Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: 6VuexOidyzhPpBwHUp1QNpSSZbQ0BvGI8iETKhPQD9Q=
Subject key identifier: 7A:F9:38:C9:98:00:D2:02:AB:36:78:53:38:B1:6B:B4:C6:F5:6C:44
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019DB92447F6875520B0FB2C8478704C2A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 149B
Signing time: Thu 23 Apr 2026 07:00:55 +0000
Manifest this update: Thu 23 Apr 2026 07:00:55 +0000
Manifest next update: Fri 24 Apr 2026 07:00:55 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: WQ9BqZ1SFL3vvoP2hFtntoDUqGvdpTrijXQHgwym2Rg=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Apr 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:24:47:f6:87:55:20:b0:fb:2c:84:78:70:4c:2a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 23 07:00:55 2026 GMT
Not After : Apr 24 07:00:55 2026 GMT
Subject: CN=7af938c99800d202ab36785338b16bb4c6f56c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:9e:9f:14:89:73:a8:17:cd:26:8b:d1:7a:
73:18:4a:39:da:be:92:56:26:88:a6:30:5e:cc:76:
06:9c:6c:c8:f8:b4:c6:e7:df:a6:66:43:4f:c2:1d:
84:e1:82:cb:5e:3f:b4:79:5b:bd:20:81:5a:73:79:
90:3b:d0:b5:3f:f6:e9:aa:79:9e:cb:e0:75:9a:c5:
80:41:fb:e9:c0:93:3a:9b:dc:69:dc:79:43:5d:91:
c2:20:74:9c:9a:ff:c8:2f:3a:d2:a9:ec:45:12:28:
e4:10:f7:6f:00:50:89:1a:d2:84:bf:dc:31:91:a2:
3c:2a:a3:aa:57:3f:88:77:0b:67:a5:75:05:04:13:
d7:7e:3e:29:c8:a6:73:e6:53:13:79:f0:bd:04:9c:
28:dc:e7:65:90:62:8a:f9:d8:f1:5d:64:30:13:ab:
a2:1a:ab:3d:2a:0f:03:4b:06:5c:73:c6:ca:c9:24:
cc:e3:fe:9f:92:5c:85:db:ac:81:ad:f0:bb:7f:d8:
e5:67:07:a9:80:b7:33:77:1c:00:aa:46:29:06:6b:
55:d4:f3:e4:72:6d:49:7a:70:e5:54:a0:28:b2:c7:
e5:de:3d:83:ed:bd:11:c2:a2:a5:25:f0:88:2a:fc:
34:3f:ce:2b:4e:85:35:de:6f:b5:97:b8:4f:da:d0:
17:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F9:38:C9:98:00:D2:02:AB:36:78:53:38:B1:6B:B4:C6:F5:6C:44
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:24:fb:a0:be:f5:e5:8c:3f:18:55:3b:3e:55:72:9a:32:e2:
ff:9a:39:c4:06:2d:71:dc:97:71:89:3b:89:1b:75:c3:9d:34:
fb:28:13:44:80:cb:f5:89:d9:2f:75:ed:a4:a9:28:04:82:32:
db:4c:9f:8d:85:9d:18:4c:85:62:20:53:76:cc:c6:e6:0d:e2:
be:85:6f:e2:73:4a:cf:ec:4e:30:49:c0:cf:85:3f:49:7b:96:
76:54:d6:ca:ec:51:92:49:ed:30:d0:8f:d9:13:03:d9:bd:87:
1e:33:a8:08:49:5e:dd:2e:9d:91:15:61:fb:2b:b6:58:01:7a:
3a:1c:66:c7:fb:d9:bc:64:12:b0:fe:de:43:f8:f7:19:e7:df:
6e:8c:0b:4b:c0:fe:6a:80:e2:db:92:a1:80:58:94:a5:29:7a:
c8:1b:34:ee:09:d1:08:18:cf:6b:ec:92:36:78:8e:62:a7:7d:
fe:2a:77:55:71:e4:ac:d5:d0:28:02:90:14:06:68:0e:04:ba:
01:f5:fd:14:66:28:bc:da:bb:c5:e2:ea:37:69:f9:1f:9d:c3:
9a:ee:fd:6b:68:fc:25:7a:0d:47:45:86:a3:2c:16:93:dc:f4:
15:7d:54:58:9d:80:97:ed:86:ea:af:42:4e:a1:fc:21:f2:59:
9e:26:17:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 23 11:55:51 2026 by rpki-client