Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: WJX+wIEIf+AjVaYVSsYaG7/yze1nQkWkvMMuVT/sRcI=
Subject key identifier: 06:84:C1:C3:1B:AD:4B:E5:14:74:F7:E2:99:C4:D9:75:6E:9C:89:11
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01A013AC90A24998DC5E6C44A19740D2EA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 15D3
Signing time: Tue 18 Aug 2026 07:01:11 +0000
Manifest this update: Tue 18 Aug 2026 07:01:11 +0000
Manifest next update: Wed 19 Aug 2026 07:01:11 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: n6rZ55MOypXsE0/YLkzsBJy8KtisJQnXelSb4sSdmQs=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Aug 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:ac:90:a2:49:98:dc:5e:6c:44:a1:97:40:d2:ea:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 18 07:01:11 2026 GMT
Not After : Aug 19 07:01:11 2026 GMT
Subject: CN=0684c1c31bad4be51474f7e299c4d9756e9c8911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:ea:58:5b:ea:fb:90:32:6f:8f:cc:68:bb:
2d:2f:8c:3e:d8:e0:23:ec:5d:c7:72:99:19:df:3d:
12:f1:39:fc:45:02:e1:28:65:52:ca:e8:26:ce:f2:
c2:3b:c0:db:99:e8:c8:53:84:45:aa:6c:1e:d2:11:
e0:8e:5d:05:c6:7a:23:2f:b1:37:cf:70:1b:e1:a8:
02:25:2e:96:ab:4f:7c:2f:e1:5b:e5:b1:9d:5c:7b:
92:be:80:94:3d:f7:25:0d:b2:f2:ea:5b:26:10:72:
b4:28:0b:25:24:7b:44:b1:1b:6f:40:d9:cf:8b:69:
95:b0:fd:a3:16:a7:9b:17:ff:34:da:c0:5c:c8:c3:
8b:08:c3:37:e9:5e:82:0f:c5:75:fb:98:5f:23:a2:
9b:b0:6d:70:6b:e7:b8:70:38:97:b0:47:fb:5f:20:
ee:bc:a6:9f:13:48:6c:d8:b1:22:ad:0d:1c:d6:64:
23:b2:e8:25:1c:e9:0f:80:0e:39:a6:5d:e2:11:e0:
4c:8c:54:60:36:60:08:eb:70:66:10:16:62:f9:9b:
87:2f:31:5f:bb:9d:43:02:93:5f:0b:15:24:bc:e2:
e3:fc:86:67:59:de:62:ce:b5:e7:bc:45:d6:75:f5:
74:da:65:32:e8:20:ae:c2:76:72:96:c6:b0:b4:fc:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:84:C1:C3:1B:AD:4B:E5:14:74:F7:E2:99:C4:D9:75:6E:9C:89:11
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:4a:b1:0b:ad:5d:a7:70:87:28:bc:3a:2d:d4:fa:0a:e7:dc:
9a:3d:21:e3:18:63:cf:12:6a:10:9c:f8:94:7b:1a:a5:9e:14:
5a:66:b5:7a:de:e7:c6:06:3a:df:dd:06:93:9b:9f:82:ad:06:
0c:a9:2b:9b:a1:cf:cd:81:00:a7:01:cf:10:2a:f0:04:d4:99:
6f:81:da:51:58:04:a0:cd:76:83:17:ea:a9:a3:91:19:2e:a3:
e0:47:27:93:a0:3b:c9:e3:79:e5:1d:6e:36:ea:b9:9e:cc:6e:
b9:8a:7a:bc:80:bf:1b:19:62:25:70:87:21:e8:3e:59:fe:fc:
74:10:71:58:73:fa:88:19:9c:03:f9:8b:39:d6:43:53:4f:c4:
66:78:a6:23:c8:45:48:c7:5d:37:fc:7b:e9:ae:29:43:36:fc:
d0:3e:51:90:af:38:1f:32:e2:32:f9:62:0f:62:6b:09:cc:e1:
60:05:0c:e0:f1:db:0e:cb:23:8b:e8:e8:22:6c:38:76:a6:43:
a5:28:5e:ed:70:60:83:cf:70:2b:4c:95:5c:f8:97:5d:f6:e1:
7e:45:cc:2e:9b:a4:08:ed:4b:fd:25:b2:0a:55:9e:81:e4:09:
14:49:bb:ff:72:af:26:30:a2:30:50:a9:97:a1:b3:7d:8c:06:
62:e6:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 17:14:24 2026 by rpki-client