Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: M+xRrTZO9m0pRBIQqM/f2aeMdCgd9+3pBYBPK/j0lA0=
Subject key identifier: 71:89:77:B6:40:96:85:E3:BF:88:D1:0A:55:1D:C9:8E:E0:46:8D:5F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019DDDD6154946DAFDDFC6C5092A71436CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 14AE
Signing time: Thu 30 Apr 2026 10:01:27 +0000
Manifest this update: Thu 30 Apr 2026 10:01:27 +0000
Manifest next update: Fri 01 May 2026 10:01:27 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: +TmkWvrkiej87lwn8qLvVhvSw1LFqUUKrtZc1Eq7C3w=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d6:15:49:46:da:fd:df:c6:c5:09:2a:71:43:6c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 30 10:01:27 2026 GMT
Not After : May 1 10:01:27 2026 GMT
Subject: CN=718977b6409685e3bf88d10a551dc98ee0468d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:73:78:19:2c:c9:9e:3e:d8:9b:1d:18:97:
79:5f:87:84:48:23:5f:a6:e7:f3:bf:5f:67:7d:3a:
50:8f:18:10:0e:98:3b:6a:32:3d:8b:6a:40:74:44:
7c:94:79:f8:a8:ed:22:13:f5:f5:11:2c:82:90:b0:
5b:60:1f:79:06:43:5d:cc:9c:8a:7f:cd:94:a7:7d:
23:da:d9:9b:77:06:55:7a:7c:a9:85:7e:eb:f9:48:
7a:39:a5:42:d0:26:be:58:c6:a5:81:dd:00:58:a5:
4e:b3:ac:ab:5f:61:b6:94:72:4d:d7:4e:40:97:05:
30:92:6c:3d:2c:71:ff:b0:cd:af:22:f4:bc:b1:43:
00:01:64:d1:10:60:e6:46:7f:d1:cf:ce:b3:2a:e7:
11:51:9a:3d:dd:50:28:1b:25:f7:bf:d8:82:c1:56:
cc:c1:ac:b7:6e:30:ce:58:bf:a3:12:b3:2c:f7:59:
d9:b2:05:b6:a9:c8:c0:eb:55:2c:10:02:ab:5c:ff:
86:20:c0:ea:ec:18:39:bf:f8:09:f7:f5:91:18:d4:
ea:b9:a3:08:6f:b9:96:00:2e:36:48:95:67:37:25:
ae:e0:78:dd:d6:2c:2f:da:b8:c0:06:47:58:3d:ef:
2b:f7:87:8e:1b:d8:9c:62:10:94:d5:2c:71:a8:aa:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:89:77:B6:40:96:85:E3:BF:88:D1:0A:55:1D:C9:8E:E0:46:8D:5F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:de:87:5a:e2:2d:17:95:6d:8c:7b:44:62:9f:fc:87:8a:c7:
8a:fd:b4:9f:c3:ff:da:1b:3a:48:4f:0d:93:ee:18:3a:82:9e:
a4:cf:35:7c:35:80:0b:d9:69:36:cb:a0:55:2c:d8:f3:8a:b6:
60:75:ad:dc:6b:b6:06:0a:61:84:5e:3e:e2:d6:cb:02:fe:11:
dc:39:13:c2:2d:af:fe:b1:2f:ee:93:18:f7:26:2e:b0:2b:3d:
57:5a:b1:4c:28:d8:df:a0:9d:44:88:b9:28:a0:74:ca:0e:ae:
b8:cd:71:86:88:68:b3:bc:da:4d:60:c8:49:16:5c:93:01:c9:
91:8e:e2:ff:77:01:67:11:6f:39:75:7d:cb:c4:b3:c2:94:f5:
f9:88:44:67:60:77:da:07:60:eb:f1:6b:5e:f7:57:a9:df:e0:
b1:89:f5:53:6a:85:cf:fa:01:e8:ba:95:b2:ed:e5:54:d2:18:
12:61:c7:10:cf:4e:59:ce:fe:a0:4c:00:c1:1f:69:e0:03:1e:
ed:fd:42:02:d7:37:fe:23:df:9a:e3:ec:a3:1e:b9:02:45:ae:
36:0f:da:db:0a:a8:1e:68:e3:b6:e6:ca:ac:93:28:1f:a1:4f:
de:63:cb:44:fa:de:40:fc:37:3d:a2:b9:91:ff:94:4c:23:9a:
e4:17:25:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 15:41:40 2026 by rpki-client