Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: Fh2Az4zLedLfVddvAiJc1plLtxDLeiuloZskY7QI+PM=
Subject key identifier: 3E:92:E1:9E:11:DA:4D:34:39:C4:AA:96:B8:CA:E2:AC:B8:9B:A7:C9
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 019E1D59A10796A715BEE76B26B1321AF146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 062E
Signing time: Tue 12 May 2026 18:01:13 +0000
Manifest this update: Tue 12 May 2026 18:01:13 +0000
Manifest next update: Wed 13 May 2026 18:01:13 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: yYszhV9+q49YIp3xXkATRaj5pnVFfame1r75hcGaiYk=)
2: h8DfFuvqdUk7YoMeApQAXPJqjdk.roa (hash: ye1ky96HscedkMqsQUVtxrgYXUC8cIgsxg/lZeSLzu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:a1:07:96:a7:15:be:e7:6b:26:b1:32:1a:f1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: May 12 18:01:13 2026 GMT
Not After : May 13 18:01:13 2026 GMT
Subject: CN=3e92e19e11da4d3439c4aa96b8cae2acb89ba7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:b5:35:6f:6b:bf:d8:ea:34:97:ca:53:fc:
07:8a:f3:fd:5d:08:ef:ce:c3:a2:4f:54:93:32:e9:
ff:12:22:69:d3:35:82:1d:73:10:77:fc:4b:7e:70:
71:13:11:99:46:93:c5:dd:1f:d5:e8:e3:0c:51:e0:
c7:92:ce:53:b1:88:dd:f7:41:d3:69:09:2f:88:a9:
12:cd:da:7f:5d:5c:29:45:d8:1a:2e:90:ed:cf:fa:
1a:1a:e0:42:d4:2c:36:da:40:59:6b:d3:48:e8:8b:
3d:76:e1:97:4d:d9:5c:98:05:cd:84:f1:48:fe:45:
2b:bd:35:2e:85:75:df:01:38:7a:a6:db:97:e9:70:
61:65:74:27:00:37:a9:8f:6d:93:f8:98:71:d6:a8:
a2:f6:d5:a8:cd:44:00:fd:a8:c4:e2:9b:0c:d0:05:
e3:6f:07:70:47:21:3e:de:91:c5:db:7f:46:6d:0e:
82:25:4f:58:1a:56:dc:72:a7:4e:f9:2d:c1:49:6a:
38:b1:d8:ba:4b:60:3b:91:03:bf:28:04:dc:94:f6:
2c:6a:d1:36:dd:ff:3b:70:8d:fb:a0:86:25:56:79:
6c:de:bc:da:2a:ed:b0:0c:dd:09:1a:1e:46:b0:30:
a2:b9:07:e2:26:e1:02:44:61:af:57:02:d2:d2:6e:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:92:E1:9E:11:DA:4D:34:39:C4:AA:96:B8:CA:E2:AC:B8:9B:A7:C9
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a0:ce:0b:2d:89:64:e5:90:1d:66:98:5e:d1:ef:95:f2:cb:
d9:d7:29:38:22:72:35:91:d1:60:43:cf:05:8e:68:9c:de:ca:
12:10:a3:38:2d:99:ee:45:55:da:dc:d8:6c:94:21:22:b3:a6:
1d:e3:87:57:46:0a:2c:4a:ed:4f:91:ca:14:45:62:f3:2d:18:
24:78:10:d1:b6:28:64:d1:be:4a:86:b5:c4:95:5e:a3:b6:9d:
37:89:30:a9:a9:63:81:0a:7a:54:8f:fc:8f:a8:d4:21:51:9c:
2f:d7:f3:80:0b:cf:6f:0c:fd:54:3b:5c:a3:74:4b:2d:f9:29:
8d:2d:96:e4:33:ef:13:ce:0c:54:9b:87:0d:59:e6:90:f9:80:
d8:25:96:98:04:5c:cc:c3:10:a1:a2:ed:c8:7d:d4:44:17:be:
b3:20:ca:a4:07:6c:00:00:42:a5:48:b7:d0:77:48:12:7c:38:
4d:b2:72:4c:f5:5f:06:c7:4f:80:ab:35:41:46:69:0d:3b:6a:
4f:6b:c1:e7:3d:dc:98:d1:26:f9:ba:af:24:f8:d3:21:65:9e:
5b:bf:7d:f6:89:1f:99:ff:95:f1:cd:4f:d9:6d:4b:34:69:64:
99:a4:13:7f:02:5e:dd:82:54:a0:19:65:6f:58:90:73:f1:80:
01:8d:bd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:17 2026 by rpki-client