Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
File: 3fCc-W5fyHTuk5CXxWUci9hC5q0.mft (raw, json)
Hash identifier: 4Ex3zjGd9uKD7NK4F7J4QxEKl9kA0BE4DC+FZzjhCdU=
Subject key identifier: 28:53:1B:9A:BC:13:89:C5:F4:32:2F:0E:3D:2C:B8:08:2D:E3:7E:A0
Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Certificate serial: 01A0CDEC4B4E4E9391A5468E387332D1C6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
Manifest number: 079D
Signing time: Wed 23 Sep 2026 11:00:09 +0000
Manifest this update: Wed 23 Sep 2026 11:00:09 +0000
Manifest next update: Thu 24 Sep 2026 11:00:09 +0000
Files and hashes: 1: 3fCc-W5fyHTuk5CXxWUci9hC5q0.crl (hash: Y/T/3xNGt+W5xq899cF/7iCl2Mrybd2uWOcSZ8hn9Zs=)
2: C60VxSBJDSdFCd1k1UlGSCrwJvY.roa (hash: KibtnUkNqe/Q4+yRw8o2hlvC70cIKXb1SxvsmfXdEPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:4b:4e:4e:93:91:a5:46:8e:38:73:32:d1:c6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Validity
Not Before: Sep 23 11:00:09 2026 GMT
Not After : Sep 24 11:00:09 2026 GMT
Subject: CN=28531b9abc1389c5f4322f0e3d2cb8082de37ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:66:e6:47:da:20:d3:56:a5:69:54:50:d2:
93:72:9a:72:d8:f0:1e:2c:7d:48:3b:d6:91:08:81:
50:d1:ff:41:7d:3a:f7:69:47:b0:49:41:3c:84:0e:
e8:d3:aa:c4:53:1f:12:93:bc:0b:a4:6e:1c:60:58:
a7:8d:cc:9c:38:1c:e6:bf:b5:7a:2b:25:84:0f:08:
ec:09:e5:6d:be:f8:f0:78:e0:dd:7a:72:3e:a2:f3:
e8:16:d2:dc:09:48:a5:5e:24:e4:24:15:da:73:e3:
ef:27:35:7d:84:9e:cc:68:03:5d:2d:96:fb:7f:55:
ca:76:88:24:12:f0:de:24:be:26:8d:a9:6c:36:05:
28:a9:10:5c:31:d4:fd:06:ba:7d:8b:14:34:72:b4:
0b:63:b8:73:04:15:27:f0:5c:b0:bd:dc:a1:7b:80:
e4:73:4c:24:8e:d2:a4:8a:35:ad:34:0d:3c:98:a8:
31:79:ce:7b:03:f6:ce:8b:08:39:5a:71:f9:0d:d8:
a5:74:ba:14:5a:f4:1c:e1:87:ab:1c:31:87:67:46:
24:94:6e:ec:5d:f4:3a:bd:f1:fd:df:6d:fe:b0:6a:
be:ad:74:fe:a4:f1:03:c1:5b:84:df:db:3b:4c:26:
b1:60:9e:ab:fc:6e:34:cc:1a:4c:1a:c7:a2:5a:30:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:53:1B:9A:BC:13:89:C5:F4:32:2F:0E:3D:2C:B8:08:2D:E3:7E:A0
X509v3 Authority Key Identifier:
keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8a:af:95:07:a0:56:d5:94:c3:aa:b1:94:17:0c:22:9c:e8:
f6:7d:a5:d6:3d:f6:1f:27:1f:a0:1a:0c:0c:68:ab:7d:06:bc:
46:59:cd:0a:a7:80:3c:33:d8:12:3f:b0:5c:70:b6:75:77:e5:
6c:45:e8:cc:fd:bf:75:f4:57:fe:3a:60:a3:6c:5e:df:d5:74:
c9:1f:80:e3:80:d9:af:92:0d:0f:3b:5a:9b:fb:ed:17:a4:c0:
46:4a:97:39:27:d7:69:8e:83:0b:86:91:d5:80:09:98:0e:31:
89:a6:0d:5c:cb:06:ab:b2:35:28:80:8b:01:0d:a2:2f:0b:80:
58:44:21:69:ad:a3:a9:84:41:c5:c9:c5:6b:01:a4:1b:1a:67:
46:72:fa:9b:cc:9b:7c:bf:2b:22:67:d4:61:6a:a5:22:cd:2e:
fc:a1:12:f9:f6:a0:a1:33:28:b4:4b:70:ad:5b:ef:6a:06:1f:
fa:a1:24:5d:2e:20:35:ad:53:ac:5e:5a:fe:98:d7:9a:f3:f0:
3d:91:eb:40:30:09:92:fb:a8:13:59:8e:bc:90:9f:9c:45:fe:
30:ff:e9:2c:23:1a:27:f4:91:21:4a:66:35:3f:85:03:e0:cb:
cb:df:e7:cb:3c:1e:74:7b:df:93:ae:15:4e:41:dd:fc:fd:29:
1e:ac:1d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:41:54 2026 by rpki-client