Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: 6NGT8tPzxuZz86wtGjzueXae34i9IcQu1IDJ6UwsqB8=
Subject key identifier: D2:3C:11:D2:A1:CA:E2:5E:A3:B0:F6:A1:F7:43:93:82:59:DB:23:E1
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019FC66D2BB124B6D5676F4960A71968291C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 15AB
Signing time: Mon 03 Aug 2026 07:01:10 +0000
Manifest this update: Mon 03 Aug 2026 07:01:10 +0000
Manifest next update: Tue 04 Aug 2026 07:01:10 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: f2aknpfgBhxP4c3rBxI47iNQvnf6c30v4fF4FwWheOU=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:6d:2b:b1:24:b6:d5:67:6f:49:60:a7:19:68:29:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 3 07:01:10 2026 GMT
Not After : Aug 4 07:01:10 2026 GMT
Subject: CN=d23c11d2a1cae25ea3b0f6a1f743938259db23e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bd:55:d4:6f:22:1e:bd:b2:3c:1c:b8:12:96:
c8:64:c4:bd:7a:5f:9b:21:0b:91:e8:8e:0f:f2:ed:
03:6b:93:e4:40:35:f5:67:d1:2d:d5:40:b2:e5:84:
25:ee:64:79:89:a4:fe:68:cc:8c:2c:a2:6d:4d:bd:
64:7a:7b:ee:4c:76:d6:b4:53:59:c1:ad:57:76:6a:
35:9f:5c:ca:01:a5:7f:b2:95:0e:26:d5:d8:c3:d5:
15:8e:17:ca:37:e0:db:be:66:db:92:e9:a3:d9:ee:
7e:b5:67:2a:3b:10:90:f7:80:f6:f0:ac:05:db:60:
65:59:40:24:cc:1e:87:90:0f:0e:e4:1e:df:c5:98:
bf:2a:c3:9d:94:32:d8:6f:8c:ec:93:3e:b9:f6:e1:
55:92:53:dc:56:8c:f4:c8:b0:62:79:5f:40:fc:2a:
85:fb:c4:10:66:17:a0:b6:19:90:ab:d9:c7:15:9f:
99:d9:0c:a5:18:7d:fe:c0:e0:89:8c:34:81:96:8e:
49:09:d4:03:50:0a:b3:59:f9:79:41:e3:b0:46:18:
5c:2b:cb:98:d0:ac:49:3e:70:3e:ec:ca:9b:e5:3d:
71:1e:2a:e5:ea:a0:f9:5e:db:2c:6c:45:f8:6c:e8:
f1:6c:a0:84:c9:9e:55:98:94:dd:f7:99:2e:06:db:
9f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3C:11:D2:A1:CA:E2:5E:A3:B0:F6:A1:F7:43:93:82:59:DB:23:E1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1b:bb:88:bf:6f:7f:6e:8f:e9:b0:37:6b:93:a7:3b:2f:d4:
8f:c1:ca:85:7f:aa:8c:92:5b:16:c9:cc:25:9d:af:2d:ca:a8:
d0:45:9d:0e:40:f1:40:d2:43:6e:f3:28:72:79:04:6a:d9:c2:
9b:29:db:7e:68:fa:98:5b:5a:d6:0a:25:a5:6a:0a:64:42:5c:
c0:0f:f3:20:03:b7:78:fb:d6:05:45:36:d5:aa:be:fe:2e:4c:
19:2c:ba:54:95:b2:f5:aa:6e:5f:50:a5:50:b4:80:b6:fc:10:
f6:8d:63:e4:a1:9e:1d:2b:10:aa:c9:4e:ec:b4:6a:e9:ad:4b:
ca:3a:1e:db:e2:1c:35:f0:4f:38:9c:a8:56:93:59:e3:fc:7e:
3e:c7:da:a6:18:0b:f1:a3:d1:05:3d:03:f7:71:5e:b7:37:97:
a2:39:00:94:d4:c2:27:83:85:f8:69:8b:c0:3e:9c:95:a3:de:
a9:7b:d5:4a:29:6e:b4:31:0e:33:08:15:b5:e4:52:a0:19:2c:
ca:ed:c8:22:b4:2b:c2:e2:61:03:3d:68:62:30:10:a3:d1:49:
ae:82:aa:41:11:16:6a:95:d9:17:94:44:0c:9d:bf:51:c2:cd:
1c:9f:81:2c:90:11:e7:40:87:66:be:93:40:1b:be:33:29:d4:
d6:fe:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 09:19:44 2026 by rpki-client