Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: XfekNJghLkibH+3A5up73f1Lddvhr5Vd//JR7S0XdXs=
Subject key identifier: E6:2E:A3:CE:24:6C:4C:53:51:AA:0C:1C:16:DC:8A:0A:55:61:B4:B0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019FA597C68D4CC07F77E62039B2637AB343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 159A
Signing time: Mon 27 Jul 2026 22:00:15 +0000
Manifest this update: Mon 27 Jul 2026 22:00:15 +0000
Manifest next update: Tue 28 Jul 2026 22:00:15 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: Ix4qkJlm6hMkcvpmh13aY+NOAXpK6WhEFihbulLK3rQ=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a5:97:c6:8d:4c:c0:7f:77:e6:20:39:b2:63:7a:b3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 27 22:00:15 2026 GMT
Not After : Jul 28 22:00:15 2026 GMT
Subject: CN=e62ea3ce246c4c5351aa0c1c16dc8a0a5561b4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:cb:05:33:bd:16:85:8e:4d:b4:c0:f6:53:
c5:01:9d:ec:4f:a4:7b:6d:02:7a:eb:8f:df:bb:ba:
ba:f9:9b:b2:c5:73:53:94:7f:4e:85:64:7b:a0:fd:
91:b9:bb:39:e3:91:f3:83:0f:43:45:3a:32:0f:7a:
52:1c:c0:b1:69:f6:9a:f8:e4:d1:f2:e3:ba:35:69:
6b:11:29:5c:2c:ad:19:3d:5d:14:99:03:27:1a:20:
22:18:24:26:36:a4:19:b0:02:23:32:77:68:97:66:
20:1c:92:55:e4:99:38:6c:7d:72:8e:9e:af:a5:26:
9c:a2:0a:39:e4:83:af:2d:f6:b6:2c:c1:5b:ab:6a:
15:1f:72:5e:15:83:87:47:a7:36:93:f2:36:db:2e:
0b:41:1b:f3:fb:1a:d0:b2:0b:b8:db:93:67:d8:67:
38:26:2f:66:ac:99:09:99:5f:32:19:19:a6:fc:18:
54:ee:c5:64:d2:2f:8b:27:35:cf:70:38:8f:13:a9:
27:f7:f3:3e:24:ad:8b:60:ad:b1:76:bd:aa:0e:73:
6b:a7:89:38:ca:42:c8:3f:f5:74:a7:2c:f7:38:99:
2c:0e:46:b1:6c:ff:be:c5:e2:5e:c4:40:0f:a5:46:
79:e9:04:86:79:5a:b4:73:f5:44:d0:79:32:c6:a8:
63:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2E:A3:CE:24:6C:4C:53:51:AA:0C:1C:16:DC:8A:0A:55:61:B4:B0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6c:92:8a:f1:4d:9f:bb:ab:ea:6c:af:e4:9b:e2:fa:5f:e8:
d6:ca:82:5a:4b:7d:ae:01:30:a5:fc:69:92:a2:9b:37:08:05:
96:b4:23:2f:41:01:f9:b2:56:19:c6:f3:8c:03:c2:39:3a:0e:
7d:74:55:69:5e:97:1d:78:53:eb:b2:58:db:fa:a7:1b:ab:d6:
c6:2e:dd:60:bf:0a:6d:0e:27:b6:dd:15:46:11:6b:5f:37:f8:
65:3e:08:68:1f:50:08:c3:a5:b9:47:8f:00:4f:28:bf:d3:8c:
41:96:54:6d:b1:a5:14:78:b2:c5:b8:13:9a:bb:44:3f:56:8e:
f9:b9:a1:de:81:85:f8:15:a1:f9:75:bd:aa:c8:b2:5e:ac:81:
0c:94:0b:91:a0:04:8c:8f:f3:c4:2d:d2:38:48:dd:a4:03:cc:
ee:78:1a:46:fb:5a:98:aa:07:85:2c:1a:ae:7b:22:7b:a9:36:
99:16:0c:07:13:7e:9f:1b:b9:5d:c4:20:97:93:17:7b:63:21:
f9:b9:60:06:d1:3f:1c:c8:bb:d9:c0:14:ce:a3:61:58:1c:8f:
38:a0:b3:e9:b9:6d:68:ac:a9:4c:c2:3d:b1:36:90:55:b2:73:
eb:1c:9f:a1:6c:5d:af:dc:bc:e7:85:eb:af:2f:19:a6:bc:f3:
61:e3:a3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 06:54:39 2026 by rpki-client