d3:67:97:b6:ea:56:f2:ae:d6:bd:08:
7a:80:da:2f:86:f6:ff:e0:f7:54:27:99:da:68:35:
ea:ff:2f:22:50:5b:45:da:f5:ca:aa:34:a2:93:03:
84:2f:5b:ef:c7:b5:db:94:84:59:0c:62:97:ef:5b:
8b:6f:a2:29:b8:dd:b3:47:83:13:24:bf:b6:4c:21:
80:6f:23:c3:49:3e:c9:6d:aa:a9:95:54:c1:0a:15:
aa:bb:90:8e:f5:06:8c:f1:c7:71:ca:82:d3:2c:a8:
c9:11:ee:1b:11:c7:6d:72:e6:0c:c9:fb:11:29:89:
f7:d2:82:c8:83:c5:44:dc:06:18:94:6e:65:06:e8:
56:60:43:a0:25:3d:99:30:f6:59:7f:bc:01:f7:0d:
cc:53:e8:b8:30:5c:64:c9:e1:41:74:25:05:f4:b5:
dc:a3:61:48:43:76:1b:27:54:83:66:5c:d6:42:3a:
40:b1:75:8f:d0:04:8f:2f:d0:75:d9:4c:9b:c2:2c:
3c:4f:24:d4:0c:73:97:34:b4:61:50:65:b6:db:d4:
11:b7:d8:22:4b:47:ae:ff:d8:83:cb:4c:81:58:d8:
7d:d4:79:b1:d3:02:3e:29:f3:1c:42:7e:15:87:89:
22:05:e4:9b:55:8f:a9:01:b3:61:e9:27:a0:e5:61:
16:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8F:2D:30:72:C6:95:71:6A:D9:1A:52:B5:3F:68:B5:BF:A2:E9:1D
X509v3 Authority Key Identifier:
keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4b:17:89:91:58:69:37:9d:f5:59:10:37:b7:96:fe:50:9a:
7e:17:5b:87:32:83:44:8d:9e:ae:ef:75:98:9a:17:a1:af:74:
89:72:d2:54:17:7e:4d:08:e3:67:3f:a8:b2:15:7d:0c:dc:49:
73:f4:48:52:36:24:ae:0d:11:5b:11:3e:f1:03:7f:1e:37:cd:
e7:f6:f1:2a:65:4e:ef:8e:73:7c:65:e1:64:1a:ba:ba:60:d7:
21:8d:f8:46:db:2f:bb:5e:05:54:13:63:71:2f:0c:d3:d5:19:
b6:7e:4d:fc:92:6a:c4:e0:eb:ad:d4:e4:d6:1d:c3:bc:c9:b1:
f8:e8:c1:ec:9f:18:d2:b5:65:16:56:67:3a:15:10:66:8e:62:
55:94:7b:7b:22:f9:2c:d0:9b:2e:67:47:6b:c1:aa:54:da:af:
a9:8f:64:0d:18:fe:c0:62:c9:1d:c8:53:86:b7:10:9c:61:92:
b2:06:d9:96:89:0b:8c:d9:fb:f2:c1:6c:f3:b8:56:18:41:9b:
dc:ed:16:e4:b3:d1:fb:96:ce:a7:82:69:9f:60:02:fa:34:a9:
2b:ac:30:61:3b:1d:0e:6b:56:ae:7c:a5:33:a3:f7:af:26:d1:
a1:28:30:21:53:70:df:07:65:e6:de:03:b4:49:62:7f:2d:1d:
63:8f:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:05 2026 by rpki-client