Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: e2Z/PDORBY5DNRIfVQgmF0bjXHC8fjXq3KdH7iXD2Cs=
Subject key identifier: 7D:F7:F7:BE:9D:F6:57:98:03:89:F8:1F:D0:05:D1:7A:D9:E4:AB:E8
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 019D378917572BFFB4052BCF765972EC746A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 05B7
Signing time: Sun 29 Mar 2026 03:00:24 +0000
Manifest this update: Sun 29 Mar 2026 03:00:24 +0000
Manifest next update: Mon 30 Mar 2026 03:00:24 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: 3Q3cJf8U0AbZNpUYWHgoKYLL3k4tpnISHKcpnWg4yEQ=)
2: h8DfFuvqdUk7YoMeApQAXPJqjdk.roa (hash: ye1ky96HscedkMqsQUVtxrgYXUC8cIgsxg/lZeSLzu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:17:57:2b:ff:b4:05:2b:cf:76:59:72:ec:74:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Mar 29 03:00:24 2026 GMT
Not After : Mar 30 03:00:24 2026 GMT
Subject: CN=7df7f7be9df657980389f81fd005d17ad9e4abe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:4f:21:1b:be:6f:5b:40:c3:30:79:29:1c:
04:d2:8b:54:a7:b9:ac:cb:79:32:39:55:1d:4c:09:
87:f9:2f:8d:4d:5d:ea:3e:4f:33:05:76:07:76:5b:
18:37:cf:76:d1:3c:a8:ee:03:05:fd:d0:2f:48:b0:
12:58:35:2d:5a:9f:39:8c:06:b3:f5:06:e8:a3:db:
ab:88:5b:45:e6:12:d5:82:47:a0:ba:82:ba:37:d0:
7b:3d:eb:22:10:28:d3:e8:cf:4e:22:68:f6:c3:ba:
da:83:54:6d:a2:24:b4:ec:89:86:6f:9b:e3:bd:9c:
b8:eb:8c:8c:09:20:41:d6:fa:01:06:02:f7:ba:6e:
19:ed:de:cb:e0:58:2a:a5:c6:13:40:7d:5f:39:c2:
f1:77:fe:85:0b:a6:c3:ae:cb:3a:25:21:e5:4c:37:
a9:08:54:ff:31:84:54:0b:24:07:11:b3:17:70:17:
05:05:7e:f8:7c:b5:1d:e1:c9:3a:6e:2d:bd:61:19:
3d:85:83:5c:60:0f:c7:88:c4:59:38:86:79:65:1b:
c3:4f:93:f9:13:ec:d6:3b:b7:19:d5:c4:4a:97:52:
a7:44:37:f5:00:a6:72:c7:f5:eb:6b:e0:3a:55:9d:
71:6e:7d:12:04:dc:e6:29:85:ad:42:d1:8b:4f:e9:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F7:F7:BE:9D:F6:57:98:03:89:F8:1F:D0:05:D1:7A:D9:E4:AB:E8
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:00:f8:dd:fc:23:f5:c4:b3:85:ee:74:3e:cc:10:eb:14:99:
60:45:70:32:bb:bb:7e:db:0c:e3:fb:be:5d:f6:f2:1b:e6:15:
a2:03:09:8b:fc:63:12:4e:93:8e:51:1b:95:b0:74:ac:70:f4:
c3:cc:da:0f:f0:a1:4e:b9:b5:e9:c9:12:cc:26:3b:b8:f1:04:
37:9c:a3:97:0b:48:00:99:eb:db:d6:79:95:18:d5:74:43:b1:
82:a6:4c:ea:c9:2a:6d:76:99:72:23:05:d6:b0:ac:c5:3c:d0:
92:b2:84:a5:ea:ae:ff:4d:b5:d9:7e:c8:8c:2c:12:01:8e:6c:
92:e6:18:5c:46:31:e0:27:fb:b1:a9:80:0b:50:32:87:ef:f8:
fa:97:3f:0f:94:0c:22:87:fb:db:98:a4:8b:14:ad:a0:ff:fd:
23:aa:fc:62:11:73:7a:d4:4b:a4:6f:fb:66:42:b2:44:e6:9d:
87:fe:b6:ca:f8:b8:87:c2:ad:64:90:2b:df:5e:b9:0e:3b:64:
68:30:de:8b:0f:95:ab:75:eb:07:4c:ca:55:5a:3c:ec:2f:f1:
b7:ec:8c:b0:51:5a:dc:4c:f3:3c:68:7c:76:32:de:27:76:34:
3c:47:d5:12:b0:4b:8a:b0:1f:cc:0c:ec:b4:c5:ec:12:5c:61:
d6:5e:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:44 2026 by rpki-client