Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: vVvqDPmkAEHPHgT8jlssuPaCIrJgymwzlsm0OI2qPqU=
Subject key identifier: A9:E5:22:62:BB:AE:FD:16:32:80:C9:E1:22:7D:EC:51:1A:EE:BF:4E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019DCE62FAECD8BE8FED5428C47B0812E9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 14A6
Signing time: Mon 27 Apr 2026 10:01:26 +0000
Manifest this update: Mon 27 Apr 2026 10:01:26 +0000
Manifest next update: Tue 28 Apr 2026 10:01:26 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: WHXM3OIAyvX76GOhtXk8Flj6vL8LdbcOLdwyAwYD5ZI=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:fa:ec:d8:be:8f:ed:54:28:c4:7b:08:12:e9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 27 10:01:26 2026 GMT
Not After : Apr 28 10:01:26 2026 GMT
Subject: CN=a9e52262bbaefd163280c9e1227dec511aeebf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:c9:c9:16:53:4a:2c:74:56:ec:6c:d9:9c:
05:d1:cd:c7:43:4d:91:74:17:c4:cf:11:3e:9a:57:
76:87:12:0c:60:71:e6:77:7e:a4:32:81:c0:a7:07:
c1:aa:33:98:28:ea:f0:34:10:86:3a:ce:88:18:90:
fe:54:dc:22:0d:de:88:2e:ad:86:72:3c:b9:66:27:
1d:6b:a7:da:c8:f0:94:4f:33:eb:0b:60:06:77:13:
f8:45:1f:95:43:7b:2b:97:c2:a4:20:03:45:d5:fe:
6f:b1:a1:07:7b:27:8e:72:a0:07:b5:2b:df:32:56:
e6:dd:76:fd:ae:4d:20:83:83:6b:2c:41:3d:35:de:
f7:c7:4a:dc:bf:8d:c2:cc:96:c9:32:32:fc:8a:ad:
da:10:cc:cb:e7:dc:2b:f3:40:fb:27:42:40:7a:b0:
a1:06:f5:e4:f0:2c:32:0c:9a:56:2f:df:9f:79:a8:
f7:67:58:fc:ee:1b:eb:d8:5e:b1:25:05:f3:2e:79:
26:83:06:bb:99:bc:9d:ed:83:93:91:d9:bf:f1:61:
3c:79:41:b0:53:d5:64:0d:b5:27:18:29:cc:bf:dd:
80:6c:7c:5b:3b:f7:a5:b5:fd:4c:72:d5:5e:96:c9:
51:c2:16:09:08:c1:7b:04:71:29:63:02:3f:dd:78:
15:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E5:22:62:BB:AE:FD:16:32:80:C9:E1:22:7D:EC:51:1A:EE:BF:4E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9d:5b:dd:63:65:0a:43:56:e3:c6:57:d1:8d:73:9a:8f:ca:
0f:dc:18:a6:b7:97:cb:a4:08:ef:a0:28:ab:d5:6f:0b:1c:06:
4a:d6:b7:19:6d:31:16:f0:49:94:79:d0:41:15:42:be:0a:ac:
88:d2:bd:89:9a:7c:10:8c:a6:e8:61:48:08:69:52:b1:ca:97:
dd:49:6e:53:6d:1e:1d:41:ac:b1:e1:e0:37:5b:98:bd:c3:0d:
1d:64:cb:ef:8e:ca:88:e4:d6:72:ff:85:60:cc:fc:73:f6:55:
36:43:41:f3:d9:d3:55:d1:c6:b5:45:38:fb:af:2a:81:62:23:
9e:d4:b4:50:a4:51:74:1e:26:5d:52:ae:86:f2:f4:8c:c1:aa:
d7:66:aa:87:c8:fb:2e:3b:f7:2f:ca:5b:48:60:5f:94:1f:cc:
db:14:af:36:48:a3:af:9a:b4:d3:ba:91:fa:c1:ca:4b:6c:b7:
70:9b:98:68:59:df:5a:16:49:66:69:96:85:96:49:82:fc:90:
d0:87:59:e3:c8:41:4f:f2:f5:02:8e:be:86:13:50:5f:13:7a:
e3:f9:21:cb:61:aa:bb:34:e6:5b:1d:e3:49:b1:26:35:f0:7d:
a2:12:70:74:9f:20:31:a4:39:9e:87:f2:e0:b8:a3:f1:6e:85:
5e:38:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:42:07 2026 by rpki-client