Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: yeWUelJDMNZLn82PAFZPoOWJ030llAaHyychFWOv+ZU=
Subject key identifier: DD:DC:EF:5B:8F:47:0E:A5:44:D5:AE:94:AF:01:B7:FA:6C:E6:C6:06
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019F773F5DA35175DADCD76C2910F1CDB85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1582
Signing time: Sat 18 Jul 2026 22:01:09 +0000
Manifest this update: Sat 18 Jul 2026 22:01:09 +0000
Manifest next update: Sun 19 Jul 2026 22:01:09 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: fKNoLG3rORk0vLSpgF0hnIS/Gibxycxbl2/Owz5uMsc=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:77:3f:5d:a3:51:75:da:dc:d7:6c:29:10:f1:cd:b8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 18 22:01:09 2026 GMT
Not After : Jul 19 22:01:09 2026 GMT
Subject: CN=dddcef5b8f470ea544d5ae94af01b7fa6ce6c606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:47:79:3e:d5:da:8d:12:01:b9:73:46:f5:19:
d0:e3:47:8a:06:33:d4:00:75:6e:77:fd:d7:f2:d4:
17:a3:4b:2b:f2:51:d1:fa:0d:3f:94:26:56:6d:02:
c3:39:2b:e0:0d:3e:cb:c2:f6:f3:b9:18:48:ed:fd:
df:8a:c7:7f:e0:f4:6b:52:f5:34:c4:25:78:2e:c7:
2b:88:06:62:30:77:0d:52:58:82:6f:41:29:43:61:
af:e1:76:51:cb:08:90:78:6d:06:89:00:24:40:d0:
bd:30:80:ae:f3:62:ef:d7:75:02:2c:5d:0d:cf:8e:
dc:47:3d:0e:31:18:c2:b3:86:59:74:ee:3c:56:ca:
13:de:95:bf:71:9f:e8:b8:c9:b9:5b:39:c0:f0:c5:
4b:75:ec:30:8f:b7:22:50:46:99:22:36:2f:10:57:
5d:3f:a4:01:d9:2e:3d:57:30:4a:29:59:75:67:7d:
98:97:61:90:9b:a8:2d:96:4d:d8:71:fc:3c:0f:c1:
05:b8:2d:6c:d0:de:6a:e8:c8:9e:62:d2:d4:e8:81:
8e:2b:d7:f7:e0:09:11:d8:7b:ef:ee:92:9f:aa:63:
96:2c:40:59:bb:bd:49:8e:14:0e:e5:cf:c5:4c:33:
4d:83:93:ab:07:b3:b4:2c:37:aa:ca:18:e2:e4:59:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DC:EF:5B:8F:47:0E:A5:44:D5:AE:94:AF:01:B7:FA:6C:E6:C6:06
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4e:fd:15:0b:34:9b:9b:15:c6:f4:f3:0c:9e:15:e7:a6:bb:
1d:61:0b:b1:ac:67:a8:2b:8e:6c:68:38:58:9a:2a:8a:45:77:
b6:ff:63:10:ac:51:73:41:70:16:b5:6e:94:64:15:d9:ca:db:
3e:27:b0:f2:1b:53:82:af:b1:4f:12:b2:66:e4:b3:21:77:3f:
44:45:b0:bd:1d:9b:a4:73:e5:c2:18:99:6c:a0:ba:6d:77:e3:
bb:27:19:bd:87:b8:65:61:a6:6e:5c:d3:be:c9:33:ec:43:1e:
57:cb:f2:86:36:e2:a1:b8:76:98:30:47:d3:13:78:7c:c8:63:
81:04:6e:01:e9:40:7a:ec:ca:39:a3:ea:51:a1:79:31:b0:a2:
93:c0:2c:6d:5f:9d:74:36:e5:6f:90:69:5f:57:c9:5e:83:3a:
e2:6a:12:a4:ae:64:72:7c:0c:c9:7e:4d:d8:6d:84:88:7e:52:
68:d8:39:a1:c1:cc:9c:d9:99:23:67:f8:0f:e3:64:26:21:8a:
e1:c0:a7:2b:95:15:52:96:37:d7:0d:bc:5d:5c:76:d3:a1:ec:
72:36:85:96:9c:79:dd:a0:48:ec:55:c5:7f:45:9b:13:20:85:
37:97:ee:12:67:5a:3b:b7:26:c1:ae:0e:d0:20:80:54:87:71:
2b:22:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 05:28:58 2026 by rpki-client