Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File: 3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier: +SkEsVbVbUHkvn3el9GeoCmZLBr0m4kH21MMlSt5NEw=
Subject key identifier: AB:DE:A7:D6:49:AE:CD:7E:3D:51:39:DF:E4:22:4F:02:9A:C8:BF:45
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer: /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial: 019E1D90C36ABDE24AF4C027BBB2786CC834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number: 05F8
Signing time: Tue 12 May 2026 19:01:26 +0000
Manifest this update: Tue 12 May 2026 19:01:26 +0000
Manifest next update: Wed 13 May 2026 19:01:26 +0000
Files and hashes: 1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: ElnelUSO7YXxRoLRee1DlP3ITjV6csOrVlQ8y39KC4g=)
2: PWpDsLMHEz8TOyrA-SyzsSx50x4.roa (hash: 3QKMuAcr+JgQ4o/2LQdy62QLuMBtccj8bJckjR3bodQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:c3:6a:bd:e2:4a:f4:c0:27:bb:b2:78:6c:c8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Validity
Not Before: May 12 19:01:26 2026 GMT
Not After : May 13 19:01:26 2026 GMT
Subject: CN=abdea7d649aecd7e3d5139dfe4224f029ac8bf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:14:2e:f8:54:82:a0:a7:bc:eb:9e:79:aa:
62:1c:4b:db:57:f0:57:57:37:34:bc:51:9d:b4:ac:
03:a8:3f:99:27:5b:4f:3a:d0:c1:0f:b8:20:e0:c7:
b6:c6:2c:40:47:10:9b:10:9e:a1:a7:fa:58:c6:1b:
b7:80:01:04:2c:00:32:83:5b:fa:29:ef:c0:76:4b:
10:9c:24:0b:6f:dc:ac:56:7e:82:ec:f4:8e:49:7e:
12:cc:7c:27:dc:b0:b4:be:f6:02:68:40:90:26:35:
ed:4d:8e:57:20:78:cc:f4:04:d5:ad:02:9d:33:87:
8a:51:ae:80:c2:cb:b1:bd:85:b6:b1:8d:73:55:84:
8b:dd:20:f8:ef:c3:d5:31:cb:32:be:13:be:19:70:
a9:5e:03:22:2c:1b:22:20:b4:b9:4d:ba:95:0c:db:
de:5b:0e:8e:d3:98:12:92:16:64:d8:06:56:8e:bb:
6c:b2:e5:0e:6b:43:81:d5:14:5b:96:d2:8d:52:1b:
bc:42:10:e8:34:b0:02:80:44:d0:d8:0a:a4:e5:02:
c1:1f:d6:d3:d3:6e:d6:d1:da:9a:a8:68:54:12:74:
13:ac:21:72:be:84:7e:86:87:fa:52:88:31:8b:f1:
05:7f:e1:9f:8d:4c:1d:67:d2:34:94:b8:c0:3e:56:
c6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DE:A7:D6:49:AE:CD:7E:3D:51:39:DF:E4:22:4F:02:9A:C8:BF:45
X509v3 Authority Key Identifier:
keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:49:2b:18:d7:6d:5b:11:ba:03:fa:39:64:74:82:46:81:1d:
57:8b:68:bf:01:41:d3:23:bf:ec:15:4f:6d:fd:94:48:f8:8c:
4b:54:00:f3:16:38:28:4e:03:eb:24:ac:6f:27:b1:08:69:5c:
a4:a5:f2:30:5f:39:51:ff:d0:e8:88:44:8b:7d:64:cd:a4:10:
db:7d:ae:bf:89:45:9b:c4:28:f4:ab:b8:8d:49:72:81:07:a2:
3c:43:d6:0d:0d:8c:04:f2:30:31:c2:3c:e9:d5:7f:08:17:98:
76:64:ba:54:28:c1:6b:67:c6:55:17:9b:a5:a3:b2:c1:08:7c:
29:7d:59:74:28:59:a6:a0:73:dd:8c:81:a9:0c:02:4b:09:4d:
26:b7:d0:75:36:cc:bb:5c:64:49:85:10:c6:b9:c6:e7:4b:bf:
d8:d0:cd:86:f2:b4:1c:be:ff:f6:c3:ef:97:2a:8e:7d:76:da:
5b:90:c1:e1:19:63:c6:2a:93:19:1b:e6:d0:8b:b1:46:6c:74:
a5:ec:80:ec:27:1e:fa:48:00:1f:a9:31:67:09:70:cd:50:df:
74:e3:8f:db:28:fb:1d:b1:a8:49:ab:95:ee:4e:dd:d3:f8:3b:
73:62:54:77:45:f2:16:98:f3:00:f5:a1:67:f4:5b:65:29:2c:
21:a3:8b:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkMNqveJK9MAnu7J4bMg0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZmNmZmQxMDBkYzAwN2YxYTk2YTQ0MzBlYTg3MjM4OWM1
N2Q2Y2YwHhcNMjYwNTEyMTkwMTI2WhcNMjYwNTEzMTkwMTI2WjAzMTEwLwYDVQQD
EyhhYmRlYTdkNjQ5YWVjZDdlM2Q1MTM5ZGZlNDIyNGYwMjlhYzhiZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOIULvhUgqCnvOueeapiHEvbV/BX
Vzc0vFGdtKwDqD+ZJ1tPOtDBD7gg4Me2xixARxCbEJ6hp/pYxhu3gAEELAAyg1v6
Ke/AdksQnCQLb9ysVn6C7PSOSX4SzHwn3LC0vvYCaECQJjXtTY5XIHjM9ATVrQKd
M4eKUa6AwsuxvYW2sY1zVYSL3SD478PVMcsyvhO+GXCpXgMiLBsiILS5TbqVDNve
Ww6O05gSkhZk2AZWjrtssuUOa0OB1RRbltKNUhu8QhDoNLACgETQ2Aqk5QLBH9bT
027W0dqaqGhUEnQTrCFyvoR+hof6Uogxi/EFf+GfjUwdZ9I0lLjAPlbG2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvep9ZJrs1+PVE53+QiTwKayL9FMB8GA1UdIwQY
MBaAFN38/9EA3AB/GpakQw6ocjicV9bPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2Z6XzBRRGNBSDhhbHFSRERxaHlPSnhYMXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8yZmMzNzUtZGExNC00ZjdmLThmYWUt
MTVhNmU3ZGY0NWM5LzEvM2Z6XzBRRGNBSDhhbHFSRERxaHlPSnhYMXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8yZmMzNzUtZGExNC00ZjdmLThmYWUtMTVhNmU3ZGY0NWM5
LzEvM2Z6XzBRRGNBSDhhbHFSRERxaHlPSnhYMXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEkrGNdt
WxG6A/o5ZHSCRoEdV4tovwFB0yO/7BVPbf2USPiMS1QA8xY4KE4D6ySsbyexCGlc
pKXyMF85Uf/Q6IhEi31kzaQQ232uv4lFm8Qo9Ku4jUlygQeiPEPWDQ2MBPIwMcI8
6dV/CBeYdmS6VCjBa2fGVRebpaOywQh8KX1ZdChZpqBz3YyBqQwCSwlNJrfQdTbM
u1xkSYUQxrnG50u/2NDNhvK0HL7/9sPvlyqOfXbaW5DB4RljxiqTGRvm0IuxRmx0
peyA7Cce+kgAH6kxZwlwzVDfdOOP2yj7HbGoSauV7k7d0/g7c2JUd0XyFpjzAPWh
Z/RbZSksIaOLdA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:14:38 2026 by rpki-client