Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: N4/8gx1jBivg9Jwp4/JecbUnP1c+llddqRmLPQHpBA0=
Subject key identifier: C8:55:BE:FE:69:7B:04:76:9B:78:FC:10:76:22:86:27:D1:F7:8D:7D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019FE553577936AE26F3D82903DB757449A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 15BB
Signing time: Sun 09 Aug 2026 07:01:11 +0000
Manifest this update: Sun 09 Aug 2026 07:01:11 +0000
Manifest next update: Mon 10 Aug 2026 07:01:11 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: LQBiEhcAqo+9uoflywPH9ToZFmXzc1YiGrd3kM5PTBU=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Aug 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e5:53:57:79:36:ae:26:f3:d8:29:03:db:75:74:49:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 9 07:01:11 2026 GMT
Not After : Aug 10 07:01:11 2026 GMT
Subject: CN=c855befe697b04769b78fc1076228627d1f78d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:61:84:82:94:9f:bb:5e:ac:94:b3:b5:34:93:
50:4e:a4:2a:ad:5a:f3:a0:77:e3:d3:5e:a1:58:0b:
73:c7:c5:87:2a:1a:9e:c7:a5:2f:1f:cc:61:ad:a3:
4d:0b:8d:41:0d:ff:27:8b:28:63:2c:bf:27:1a:62:
9c:7e:20:57:db:ac:27:fe:55:ad:cc:03:e8:21:bd:
73:5a:a3:5e:4b:f7:da:08:ee:b8:b2:23:2c:d5:c2:
d3:f5:aa:39:d8:96:e6:dd:75:38:ed:af:ea:16:d3:
84:68:b9:fa:43:d8:b6:13:c5:5d:df:ea:eb:51:60:
4f:dd:b9:30:31:f0:ee:ed:01:18:57:93:d8:b2:0e:
82:22:9e:83:26:e4:21:bd:c6:e6:37:32:35:05:c6:
70:5b:30:10:99:83:b1:e7:c3:29:57:00:77:49:6d:
23:ae:27:87:e6:41:09:74:0c:a8:65:28:3a:fb:64:
be:13:af:be:73:c8:fd:f3:ac:22:15:e6:20:15:eb:
c7:c6:16:45:4b:a8:c8:10:6b:51:20:68:6a:7a:8d:
ff:13:3f:28:c3:dc:77:a0:fe:fe:11:8b:c4:cf:69:
0b:e8:ea:e5:2e:c7:b7:e3:da:e7:45:75:aa:84:e8:
b3:6c:91:79:3a:ec:db:f1:6f:b6:11:b6:50:3a:b5:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:55:BE:FE:69:7B:04:76:9B:78:FC:10:76:22:86:27:D1:F7:8D:7D
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:37:00:ae:ce:d6:78:e1:41:f7:1c:38:29:a7:5a:5b:83:f7:
0c:53:0d:63:fb:a1:3e:d8:db:6f:92:d6:c6:bb:f0:31:eb:68:
9f:79:18:d5:a4:e4:93:6d:56:03:7c:ea:2b:9b:97:b5:14:ac:
6a:97:36:86:df:d7:6c:77:7a:10:78:79:e8:f0:17:39:32:db:
26:b5:b7:b4:f8:eb:61:99:93:42:ea:2e:57:a0:63:a9:6d:26:
02:f7:0d:9d:1a:ea:ac:45:28:67:ad:8a:99:25:a5:de:4f:2e:
7f:55:a1:d2:4c:86:c6:94:11:fc:86:c9:a6:26:0a:b9:db:2e:
00:2e:56:72:8d:f6:ac:40:4b:14:d7:4f:05:18:c0:9d:c8:c7:
d8:01:79:64:50:2c:2c:d7:c1:93:f8:df:e5:98:73:a4:ff:2f:
89:3d:9c:84:ac:ce:e1:12:b2:3f:72:96:57:85:4e:ab:f4:76:
bd:6a:8a:ab:8f:60:ed:ea:4f:d5:c0:b5:62:4f:b0:ed:af:dd:
d1:63:8c:1f:cf:e0:8c:dd:b9:70:0f:3f:a6:8f:0a:13:fa:15:
29:3c:59:ad:cf:ca:ab:15:10:68:e3:7c:40:4a:41:c6:56:40:
50:af:06:e2:6a:02:e1:0e:63:6c:cf:4c:da:54:a6:1a:fc:8e:
d0:1b:fa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 10:13:52 2026 by rpki-client