Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: 0kFKMVD9eXC5PqqWOACQKdVcZoFYfGvQ43inHV3zGCM=
Subject key identifier: EE:4A:47:85:2C:15:1F:4D:F6:2B:D7:7F:D1:1C:23:79:34:DA:80:26
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 019E30A94A147D08CA260337C001117D0887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 0638
Signing time: Sat 16 May 2026 12:01:01 +0000
Manifest this update: Sat 16 May 2026 12:01:01 +0000
Manifest next update: Sun 17 May 2026 12:01:01 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: NyvAjK51iHbdz57iKJKOtxs46vSOHQPQShYK9BcKbl8=)
2: h8DfFuvqdUk7YoMeApQAXPJqjdk.roa (hash: ye1ky96HscedkMqsQUVtxrgYXUC8cIgsxg/lZeSLzu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:4a:14:7d:08:ca:26:03:37:c0:01:11:7d:08:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: May 16 12:01:01 2026 GMT
Not After : May 17 12:01:01 2026 GMT
Subject: CN=ee4a47852c151f4df62bd77fd11c237934da8026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:f2:dc:2d:43:3a:cf:35:f0:d7:38:d6:76:
62:db:a1:73:42:94:5a:14:68:9e:5f:33:eb:ab:4f:
74:50:2b:8d:ee:af:f5:b0:33:ee:42:0a:e8:d4:cb:
2c:7e:a7:b9:09:9e:b2:10:ea:eb:7c:75:1e:67:81:
27:29:b3:1b:e8:0b:25:fd:07:36:06:cc:6a:28:54:
64:9f:ec:21:64:7e:e4:dc:b8:91:84:77:70:5d:60:
1d:bb:f1:bd:4e:a1:02:da:74:74:2d:d9:c5:18:82:
fe:92:f7:d5:fb:e2:fd:e8:0a:e9:17:1b:68:13:bb:
43:ce:32:62:e8:f1:56:10:20:3e:8a:60:94:8f:b5:
29:d4:83:91:16:67:86:b5:06:02:29:f1:7c:df:5a:
f7:49:48:5c:99:a2:e2:1e:cd:54:26:19:0d:23:11:
72:4a:bf:83:70:59:69:3f:7c:8a:f4:58:6b:90:bf:
b6:2a:19:10:95:97:98:d7:7c:ac:b4:64:69:90:cb:
d5:23:f1:39:f2:03:7f:bd:55:33:0a:e1:2e:bc:d8:
ea:d5:5d:37:2a:4a:cb:7e:4b:fc:43:d5:83:df:43:
9d:0c:9e:f9:98:8c:6e:e4:82:82:5a:27:6f:f1:df:
2c:15:94:ce:a1:1e:29:a6:7b:08:6d:5e:1e:0e:5a:
2b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4A:47:85:2C:15:1F:4D:F6:2B:D7:7F:D1:1C:23:79:34:DA:80:26
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5f:46:0e:3e:c4:33:40:19:90:34:4c:6d:54:6d:e0:f0:39:
e5:1f:09:b8:3d:20:9e:3f:9e:92:1d:d5:b1:a0:c2:61:35:1d:
f2:b0:a8:44:5c:c7:85:25:7e:68:96:cf:31:8b:aa:86:9d:2e:
90:59:0f:b8:f9:c4:78:a6:2a:55:7a:a8:61:48:78:91:f5:54:
f2:e7:ba:9e:e0:43:03:7f:51:90:c6:c8:1d:fc:a9:2c:0c:24:
db:52:e5:f0:47:3d:e3:23:7d:d5:d3:0d:ce:2f:89:22:3e:4a:
c4:8a:ba:95:66:44:c0:a8:33:87:86:e7:88:d8:4d:b8:aa:9f:
69:62:e8:32:f0:df:36:26:23:e6:ae:df:95:87:1e:0b:c2:e3:
83:19:1c:b3:10:f0:60:47:05:54:9a:0b:bc:5c:c8:bc:18:47:
97:05:e6:a0:13:4f:46:7b:1a:44:8d:e7:c8:f8:11:66:af:eb:
23:57:48:93:e1:f0:a8:57:e8:96:fb:99:5f:95:35:4e:c7:82:
a9:f1:bd:e2:ff:1d:b3:14:d3:8c:07:03:55:1e:c3:8d:c4:a3:
0f:64:fc:b5:8e:4a:65:76:5f:67:4b:26:66:3b:65:8c:25:eb:
4a:55:9f:0f:6b:72:ee:54:27:5d:1a:e6:f9:d4:72:dd:ab:d4:
b7:38:c3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:41 2026 by rpki-client