Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft
File: 3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft (raw, json)
Hash identifier: FSiYVgFdEwbKvZ5AD2x+m5PEQ/HD8dSXIYudeT+1svU=
Subject key identifier: 8B:3F:FF:7A:26:76:D8:DE:1E:F0:BD:3A:86:4E:2E:3F:CB:2E:6D:97
Authority key identifier: DC:56:53:CF:B0:A4:EE:54:52:5E:AE:F7:B3:70:B4:CB:D9:AA:07:81
Certificate issuer: /CN=dc5653cfb0a4ee54525eaef7b370b4cbd9aa0781
Certificate serial: 019F9090AA3A6C198D7EC2991F1E8E4FFEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FZTz7Ck7lRSXq73s3C0y9mqB4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 20:00:27 +0000
Manifest this update: Thu 23 Jul 2026 20:00:27 +0000
Manifest next update: Fri 24 Jul 2026 20:00:27 +0000
Files and hashes: 1: 3FZTz7Ck7lRSXq73s3C0y9mqB4E.crl (hash: HZgNbfgyAsrnGFcH7U3U1aR+mkWooqe9n+uVBZt5ukM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FZTz7Ck7lRSXq73s3C0y9mqB4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:aa:3a:6c:19:8d:7e:c2:99:1f:1e:8e:4f:fe:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5653cfb0a4ee54525eaef7b370b4cbd9aa0781
Validity
Not Before: Jul 23 20:00:27 2026 GMT
Not After : Jul 24 20:00:27 2026 GMT
Subject: CN=8b3fff7a2676d8de1ef0bd3a864e2e3fcb2e6d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:bd:5e:53:a0:e0:b4:d7:11:a6:c3:ab:aa:
33:5f:16:02:5b:d3:11:af:f6:91:30:95:f9:0e:ab:
63:e8:bf:0d:ad:55:1d:0d:92:40:ca:90:4d:44:41:
9c:d0:79:4f:ff:38:19:1c:a9:a1:c1:e9:c8:51:68:
b8:5c:3d:c1:d0:f6:c8:e7:e0:b3:2f:9d:48:ac:82:
58:23:1d:8c:c0:fd:a0:07:01:3a:90:03:fd:f1:e7:
34:b2:37:c5:7b:50:5b:18:ed:58:74:aa:b1:61:f4:
97:41:1c:78:eb:19:a2:18:86:53:b8:82:43:3a:5a:
a8:b9:47:47:82:46:31:3b:6b:c5:d1:b7:56:06:4d:
f7:89:51:6f:13:87:79:bd:d5:9e:36:4f:c4:a1:f3:
35:85:18:7e:52:30:f1:8b:20:f9:29:bb:ef:12:bf:
f6:34:be:cf:85:bb:bb:86:7c:55:5a:27:59:56:ce:
94:79:21:2d:3e:c7:3e:5c:db:c9:49:98:a9:cd:eb:
39:46:0e:1e:f8:8a:8c:a9:91:29:af:2b:00:6b:5b:
8b:48:96:10:b3:8a:88:b2:7c:38:27:0d:75:19:2d:
23:1b:53:e8:31:14:fc:48:b2:49:ff:4d:e5:96:40:
06:39:47:48:27:37:41:e4:4a:3c:25:3e:cf:09:cf:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3F:FF:7A:26:76:D8:DE:1E:F0:BD:3A:86:4E:2E:3F:CB:2E:6D:97
X509v3 Authority Key Identifier:
keyid:DC:56:53:CF:B0:A4:EE:54:52:5E:AE:F7:B3:70:B4:CB:D9:AA:07:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FZTz7Ck7lRSXq73s3C0y9mqB4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c4:6a:79:e1:c8:4d:4d:29:e8:6f:a4:6d:62:9d:eb:d3:48:
42:c5:d5:36:13:59:9f:95:fd:a7:77:b6:21:35:cb:ca:cc:f8:
84:73:34:a7:40:a6:88:ff:d7:aa:32:34:63:94:46:56:68:3a:
af:21:70:38:46:5e:d2:a1:35:68:15:97:0c:dc:da:03:04:32:
f1:30:c9:71:1f:f1:ae:51:59:b9:30:0b:df:1b:16:1b:a8:7f:
1d:62:0d:2b:66:e4:b3:57:48:15:e9:e7:04:e7:80:4b:99:c8:
6b:4a:d8:8d:16:0a:e6:c0:e1:d1:9f:b6:86:7b:f9:e5:4c:03:
7b:d8:50:c1:a1:25:34:84:c7:e7:de:dd:5d:ca:a3:d3:32:51:
64:07:a3:48:bb:5e:3e:f3:89:8e:f3:f2:af:ab:71:ee:6a:79:
5d:bc:7c:18:9c:ae:ba:b1:f2:85:9e:dd:e5:81:a1:77:26:b3:
67:97:ff:0b:a2:cf:f8:d7:4a:8c:bf:2a:29:13:6f:d1:e5:a9:
34:b9:41:e9:47:f2:51:53:68:1e:04:ca:ff:67:73:aa:85:96:
da:8c:2a:24:33:3b:8d:f4:00:18:ca:73:62:fc:ee:ad:91:58:
c2:52:90:d9:9e:d9:ef:c1:62:ff:34:63:3f:10:dc:85:77:4a:
b9:a5:c7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:57 2026 by rpki-client