Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: GAL2G0b49C2Eue/L86NDFTi4svmHJ5C/Y5sL2zIoeYc=
Subject key identifier: 89:C7:ED:FD:6D:18:B8:2B:1F:43:F6:9C:5F:9E:90:52:4E:42:F1:9B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019CDEEB2A61845E5CF0E3613366E99FD6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 142A
Signing time: Wed 11 Mar 2026 22:01:19 +0000
Manifest this update: Wed 11 Mar 2026 22:01:19 +0000
Manifest next update: Thu 12 Mar 2026 22:01:19 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: G+EOhu0BqWR8SNht5hCnDRanHRaiCMuC8aGcINDnqAo=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 18:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:de:eb:2a:61:84:5e:5c:f0:e3:61:33:66:e9:9f:d6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 11 22:01:19 2026 GMT
Not After : Mar 12 22:01:19 2026 GMT
Subject: CN=89c7edfd6d18b82b1f43f69c5f9e90524e42f19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:3d:eb:16:3f:b2:25:20:51:c2:5a:de:28:
46:9a:b5:50:89:62:66:cd:82:08:42:3e:60:50:27:
28:af:62:10:d1:f5:4e:98:41:5f:e8:93:a1:b0:4b:
56:c6:26:20:8e:da:e2:d3:4f:32:cd:0e:a1:e6:83:
03:c9:9a:0f:89:42:6f:99:ef:a5:94:9b:85:a7:fb:
b7:a2:15:1e:24:b0:6d:d4:14:ad:dd:cd:10:01:84:
4a:f5:fa:23:6c:7b:1d:58:2b:2c:94:d5:cb:12:2e:
3b:03:fe:e0:9c:9d:bd:fd:17:1e:0b:c3:23:4d:57:
18:84:64:df:5a:bb:a3:df:6e:07:a5:8a:83:4e:b5:
2c:a9:81:4f:87:13:09:f2:3b:a1:b4:b5:b0:23:7a:
33:c0:1a:e8:35:59:ea:c9:e3:9e:ad:f3:e1:df:4a:
31:af:74:21:48:22:15:a7:93:87:e9:90:35:c4:6a:
75:71:89:e5:6b:f0:50:f3:02:2c:9e:31:25:b1:e5:
ef:2d:c7:e8:91:0a:3a:7d:29:9e:bf:f1:b3:27:ce:
e3:30:3a:16:32:4f:87:f7:0f:02:0b:c7:9a:1b:02:
c6:25:1e:9a:2a:92:cc:2a:84:d9:08:fd:9f:78:52:
f3:79:fa:c9:60:33:c5:59:65:47:a2:cf:1a:07:81:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C7:ED:FD:6D:18:B8:2B:1F:43:F6:9C:5F:9E:90:52:4E:42:F1:9B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8e:54:ab:1d:72:e7:95:a0:92:8c:00:63:41:03:89:e6:d5:
ea:6e:d9:f0:46:a4:42:22:d6:4d:48:98:e8:70:0b:cc:04:7e:
77:58:50:b8:c1:6b:d5:f6:42:06:07:85:31:b7:d0:fd:47:ca:
c0:b8:f2:1d:f4:19:3f:2f:3c:99:d9:82:4a:7e:32:90:ee:f2:
7a:cd:8e:ad:62:6a:bf:3c:83:23:5d:70:b8:00:2d:12:13:60:
e2:b4:d0:16:f4:09:e6:72:64:73:56:fb:6d:bd:4b:25:ad:ba:
91:c0:2d:d0:59:ba:a8:ee:18:13:c5:42:38:75:32:64:11:b4:
3b:1e:ca:ad:57:ea:bd:b3:68:e6:79:a3:d5:69:36:d6:38:41:
89:e1:51:28:46:e7:36:4c:1b:a1:07:e2:76:d1:5f:ea:e7:2d:
f7:72:fa:24:63:78:f7:02:95:77:34:db:04:6c:ba:aa:4f:42:
09:0c:2b:44:ea:4e:0b:7b:f9:cf:63:f0:80:9a:1d:72:7a:0d:
18:7b:50:f1:74:36:b2:ff:96:9d:fb:50:83:54:2f:19:68:b9:
f4:59:c6:da:28:72:6b:12:d3:5b:18:95:04:28:0d:61:7c:d7:
ef:01:fb:88:44:f3:61:65:3e:64:fc:05:73:b5:a5:fb:fa:f5:
21:c0:77:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 02:16:46 2026 by rpki-client