Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File: 3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier: eZUlVIXtWVI9r7aGAQ1+04iLKtXLhTNcu/UJhq0oCpo=
Subject key identifier: 5A:97:9D:90:3A:10:A4:06:1A:86:B8:E4:7A:2F:68:FE:97:A2:AF:C7
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer: /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial: 01A0D8A8837B4F7F180B9A1EFC78A735648F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number: 0762
Signing time: Fri 25 Sep 2026 13:01:57 +0000
Manifest this update: Fri 25 Sep 2026 13:01:57 +0000
Manifest next update: Sat 26 Sep 2026 13:01:57 +0000
Files and hashes: 1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: HHE6/bY5JqMliIW02L24ICk+6Haz6Xapx7aXwA4El10=)
2: PWpDsLMHEz8TOyrA-SyzsSx50x4.roa (hash: 3QKMuAcr+JgQ4o/2LQdy62QLuMBtccj8bJckjR3bodQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:83:7b:4f:7f:18:0b:9a:1e:fc:78:a7:35:64:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Validity
Not Before: Sep 25 13:01:57 2026 GMT
Not After : Sep 26 13:01:57 2026 GMT
Subject: CN=5a979d903a10a4061a86b8e47a2f68fe97a2afc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:6a:32:1b:67:60:49:9e:82:dc:fd:7f:d3:
73:78:23:2b:19:cc:7c:08:f6:c6:9c:b9:57:8e:60:
30:07:e2:3f:8b:bd:9a:5b:85:7b:b5:c5:02:c4:35:
6a:eb:da:75:db:bc:b7:ed:22:cd:2c:06:db:07:9c:
d7:77:f0:c3:0d:e5:e4:1a:1c:41:44:44:3d:d1:ac:
b8:14:fc:87:43:35:7e:d7:3a:8b:a5:51:69:73:c5:
26:3f:bf:a4:f2:3b:03:46:35:df:96:69:13:e4:3a:
b2:b3:d5:28:25:55:8d:c6:7d:db:f3:1b:47:ac:ed:
15:45:15:e5:42:cd:dd:71:df:d6:fd:c4:10:2d:d8:
2d:f8:7a:04:a8:c3:06:2f:ec:c5:7a:a5:eb:39:00:
c9:ba:58:8b:fb:66:11:61:45:4c:e6:97:d8:1b:b7:
b6:49:57:0f:a8:e2:94:cc:e5:c9:1b:13:62:2f:9c:
dd:fa:97:62:31:3c:f2:2d:f8:66:80:eb:a3:ea:12:
97:02:7c:77:f9:49:3d:0a:2a:9e:8f:e8:c1:e0:87:
52:9c:39:2a:cf:59:0b:8e:79:c4:66:cd:80:4b:d2:
af:23:af:85:27:79:dd:03:2d:56:20:77:9e:fb:0a:
a5:6b:15:7e:a7:d6:55:c5:a0:bd:35:38:be:e2:b4:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:97:9D:90:3A:10:A4:06:1A:86:B8:E4:7A:2F:68:FE:97:A2:AF:C7
X509v3 Authority Key Identifier:
keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:40:10:79:f8:9b:b5:ff:12:4c:16:a0:35:63:fd:dc:f3:24:
a5:f2:15:71:62:55:e1:b4:5f:24:9a:ea:e2:c8:ab:b8:4d:29:
0e:b2:5a:81:b7:fe:4b:e2:21:1f:51:0d:70:89:c8:3f:b7:19:
c4:2e:0f:68:e2:d0:ea:5b:51:df:11:d3:9e:44:6f:c6:da:1f:
9f:f7:17:cc:07:02:60:83:c9:5d:86:44:d1:1c:ff:1c:84:67:
3c:27:ed:bf:24:a2:19:03:bb:15:1b:e8:66:c8:d1:db:bd:ad:
9a:3c:32:bf:83:61:e5:75:73:c1:85:78:b6:9b:41:fa:f8:00:
0e:4b:83:a8:bd:fe:74:aa:5e:9d:7f:02:37:f1:4c:0c:fe:a8:
cf:89:af:51:fe:66:08:4b:5e:b7:34:68:f4:5a:5b:3f:ac:c7:
cf:dc:58:e5:51:42:d2:ed:84:41:8a:13:94:18:e4:06:34:16:
3e:df:9a:89:75:14:81:24:90:89:89:4b:d4:32:11:ea:64:03:
42:9b:67:77:c3:14:4b:58:45:58:3e:17:9e:00:bc:0e:44:77:
bb:72:22:5e:b7:fe:39:89:78:30:47:15:96:f5:91:dd:36:82:
23:aa:f1:32:ba:6e:1b:5f:e2:b7:e8:53:f8:7a:12:97:ba:c8:
a4:d5:a5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:25:54 2026 by rpki-client