Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File: 3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier: rzgep1CyIxihRwJB/6ButoYcKs7BWP1UgJVmvpBN2mY=
Subject key identifier: 55:02:33:39:30:FC:40:D4:8D:68:09:4A:13:1B:37:D3:CF:CD:98:18
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer: /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial: 019D284D4EE43731422891B13E6FA6711D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number: 0579
Signing time: Thu 26 Mar 2026 04:00:48 +0000
Manifest this update: Thu 26 Mar 2026 04:00:48 +0000
Manifest next update: Fri 27 Mar 2026 04:00:48 +0000
Files and hashes: 1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: X9NdJTmW3IpGeto55ByD7lbZmOnBT4sn+fdigu4+sZQ=)
2: PWpDsLMHEz8TOyrA-SyzsSx50x4.roa (hash: 3QKMuAcr+JgQ4o/2LQdy62QLuMBtccj8bJckjR3bodQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:4e:e4:37:31:42:28:91:b1:3e:6f:a6:71:1d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Validity
Not Before: Mar 26 04:00:48 2026 GMT
Not After : Mar 27 04:00:48 2026 GMT
Subject: CN=5502333930fc40d48d68094a131b37d3cfcd9818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:4a:21:90:78:6d:64:30:f5:4e:e5:ec:bd:
81:bf:7d:ae:fc:58:7c:46:f6:89:fd:5e:ce:21:8c:
1a:fa:e8:15:cd:fd:4f:2c:64:86:2a:6a:3d:88:0f:
53:a6:77:08:b7:68:58:6c:c4:d8:42:a2:56:77:cc:
6b:6f:3c:2f:6f:da:12:b7:e0:8d:88:02:92:2b:9b:
da:2e:16:f7:66:a0:5b:26:b0:96:af:6c:6b:7f:ee:
bf:bf:1c:e1:3b:2c:c3:8b:4c:41:8a:e3:d1:9f:b7:
0c:f1:49:9b:b5:02:ce:fa:f8:8e:cf:86:fe:15:d2:
89:a7:05:2b:4f:91:70:83:3a:48:bc:59:92:3c:64:
e2:34:cc:c2:fa:5a:7d:de:b6:eb:09:7b:8d:0b:e6:
87:d1:44:26:90:63:0c:c2:b5:a7:5f:0b:fb:0d:06:
3a:b4:24:fc:ca:97:c2:f2:64:dc:8c:94:77:13:bb:
3f:8d:72:ba:98:e7:d7:64:80:53:86:bf:da:46:5d:
3b:a4:b6:77:13:3c:e4:bb:e8:51:49:77:5f:92:ea:
9c:ae:ab:cd:b9:71:35:e6:5d:bd:63:c1:81:7e:a4:
46:f9:75:7f:1c:50:75:14:5e:5c:56:16:79:08:13:
b9:67:25:a9:43:0a:ae:7d:e4:2a:fe:f6:c7:ff:82:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:02:33:39:30:FC:40:D4:8D:68:09:4A:13:1B:37:D3:CF:CD:98:18
X509v3 Authority Key Identifier:
keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:59:3a:7c:ad:83:fd:e3:45:06:96:e3:11:5f:f8:34:d5:cb:
17:90:84:c6:7f:b9:76:dc:8d:8c:5a:30:85:b8:c3:42:85:74:
da:ca:9e:c2:7f:e7:cb:91:10:36:da:cd:a7:0a:c2:52:c3:aa:
c8:29:ff:dd:ca:50:bd:eb:b9:d3:14:25:86:4e:38:f8:b5:ec:
d4:89:ce:b0:b8:9d:3a:f5:41:d6:cf:c7:45:9a:72:3d:d5:34:
66:fd:e1:30:a9:0b:e7:db:56:60:15:f3:52:72:0b:a9:15:8a:
cf:b7:b6:9f:35:ab:d6:71:18:3a:e8:24:40:63:7d:54:66:34:
0c:56:5c:ce:99:be:84:1a:42:02:30:c8:98:e7:38:37:ab:09:
31:91:4a:00:d2:1d:04:8f:8e:f8:5b:78:16:61:68:0f:3d:b7:
c7:04:29:d0:a4:50:bf:3b:7f:69:5b:cb:0e:f9:42:4c:a1:70:
11:61:1b:9a:a9:98:ba:6c:94:2d:3e:91:ef:e1:8a:43:95:c0:
a1:34:4e:99:64:0d:04:ce:1e:33:51:1c:f8:7f:86:30:bf:4e:
8b:09:a1:2e:9f:f3:88:6c:75:66:44:fd:06:68:93:b2:3d:27:
03:60:59:b3:56:23:7e:fe:c6:59:c2:90:ef:b6:c8:df:c2:87:
2a:6b:a7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:38:07 2026 by rpki-client