Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: KyGfN+3t2fN7dWdOHDgzOxoTtykUBwNM3WmfvQowxoI=
Subject key identifier: 4C:46:20:A2:27:55:AA:9F:93:98:55:EE:A0:DC:F4:0E:1C:BF:42:41
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019E0C2FC4B95341AFFD843434AD5C11E073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 14C6
Signing time: Sat 09 May 2026 10:01:57 +0000
Manifest this update: Sat 09 May 2026 10:01:57 +0000
Manifest next update: Sun 10 May 2026 10:01:57 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: xjh7AqeEEoec6FGMHk+FSpXaMxsihtMsrU+YplCO7s0=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 10:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0c:2f:c4:b9:53:41:af:fd:84:34:34:ad:5c:11:e0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 9 10:01:57 2026 GMT
Not After : May 10 10:01:57 2026 GMT
Subject: CN=4c4620a22755aa9f939855eea0dcf40e1cbf4241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:ec:e5:fb:eb:8a:f6:6c:99:b2:94:14:d7:
02:1e:17:c0:eb:98:2c:8a:aa:f2:b6:6a:65:8f:c5:
cf:9f:6b:46:bc:8f:75:17:c7:61:90:a3:9c:34:10:
28:09:ee:16:9b:83:4b:0c:86:68:39:84:38:35:15:
00:f3:ff:57:96:53:8e:6d:79:07:39:3e:da:c7:91:
6b:30:9c:88:0a:b7:1b:98:66:a3:db:44:e0:07:cc:
9d:32:a3:34:6e:c6:b5:e7:3c:3e:05:84:da:56:d1:
d1:0c:12:ce:fa:c6:02:2d:1d:0f:c6:44:52:39:cd:
87:1c:be:08:a1:6d:4e:64:26:a3:83:02:51:20:5f:
ff:9a:4e:fc:c9:24:6d:df:43:b8:cd:ba:8e:6a:07:
50:f2:2f:63:39:5b:08:fe:44:3e:77:89:fa:1a:cf:
fc:c1:c4:13:18:c2:2e:60:3c:53:07:21:79:0d:d9:
f0:59:3f:8e:31:dd:3b:ab:be:22:27:e1:7f:09:bc:
7e:80:9e:02:d6:3b:ad:41:b4:12:4c:f3:66:03:fe:
90:a8:d2:17:20:48:88:c6:bd:f1:e3:87:9d:02:66:
5a:91:6a:8e:bf:e6:9c:7b:a9:51:20:4d:6a:c2:6e:
06:3f:a5:2f:93:cf:51:93:fc:8f:a9:a4:c9:87:08:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:46:20:A2:27:55:AA:9F:93:98:55:EE:A0:DC:F4:0E:1C:BF:42:41
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:64:e2:79:60:a5:04:cd:0d:a7:8f:83:5b:b9:6d:bf:f3:de:
02:07:68:60:e2:5a:4b:24:93:84:63:e1:da:1b:05:e1:7a:74:
64:a8:41:16:21:b0:37:ca:bf:bf:50:ad:37:45:32:3e:83:32:
2b:37:75:27:48:77:c1:fa:4e:f1:65:25:8e:55:38:f6:0c:ae:
61:ce:4c:44:ca:00:69:01:94:61:c6:1b:4b:cb:29:94:f9:eb:
26:84:ee:bf:47:3e:cf:72:59:b6:5e:8c:04:32:7a:76:44:ee:
17:9e:a6:52:c8:d5:a9:63:39:40:4d:a0:20:33:5c:fe:29:61:
68:03:26:db:1e:f2:ba:d4:e5:2b:17:3d:0c:8b:34:cd:5f:66:
0d:ee:87:27:97:d3:06:bd:fc:d9:48:b9:58:10:85:6e:62:36:
4c:40:d4:13:ea:74:84:19:dc:e4:b7:cf:47:a0:73:3f:ac:06:
ff:e5:13:01:c7:13:20:58:12:10:6a:35:fb:d5:ea:9a:b6:60:
f3:ca:5a:95:a6:75:bd:02:db:f1:e5:97:6e:50:a2:82:79:69:
ad:53:ac:0d:01:2c:1e:ab:8c:f4:7e:2d:cf:d4:09:64:bf:a0:
0b:8f:b3:81:59:ac:67:70:f6:c2:07:2b:35:ab:05:5c:b2:99:
c4:97:0f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 16:56:17 2026 by rpki-client