Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: uDHohXRl010pt9zH1bBxVPpuuX+xHJ592V2a9z1Hk3c=
Subject key identifier: EB:EA:14:2D:5A:7B:F6:85:94:35:A6:52:D3:50:E3:AC:44:6C:81:FF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01A043F46311A7234657FA7872BB09528FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 15EC
Signing time: Thu 27 Aug 2026 16:01:24 +0000
Manifest this update: Thu 27 Aug 2026 16:01:24 +0000
Manifest next update: Fri 28 Aug 2026 16:01:24 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: zFNCw6fQ5107T/fW4pSgJQATlF9wCkwf+k/PWvWIvmo=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:f4:63:11:a7:23:46:57:fa:78:72:bb:09:52:8f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 27 16:01:24 2026 GMT
Not After : Aug 28 16:01:24 2026 GMT
Subject: CN=ebea142d5a7bf6859435a652d350e3ac446c81ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:8a:7c:c2:4a:32:39:34:3a:74:e6:08:f2:
3e:be:8f:2c:35:5b:0c:0a:6e:8d:3f:84:69:d6:48:
83:cd:7b:8e:40:00:c0:17:0d:15:48:88:0d:67:5a:
51:d8:2c:5a:33:c4:9b:f8:a7:17:a0:91:13:09:56:
f1:6d:15:a9:d5:ed:ae:f4:ed:31:0c:71:7d:d2:c6:
d7:78:83:c5:8f:05:88:15:66:b4:08:e6:c7:a4:9f:
6d:fb:58:81:b8:7a:b6:c8:08:fa:6f:6b:ae:ae:99:
cb:b5:c5:b9:4e:f1:56:e4:08:92:36:e4:cd:8f:ac:
b5:31:96:5d:60:c3:4f:43:88:5f:67:16:43:a7:f6:
50:25:8b:8d:71:28:cc:d8:aa:7f:c8:26:37:d8:90:
70:84:47:e3:05:c7:ef:9d:cb:9c:0d:35:2c:8d:79:
f0:ca:05:71:ef:58:81:1f:bc:8e:83:09:b4:9d:2d:
93:4c:19:06:61:bc:76:92:8a:ab:b9:cb:48:dc:1b:
25:69:7c:23:21:19:84:8d:5b:c1:83:89:db:05:3a:
ed:a6:ae:0f:63:35:e1:be:7c:d7:85:bf:3c:81:28:
71:d1:8c:9e:a1:c6:67:1f:32:44:96:ec:f1:bc:70:
8b:d4:12:e2:98:db:76:0c:ed:7e:58:e6:74:16:44:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EA:14:2D:5A:7B:F6:85:94:35:A6:52:D3:50:E3:AC:44:6C:81:FF
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:03:08:7b:2a:29:71:1d:bf:73:a0:c8:87:53:be:18:5a:11:
5a:76:f1:94:82:53:0e:c9:17:e6:46:0c:d9:11:5b:55:19:6d:
76:a5:e9:d0:e8:c9:79:a8:ff:b3:fa:81:7f:bf:b2:fc:86:85:
54:95:dd:3e:fd:0f:15:bc:ae:6d:14:70:58:4f:9c:be:eb:08:
4b:b5:e5:79:4b:80:bc:07:3b:36:c0:5d:5d:f0:00:4f:f9:de:
f2:d3:dc:e4:a6:d5:79:ed:12:bd:c4:3a:4a:d6:85:a4:05:e5:
ed:d2:df:d6:cd:de:50:6d:bd:0c:e8:96:03:76:60:8f:7b:4b:
10:cf:43:cb:82:5e:f8:49:2d:c2:57:89:49:ab:9a:3d:25:4b:
33:9c:2e:8d:6a:04:78:c5:79:38:25:c4:e4:57:77:eb:6e:2a:
ef:10:97:4d:79:55:c9:58:7b:2c:92:8e:c7:8f:dc:fc:37:90:
46:34:c4:72:66:c3:3a:a0:a5:91:81:52:c2:36:cb:7a:84:55:
18:b1:89:b1:e3:3b:2c:f2:7c:01:d5:85:d6:28:35:4c:df:6b:
77:8a:77:86:06:f1:a2:de:f8:4c:65:ed:01:3c:7f:63:5d:a3:
b0:9b:c1:ee:ac:14:66:d1:f5:63:ac:8d:c2:c7:b0:fb:e8:c7:
b2:78:08:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:29:15 2026 by rpki-client