Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: 1oHPfrsnMjdn8zMUpG+OVhblgxf6mc7PIgoAjyinx5U=
Subject key identifier: F0:80:7D:90:AE:09:DF:AB:9E:63:54:DD:6E:CF:DE:2D:84:94:2C:39
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019E235B76563E453FB152D4EF6CA8A2BB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 14D2
Signing time: Wed 13 May 2026 22:00:57 +0000
Manifest this update: Wed 13 May 2026 22:00:57 +0000
Manifest next update: Thu 14 May 2026 22:00:57 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: KkhQCn2oiOonag2pNq80+J5ZJgbrue/7A0Z5VvF8EGM=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:23:5b:76:56:3e:45:3f:b1:52:d4:ef:6c:a8:a2:bb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 13 22:00:57 2026 GMT
Not After : May 14 22:00:57 2026 GMT
Subject: CN=f0807d90ae09dfab9e6354dd6ecfde2d84942c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:2b:8e:d9:3c:7b:69:4c:e2:17:6f:ba:8e:
d9:82:af:0c:72:41:04:d7:1b:83:7d:43:63:a8:29:
d0:ba:e3:0a:95:32:c3:25:fb:55:79:81:73:7a:43:
21:e1:d5:78:a7:f6:5d:3a:66:59:03:dc:45:4e:d4:
98:f6:8d:e0:42:e1:a7:b1:72:bb:40:93:dc:4e:50:
d5:1f:7d:2a:10:02:df:a3:25:70:ed:d4:55:f4:4d:
97:3c:5d:ec:f6:f4:c8:96:19:4d:c3:25:3b:16:7c:
7f:92:1d:26:a5:a3:a9:d6:a7:83:79:0a:8a:f6:aa:
42:ab:4b:34:f6:7d:4a:07:1f:4f:48:0b:87:ae:70:
c9:38:f6:ff:1c:6b:5c:6f:aa:23:15:dd:be:1a:94:
1f:2e:98:a3:42:75:26:56:9b:3e:ad:63:90:1a:af:
a3:17:67:f7:aa:df:35:d6:1c:d7:86:8f:1d:e2:9e:
50:d7:86:04:c6:bb:40:5c:f2:d7:9c:98:e1:61:32:
dd:94:f7:b7:17:76:ab:32:53:17:cf:e1:4b:4f:ed:
b7:eb:6e:2f:d0:b1:45:d2:44:f5:c0:b5:1d:58:b0:
2f:41:bb:00:24:30:f2:f0:99:1a:da:d0:11:d6:39:
f3:ab:d3:24:f1:d0:a1:6f:f2:45:9f:c2:73:3f:92:
7b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:80:7D:90:AE:09:DF:AB:9E:63:54:DD:6E:CF:DE:2D:84:94:2C:39
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:25:a2:bc:54:d7:5c:35:59:5e:be:d5:7b:57:1c:14:41:89:
66:cb:6f:7f:e8:76:a9:a5:01:6d:9c:02:9f:1d:90:5f:dc:7e:
07:cb:57:b0:b2:68:be:1e:d4:d1:32:dc:44:6d:82:68:cc:18:
33:dd:6b:ea:14:87:ad:11:03:a7:7a:30:14:c1:46:99:38:d5:
4e:6e:76:55:be:91:d7:6f:b9:35:79:48:04:22:55:ef:55:07:
b7:45:34:35:26:e1:f0:58:9a:ce:27:6c:55:8a:2d:90:bb:5d:
e1:6f:88:ef:6c:1d:12:15:60:0d:ff:41:43:4a:5c:7b:d1:7a:
e1:6c:16:9c:3a:ac:dc:e2:46:6b:67:5c:4a:20:72:a5:ce:1f:
90:9b:0a:dd:eb:d1:ba:ef:0b:f7:2e:30:dc:03:b1:23:a8:47:
3c:12:1b:4f:08:41:aa:ce:30:70:ac:f6:d4:5f:47:d5:dc:3b:
da:95:91:86:c8:27:88:dd:b3:1e:bb:3a:97:4c:96:9f:ce:1a:
30:28:34:98:20:fa:49:94:e9:db:f4:09:e4:04:8e:0c:0a:06:
55:81:25:1b:ff:63:dd:b2:d2:09:fe:9b:99:69:72:4e:be:e9:
35:75:42:de:12:55:85:34:f8:26:d4:67:9f:b3:02:97:8d:e5:
01:1c:dc:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4jW3ZWPkU/sVLU72yoortYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjYwNTEzMjIwMDU3WhcNMjYwNTE0MjIwMDU3WjAzMTEwLwYDVQQD
EyhmMDgwN2Q5MGFlMDlkZmFiOWU2MzU0ZGQ2ZWNmZGUyZDg0OTQyYzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDArjtk8e2lM4hdvuo7Zgq8MckEE
1xuDfUNjqCnQuuMKlTLDJftVeYFzekMh4dV4p/ZdOmZZA9xFTtSY9o3gQuGnsXK7
QJPcTlDVH30qEALfoyVw7dRV9E2XPF3s9vTIlhlNwyU7Fnx/kh0mpaOp1qeDeQqK
9qpCq0s09n1KBx9PSAuHrnDJOPb/HGtcb6ojFd2+GpQfLpijQnUmVps+rWOQGq+j
F2f3qt811hzXho8d4p5Q14YExrtAXPLXnJjhYTLdlPe3F3arMlMXz+FLT+23624v
0LFF0kT1wLUdWLAvQbsAJDDy8Jka2tAR1jnzq9Mk8dChb/JFn8JzP5J73QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCAfZCuCd+rnmNU3W7P3i2ElCw5MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyWivFTX
XDVZXr7Ve1ccFEGJZstvf+h2qaUBbZwCnx2QX9x+B8tXsLJovh7U0TLcRG2CaMwY
M91r6hSHrREDp3owFMFGmTjVTm52Vb6R12+5NXlIBCJV71UHt0U0NSbh8Fiazids
VYotkLtd4W+I72wdEhVgDf9BQ0pce9F64WwWnDqs3OJGa2dcSiBypc4fkJsK3evR
uu8L9y4w3AOxI6hHPBIbTwhBqs4wcKz21F9H1dw72pWRhsgniN2zHrs6l0yWn84a
MCg0mCD6SZTp2/QJ5ASODAoGVYElG/9j3bLSCf6bmWlyTr7pNXVC3hJVhTT4JtRn
n7MCl43lARzcXw==
-----END CERTIFICATE-----
Generated at Thu May 14 07:44:33 2026 by rpki-client