
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: uSXvjWGIzAO9k6NDZg4hlJEBkYXwRJ4o0uqTIsVYyTk=
Subject key identifier: 39:C4:C2:23:E4:CE:6B:E0:ED:58:80:1C:76:9A:3A:C9:86:52:A4:EE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01A0913394D9592D82E9DC56E7E08216236F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1614
Signing time: Fri 11 Sep 2026 16:01:11 +0000
Manifest this update: Fri 11 Sep 2026 16:01:11 +0000
Manifest next update: Sat 12 Sep 2026 16:01:11 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: PIWgyNbeTpqLeM7ZFvH941t78Md6PxhkpyuupOX/6pk=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:33:94:d9:59:2d:82:e9:dc:56:e7:e0:82:16:23:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 11 16:01:11 2026 GMT
Not After : Sep 12 16:01:11 2026 GMT
Subject: CN=39c4c223e4ce6be0ed58801c769a3ac98652a4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:9f:a8:b4:13:44:0b:56:ab:47:12:b6:3f:
bd:95:f3:3f:b8:cf:24:56:e9:7e:2a:52:0d:9a:52:
d4:28:ae:aa:69:85:b3:72:5c:ba:95:f5:25:9d:14:
91:65:8a:83:2c:58:ee:73:74:50:ff:80:e7:a6:62:
19:ba:85:7a:90:f4:53:93:77:7d:10:01:80:bf:c7:
8b:50:a9:28:3f:2c:49:e1:d3:83:f3:a4:45:de:cb:
b4:d2:cb:13:fb:65:86:58:e7:69:16:f8:37:e9:8f:
1f:2e:87:0a:fe:e5:43:2c:4e:d1:49:cc:0c:3b:55:
c7:ca:ef:53:f1:c6:64:96:a6:ca:3d:87:b4:3f:f1:
21:99:0a:43:f0:fa:09:8f:40:ec:96:6f:77:e2:c2:
0b:78:bf:29:81:1d:91:df:9e:b7:3a:b3:22:3c:ba:
1f:22:eb:c6:72:19:eb:c1:41:b4:3f:01:0a:5d:96:
9c:d6:b1:d8:4e:c4:f7:bd:6d:d0:49:88:1f:c8:22:
d7:fa:0d:a6:eb:de:07:a6:0d:6d:ed:14:2b:3b:a9:
94:3b:3f:ce:d5:c0:7f:54:44:e9:74:c3:7f:f0:81:
39:2f:87:a0:ea:9a:50:2d:6b:9c:76:df:ed:14:4e:
2e:15:f7:e2:12:8b:0f:87:e4:88:a1:e1:10:cf:19:
3d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C4:C2:23:E4:CE:6B:E0:ED:58:80:1C:76:9A:3A:C9:86:52:A4:EE
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:de:00:fc:ec:71:07:c0:d8:c4:fa:c1:86:4a:1b:c3:dd:91:
ba:85:ea:c7:40:11:f5:7c:29:ad:c1:39:83:51:32:d9:3e:20:
80:f9:04:75:c3:a7:07:45:3c:d6:de:86:03:88:32:ab:8d:a5:
5b:5f:8b:35:39:60:e7:8b:11:2d:b3:67:6b:70:ec:48:70:59:
39:63:09:4c:f9:2a:f7:1d:eb:95:cf:dd:b7:84:4b:2b:f6:6b:
27:22:98:22:72:17:e8:0c:ce:00:a8:73:e8:95:80:d2:50:98:
45:9f:dc:3d:12:80:88:6e:aa:40:33:37:25:d6:9b:36:e9:a1:
1c:72:20:48:08:df:54:e4:d3:47:5c:e2:29:36:bf:e0:91:9d:
82:a0:2a:99:ba:b2:91:f4:b1:07:de:d4:eb:8e:f0:62:f1:81:
52:de:54:67:97:56:7e:8e:f1:0d:59:57:31:a7:74:09:ad:43:
58:b1:f2:f2:0b:21:b1:48:86:ff:bd:cb:24:c2:1a:a3:2f:e6:
72:27:73:50:da:25:ca:8e:b3:56:e2:66:df:dd:df:81:f6:98:
c2:5c:9b:57:d5:93:2b:48:e0:62:df:26:c0:f5:9a:ab:a0:86:
70:6c:5e:09:d2:e2:1e:2b:6f:4b:85:93:18:0a:5b:c7:91:62:
5a:8a:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 00:37:32 2026 by rpki-client