Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: m3pTuDJngi86Bn3e789ffIk3fVYful0S6VjG+D0/PJ0=
Subject key identifier: 87:FC:4A:88:FF:07:0C:B3:ED:D8:9F:15:12:C3:16:D5:08:BB:85:2C
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 01A0028180B3FDF7CE8B358A2CBD293F1332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 23:00:36 +0000
Manifest this update: Fri 14 Aug 2026 23:00:36 +0000
Manifest next update: Sat 15 Aug 2026 23:00:36 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: /70dnU0cATPWEa8YN/LCOcGrIl4fD4hiX8w/4fZRFVw=)
2: 3zlYESujx6iqyh6hQsCczNEcHfA.roa (hash: giiowx0wopsav1ocUyq7di4cnnYmyvwdPI251v0t4Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:80:b3:fd:f7:ce:8b:35:8a:2c:bd:29:3f:13:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Aug 14 23:00:36 2026 GMT
Not After : Aug 15 23:00:36 2026 GMT
Subject: CN=87fc4a88ff070cb3edd89f1512c316d508bb852c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:79:88:cd:fe:5b:8c:ec:ca:10:32:27:51:
ee:fa:e2:de:5f:df:88:8f:df:51:23:47:1f:3f:04:
45:34:a1:19:ff:7d:0d:27:d9:93:ec:80:40:3a:47:
58:2a:eb:8b:90:00:28:26:c8:bd:ad:f5:76:9c:7a:
ad:df:7c:0b:de:3a:d3:b4:f1:41:92:fb:c2:bb:3a:
88:2c:a0:8c:b2:7b:ea:73:4f:33:d5:31:8b:ac:f5:
a9:c6:12:c8:b3:98:4f:b9:24:7b:8b:d2:87:eb:cb:
e6:7c:57:7d:cf:9d:32:19:ca:73:a6:0b:3c:06:5e:
73:f5:2f:5e:e1:44:3e:00:84:f0:b6:2f:b4:8b:8c:
b7:8c:c7:fc:0c:46:b3:8f:01:41:37:87:f1:96:c4:
7d:b4:7f:5a:10:af:11:61:84:9d:c3:c1:f9:b8:d3:
f7:b9:66:78:2f:52:7a:dc:92:a8:46:91:61:cf:75:
e5:4f:95:c0:26:23:38:c9:c8:bc:c3:24:1f:0a:98:
13:10:18:f5:f8:1b:bd:d6:93:df:67:5d:e7:95:e1:
99:51:b9:c8:5a:cd:b7:86:47:10:10:73:ad:df:dd:
e8:6f:46:8f:bc:ba:40:ef:bf:97:f2:7d:0e:7d:ba:
00:1e:cc:bc:ca:1f:23:fd:e7:c5:de:9b:f2:e6:58:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FC:4A:88:FF:07:0C:B3:ED:D8:9F:15:12:C3:16:D5:08:BB:85:2C
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0a:29:2d:5e:45:8f:8a:8c:e8:27:50:06:3f:6a:c6:ce:f2:
7b:36:2d:eb:cc:2c:fe:c3:7d:d5:75:b3:cd:12:4f:dc:38:ef:
a7:63:7b:2b:1b:78:51:ad:d6:e2:1e:24:53:05:36:c1:59:34:
ae:fa:9a:4a:4e:9e:06:67:d2:67:9f:5b:c1:5b:07:16:de:03:
98:95:07:66:55:58:19:12:45:aa:cd:62:72:44:ea:3c:e3:81:
d0:55:7b:57:ce:d5:29:29:23:b5:89:34:0b:b0:24:cc:c9:05:
0b:88:c8:63:ee:a2:c4:a9:7b:cb:a5:03:c2:7e:32:8d:40:3a:
70:dc:5f:0d:b6:b4:4c:5b:3e:cc:99:d7:c9:5c:8c:e7:5f:7e:
aa:79:42:5e:20:8e:bd:f3:9b:bb:c7:a5:7b:93:59:2d:bd:e8:
e4:f9:0a:62:86:ee:57:09:f2:f6:96:82:9d:11:21:a4:83:6d:
ca:41:c1:61:64:1e:95:87:85:7b:10:92:8b:50:a5:e6:2b:ed:
65:36:74:be:6f:8f:8f:6b:10:30:66:31:db:2c:27:c5:54:1b:
07:0f:d0:7c:cc:a2:71:d3:ca:44:86:71:b9:7d:43:97:47:18:
40:16:79:1b:d0:7e:72:01:2b:c6:dd:cc:fc:4f:63:52:e3:8a:
79:0f:d5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:39:24 2026 by rpki-client