Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier: JgnPgD+vNbt54/lMfWxfqFHHM2wOJhDhwIAzkjBtEeA=
Subject key identifier: 43:FE:A8:82:86:15:93:AF:19:D2:A5:79:A7:0D:8D:18:26:43:B9:84
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial: 019D26281F600C0783F5F0F6C6D8941BD808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number: 05AE
Signing time: Wed 25 Mar 2026 18:00:56 +0000
Manifest this update: Wed 25 Mar 2026 18:00:56 +0000
Manifest next update: Thu 26 Mar 2026 18:00:56 +0000
Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: U3UwQlhWSwTvUZKYH+7oPLk8d6QhFS/JLaiTMIu5LOM=)
2: h8DfFuvqdUk7YoMeApQAXPJqjdk.roa (hash: ye1ky96HscedkMqsQUVtxrgYXUC8cIgsxg/lZeSLzu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:1f:60:0c:07:83:f5:f0:f6:c6:d8:94:1b:d8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Validity
Not Before: Mar 25 18:00:56 2026 GMT
Not After : Mar 26 18:00:56 2026 GMT
Subject: CN=43fea882861593af19d2a579a70d8d182643b984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:15:74:f6:89:80:1c:b5:47:58:ae:d6:e5:82:
73:6e:95:8b:4b:dc:06:31:d7:fe:73:91:df:6d:d1:
13:28:2e:35:03:33:e3:92:94:0d:e9:f2:48:1e:96:
f3:7c:4f:6b:90:fc:ef:5c:19:5f:99:17:55:74:25:
28:89:53:61:4d:4d:f5:0c:58:65:49:4d:0c:7e:3b:
da:12:8a:e6:f3:8a:e2:9e:7e:3e:f8:e9:7c:c3:1e:
d9:22:00:db:27:81:0f:f5:54:de:c3:3b:e0:70:7a:
c9:33:31:91:b3:d8:07:eb:ba:aa:d3:73:88:97:e7:
6e:bb:e6:fc:4d:df:07:50:ce:f5:0d:62:c1:82:ad:
f8:65:8b:8e:2f:ef:55:32:ce:f1:e6:ea:54:50:61:
62:e1:9e:31:07:c6:c1:d4:e1:4e:fd:23:64:f9:59:
67:57:61:52:d0:ae:02:04:31:01:46:46:aa:18:4f:
51:5e:62:d3:b3:f2:29:ef:50:dc:59:0f:3a:30:47:
25:66:a9:44:06:fa:31:4b:70:88:12:d3:44:a7:ab:
dd:b4:a5:a2:56:03:a9:a3:96:cc:b7:e6:1b:2c:b3:
23:d5:25:40:ff:a3:d1:f6:e1:55:e1:71:f1:c7:5c:
bf:45:93:21:e8:12:f6:c6:bb:13:5d:ce:a0:a6:26:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FE:A8:82:86:15:93:AF:19:D2:A5:79:A7:0D:8D:18:26:43:B9:84
X509v3 Authority Key Identifier:
keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:22:c5:6a:7f:86:38:9a:6a:df:c9:9e:77:f0:db:e9:ee:d6:
91:7e:a3:96:81:63:a9:cf:77:8c:59:fc:f3:39:09:72:9e:1d:
7c:5e:ce:ff:a6:71:fe:92:0e:42:01:45:69:ba:0a:80:9f:b5:
f6:45:ee:ac:40:64:58:a4:59:44:27:29:ef:6b:c1:c8:a9:64:
c9:18:db:f1:29:44:3e:3d:da:30:f0:c8:67:4c:40:25:6e:2a:
af:d2:5d:c2:ba:59:16:2f:b3:0b:04:7f:5e:81:d4:fc:85:16:
bd:de:55:4b:c2:7d:11:0a:5c:d9:1b:ae:6d:2f:b1:56:fe:ea:
87:92:b7:66:94:55:52:d6:1b:58:91:3a:92:69:70:d7:78:49:
b3:24:6c:46:f4:a6:cf:5f:48:6c:09:86:d6:b9:12:f4:26:f1:
3d:94:59:c5:ce:b8:6c:d8:7e:3c:3d:f5:23:a5:fc:2a:fa:33:
1a:cf:d3:a4:ec:c9:f7:3d:3e:53:75:da:92:2f:52:a4:fb:7c:
ae:9d:25:25:71:ed:c0:6c:5a:d7:bc:10:2a:9a:2e:52:eb:40:
52:1a:9f:11:ae:2b:cb:a4:84:d8:fe:7a:d7:1b:ea:7d:e4:bd:
4c:96:eb:a5:fc:cf:4f:4d:2a:c7:c4:b3:d4:a7:02:48:8e:dc:
cf:86:2b:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKB9gDAeD9fD2xtiUG9gIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOTE1OGUzZTQxZjYwZmZiZjdlY2FmZjcyMzA3ZDNkYzk1
Mjc3ZjUwHhcNMjYwMzI1MTgwMDU2WhcNMjYwMzI2MTgwMDU2WjAzMTEwLwYDVQQD
Eyg0M2ZlYTg4Mjg2MTU5M2FmMTlkMmE1NzlhNzBkOGQxODI2NDNiOTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BV09omAHLVHWK7W5YJzbpWLS9wG
Mdf+c5HfbdETKC41AzPjkpQN6fJIHpbzfE9rkPzvXBlfmRdVdCUoiVNhTU31DFhl
SU0MfjvaEorm84rinn4++Ol8wx7ZIgDbJ4EP9VTewzvgcHrJMzGRs9gH67qq03OI
l+duu+b8Td8HUM71DWLBgq34ZYuOL+9VMs7x5upUUGFi4Z4xB8bB1OFO/SNk+Vln
V2FS0K4CBDEBRkaqGE9RXmLTs/Ip71DcWQ86MEclZqlEBvoxS3CIEtNEp6vdtKWi
VgOpo5bMt+YbLLMj1SVA/6PR9uFV4XHxx1y/RZMh6BL2xrsTXc6gpia4qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEP+qIKGFZOvGdKleacNjRgmQ7mEMB8GA1UdIwQY
MBaAFN2RWOPkH2D/v37K/3IwfT3JUnf1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUt
NDNkN2ViNzI1NTFkLzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUtNDNkN2ViNzI1NTFk
LzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCLFan+G
OJpq38med/Db6e7WkX6jloFjqc93jFn88zkJcp4dfF7O/6Zx/pIOQgFFaboKgJ+1
9kXurEBkWKRZRCcp72vByKlkyRjb8SlEPj3aMPDIZ0xAJW4qr9JdwrpZFi+zCwR/
XoHU/IUWvd5VS8J9EQpc2RuubS+xVv7qh5K3ZpRVUtYbWJE6kmlw13hJsyRsRvSm
z19IbAmG1rkS9CbxPZRZxc64bNh+PD31I6X8KvozGs/TpOzJ9z0+U3Xaki9SpPt8
rp0lJXHtwGxa17wQKpouUutAUhqfEa4ry6SE2P561xvqfeS9TJbrpfzPT00qx8Sz
1KcCSI7cz4YrGw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:37 2026 by rpki-client