Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
File: 3fCc-W5fyHTuk5CXxWUci9hC5q0.mft (raw, json)
Hash identifier: XUOQU/XwZo3RBDNemEDIqJNXdkXOPUt1DAm/VqQvRPw=
Subject key identifier: F7:52:8D:40:38:D9:7C:C1:7A:CA:33:01:88:A7:FA:14:39:0F:67:DC
Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Certificate serial: 019E1C7D99A1043023C422F5DE25628ABC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
Manifest number: 0638
Signing time: Tue 12 May 2026 14:00:53 +0000
Manifest this update: Tue 12 May 2026 14:00:53 +0000
Manifest next update: Wed 13 May 2026 14:00:53 +0000
Files and hashes: 1: 3fCc-W5fyHTuk5CXxWUci9hC5q0.crl (hash: G73axs8x5mchIXhRb0zGZtdE9ICjmGpeY45zWL9UIIY=)
2: C60VxSBJDSdFCd1k1UlGSCrwJvY.roa (hash: KibtnUkNqe/Q4+yRw8o2hlvC70cIKXb1SxvsmfXdEPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:99:a1:04:30:23:c4:22:f5:de:25:62:8a:bc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Validity
Not Before: May 12 14:00:53 2026 GMT
Not After : May 13 14:00:53 2026 GMT
Subject: CN=f7528d4038d97cc17aca330188a7fa14390f67dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:8b:0e:80:f8:62:51:17:57:0b:c5:6c:a2:
37:ad:bb:86:92:21:04:5f:dc:cb:11:7b:d4:04:37:
2d:b1:b4:11:41:30:99:ec:4d:ee:e1:86:dc:94:02:
82:02:02:27:1d:51:8a:24:17:d0:7a:ff:75:99:61:
28:65:02:c5:53:7d:dc:de:b7:38:fd:54:c5:b9:29:
f5:de:c6:b1:93:58:b8:05:a2:b8:d0:99:a3:c2:9f:
c1:4f:f8:30:76:4c:5b:e2:ca:14:00:fc:f8:d1:49:
0e:02:29:e8:10:60:06:00:bb:39:d8:66:d9:48:c0:
3f:f8:13:6b:9e:d2:c2:a9:d5:3d:6a:56:ec:b2:3c:
02:61:21:11:6a:eb:79:55:3b:ee:f1:bf:6c:46:10:
bd:c7:f4:d6:4d:87:7d:b4:a6:00:50:fa:8e:a7:4a:
bd:20:dd:bb:5b:22:45:c3:33:bf:05:8d:b8:3d:08:
e5:1d:01:94:7f:1e:6f:cc:ff:65:6f:9a:3a:a3:fd:
6f:2d:24:a8:80:76:a5:cf:7e:ed:b4:a3:8e:8b:71:
a7:f9:e4:a7:91:1e:d6:1f:01:4f:8a:d6:b4:2f:27:
9f:e1:d8:5e:0b:d1:4e:34:a1:7b:26:75:cb:91:c4:
73:d7:fa:b7:ba:75:3b:dd:06:26:dc:19:b8:88:bc:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:52:8D:40:38:D9:7C:C1:7A:CA:33:01:88:A7:FA:14:39:0F:67:DC
X509v3 Authority Key Identifier:
keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:30:cf:d9:e4:c7:a1:ff:ea:35:84:a2:d3:db:5d:ef:54:5d:
69:b6:c9:07:e0:b6:43:39:98:82:e5:5c:62:25:da:25:47:c7:
88:ca:c3:96:35:0f:7a:5a:e3:cd:68:3d:f6:52:e0:99:6c:72:
f8:9f:81:27:36:d7:90:f9:95:74:39:9c:71:95:a6:b8:22:e6:
05:d4:e8:c2:fc:54:de:b8:75:b9:ef:36:df:62:42:f0:48:e8:
7b:db:03:f3:d2:40:12:10:58:ae:a2:d6:af:5f:d2:25:2f:c8:
8d:72:3d:a0:06:cb:df:ef:80:f2:d7:3f:e9:cc:08:40:93:57:
50:3c:c4:66:b5:39:29:31:71:97:f6:8f:8f:66:d7:0f:f4:9c:
e0:5e:05:6f:ec:7d:3e:3c:83:03:99:68:80:ce:73:8d:9b:4d:
a0:ed:7b:3c:ae:2c:0c:1c:2c:5b:57:ea:5b:df:22:2b:37:65:
4a:90:46:76:d3:a9:d6:9c:cf:16:8d:f2:3b:13:c7:4b:15:7f:
8d:e0:30:5f:4d:ee:03:02:96:41:3a:20:c5:b3:bd:d1:f0:12:
3b:26:e3:fa:eb:ce:b2:06:63:91:f9:0f:3e:f1:dd:fa:b4:eb:
4d:f6:00:23:85:3e:89:e8:51:df:4a:f5:15:bb:a3:69:e2:92:
a4:70:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:25 2026 by rpki-client