Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: EZUFnYp0x39nBx2OYeijxsar3JUc3IyJX1sQNVlOmeA=
Subject key identifier: 6D:2B:F1:EA:AB:2F:3F:4C:D7:12:92:5C:23:96:40:9E:EC:0F:EB:B7
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 01A13ECBA553BC73D3CE4F5D3ED4F87EC94F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 07CD
Signing time: Thu 15 Oct 2026 09:01:35 +0000
Manifest this update: Thu 15 Oct 2026 09:01:35 +0000
Manifest next update: Fri 16 Oct 2026 09:01:35 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: i0nG0vOCnPEmbqe5uLbT109YYJ48UVQGTVG0OFyGoKo=)
2: h8DfFuvqdUk7YoMeApQAXPJqjdk.roa (hash: ye1ky96HscedkMqsQUVtxrgYXUC8cIgsxg/lZeSLzu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:a5:53:bc:73:d3:ce:4f:5d:3e:d4:f8:7e:c9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Oct 15 09:01:35 2026 GMT
Not After : Oct 16 09:01:35 2026 GMT
Subject: CN=6d2bf1eaab2f3f4cd712925c2396409eec0febb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:68:6e:1f:87:17:d2:a8:6a:b2:b2:cf:f7:6c:
14:50:00:63:82:1b:0c:99:e2:15:92:8d:f8:b6:0c:
c7:06:7e:b5:15:99:06:99:0b:3a:31:26:11:c5:0e:
5b:32:8b:40:f3:c6:a3:7f:2d:41:34:1e:bd:50:9a:
94:07:12:15:97:c0:c2:99:a8:ea:e0:79:60:2e:93:
f6:d8:9f:0a:b3:3c:66:7c:13:75:81:f7:99:93:f0:
78:6c:19:d1:19:68:76:53:33:74:c7:e5:5f:8f:be:
db:0b:69:ff:44:fd:33:8a:34:1d:87:e7:2e:7c:23:
ac:5d:14:b1:e5:53:6d:a8:7a:ba:aa:f8:b4:c9:7d:
fc:d5:ea:6a:29:b0:ee:03:83:13:92:7d:26:c3:20:
fd:4b:01:54:78:4c:65:cc:ac:46:e8:df:53:48:0d:
34:08:f0:9a:dc:10:08:fe:6b:a9:c8:c0:e6:6e:7d:
41:7a:41:a4:a8:20:d6:77:f3:53:c3:9d:87:2f:69:
56:f9:a4:4d:c5:0b:4b:f5:c8:a4:92:94:1d:fc:2f:
32:90:68:f4:cd:f2:c1:86:c6:22:30:50:1e:0a:ca:
70:ad:0d:eb:a7:77:b5:71:75:da:1c:31:18:6b:80:
a6:e3:be:1f:8c:6d:16:c6:c7:29:6c:eb:c7:6f:d1:
05:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2B:F1:EA:AB:2F:3F:4C:D7:12:92:5C:23:96:40:9E:EC:0F:EB:B7
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1e:4f:15:f5:a5:76:c2:0b:e2:e4:2e:ba:61:0f:84:0b:1e:
43:74:f1:ce:81:31:01:b0:ff:5b:36:65:1f:66:1c:a2:a0:ec:
a2:bd:a2:78:a0:1b:70:e3:a1:4d:b1:68:ee:4c:0f:7d:60:1e:
41:cc:cf:38:0e:bc:4b:08:a9:17:91:fe:ad:85:52:8a:89:81:
c7:c6:30:09:0f:52:72:0b:73:02:9b:6f:9e:b1:73:93:b5:ea:
6a:09:bc:13:27:dc:62:51:34:89:ed:b1:ab:8a:44:19:79:75:
0d:de:c1:52:cd:ce:0e:ee:04:51:e1:59:f8:4e:b8:1d:d3:00:
4c:fc:ea:d5:b1:d5:77:3a:45:0e:16:85:ef:e7:05:66:bf:ce:
fd:8c:51:d8:18:8f:ff:df:0e:47:59:65:f9:6e:fa:98:05:69:
15:5a:10:76:a3:f6:4a:5f:d4:aa:cd:cf:44:28:a7:56:bc:76:
d2:88:82:58:d7:44:a2:32:38:59:86:da:c7:84:3b:8a:0d:7c:
6e:bf:d8:3a:fe:7f:c4:7f:eb:4e:06:b9:46:52:55:d5:2f:63:
ed:2f:6e:80:50:8b:11:e2:69:4a:f8:c9:40:5e:b3:e6:73:c9:
65:da:89:9c:85:8a:1a:8c:69:56:ce:c9:d8:57:b6:f5:aa:eb:
55:a5:21:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:17:12 2026 by rpki-client