Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: 3jIsxSKbd6YPCcA/jOzgB23i028WnXpcUMn5tvZhWNw=
Subject key identifier: 1A:90:80:FD:8A:05:82:47:D9:82:EB:A1:85:A5:A1:8B:4C:EB:36:99
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 01A00213A9BC59F43B8F1E79FD8E0A8AFFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 0729
Signing time: Fri 14 Aug 2026 21:00:38 +0000
Manifest this update: Fri 14 Aug 2026 21:00:38 +0000
Manifest next update: Sat 15 Aug 2026 21:00:38 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: xc5w4xhj//5kbLB+QfFjWQ25QgJLJovyziFsw83iYE8=)
2: h8DfFuvqdUk7YoMeApQAXPJqjdk.roa (hash: ye1ky96HscedkMqsQUVtxrgYXUC8cIgsxg/lZeSLzu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:a9:bc:59:f4:3b:8f:1e:79:fd:8e:0a:8a:ff:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Aug 14 21:00:38 2026 GMT
Not After : Aug 15 21:00:38 2026 GMT
Subject: CN=1a9080fd8a058247d982eba185a5a18b4ceb3699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:70:62:4f:d2:c8:2e:1f:85:d1:e6:72:4b:
2f:08:01:26:d8:4c:65:a9:8c:e7:7d:9e:01:3d:b1:
56:89:31:02:7d:a6:ba:de:dd:aa:09:0d:fe:a0:6d:
ca:ee:d5:c9:20:a8:a4:39:0c:03:ac:53:46:6b:ec:
87:c9:ca:a9:f5:ad:18:a0:2e:b0:2e:aa:1c:af:f8:
0f:06:a9:15:8a:9e:3d:66:26:10:63:36:6d:79:ba:
39:e8:6a:bf:53:43:76:dc:f1:13:ef:4d:25:9a:30:
22:bf:04:61:5c:e7:e1:33:80:fd:ec:dc:03:b6:8c:
a4:62:f8:26:67:b7:fc:dd:87:ab:ef:44:3f:3a:2e:
7c:7b:bb:4b:ef:0d:0c:d5:3c:4e:5d:33:a2:50:23:
62:13:46:06:fe:57:36:db:8b:d0:11:f0:a6:bc:67:
58:17:87:89:41:82:5f:7a:5a:15:4d:ed:91:2a:53:
72:df:db:55:9d:30:5a:53:ec:ed:c3:ff:6c:d6:1c:
6c:86:af:23:2c:3e:46:64:26:da:4e:d3:0e:2d:09:
65:2d:1d:6b:03:69:f5:65:bb:c7:d5:60:9f:33:d8:
fa:06:15:c7:5a:1d:8d:03:ec:d9:80:43:39:f1:ba:
75:23:0c:65:1b:c7:b0:ab:09:26:d0:bc:3d:de:49:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:90:80:FD:8A:05:82:47:D9:82:EB:A1:85:A5:A1:8B:4C:EB:36:99
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:dd:e8:9b:1a:4a:98:99:4f:89:07:f5:85:52:18:7e:9c:a5:
e4:3b:84:c1:33:82:ca:92:14:ff:90:aa:12:85:de:d2:77:f4:
9f:ca:23:d7:c0:f4:bc:d2:76:1a:93:56:fb:2b:d1:59:98:5f:
8d:fb:f5:15:10:ed:c3:75:c4:30:63:78:fc:ef:e7:06:d7:00:
a2:b9:2f:aa:fd:53:30:f9:2e:c9:f5:1d:76:af:ac:37:2f:63:
c0:98:9b:c9:83:ac:db:c2:e7:b2:87:6d:22:57:25:12:22:88:
70:c6:ce:3f:95:e2:9c:e2:f2:c9:39:2a:eb:9e:c4:66:6b:76:
63:d1:d0:13:bb:08:6e:41:ed:e2:56:28:db:c8:d9:c4:de:b4:
01:2b:b1:0d:bc:64:9c:05:94:6b:e6:3e:66:80:0d:d5:68:1c:
8c:c2:4b:8b:d1:25:bc:24:2f:81:ce:d3:32:ab:8f:1a:98:a3:
60:c1:8c:3a:d0:dd:c8:e9:6e:d1:6e:13:54:74:e0:0b:24:e1:
00:69:d1:01:58:07:b3:24:f1:bd:d0:82:39:3b:1b:42:f5:aa:
9c:3f:fa:0c:78:75:6e:b4:10:ab:d6:7f:ca:3e:ad:ab:4e:12:
ff:c3:10:e4:e5:ca:94:1c:3e:56:17:81:35:98:8b:2a:a5:4b:
01:a5:58:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:57 2026 by rpki-client