Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: gPELH6eDoeImoIKqzESTi3Rq5OQIMEgqqCU3CUHzEv0=
Subject key identifier: 1B:6A:7B:95:E0:60:C9:F3:42:3F:F2:43:EC:A8:33:33:63:22:39:EC
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01A053671FF0139D47F297529C9E04FAC93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 15F4
Signing time: Sun 30 Aug 2026 16:01:02 +0000
Manifest this update: Sun 30 Aug 2026 16:01:02 +0000
Manifest next update: Mon 31 Aug 2026 16:01:02 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: EIR5xmpDXXwuFES8JURJkhG17W/gwMbphjtvtSEPSaU=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:53:67:1f:f0:13:9d:47:f2:97:52:9c:9e:04:fa:c9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 30 16:01:02 2026 GMT
Not After : Aug 31 16:01:02 2026 GMT
Subject: CN=1b6a7b95e060c9f3423ff243eca83333632239ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:26:37:75:c1:99:ad:6c:a6:11:cc:2e:40:
45:7b:66:d0:8f:8e:90:21:ec:3d:c2:32:4f:51:e6:
d0:eb:2a:b9:b7:70:69:33:74:4d:a2:e2:4b:8c:56:
4a:d7:67:66:2c:3b:7d:3e:87:39:ea:c7:f3:10:60:
a1:0d:d5:b1:98:71:69:7b:e6:8f:b2:48:54:74:b4:
6d:f0:6f:ff:0b:b1:28:4d:28:67:2a:15:ae:e5:53:
13:e0:ee:f1:a4:ab:9e:23:02:f0:00:22:e0:e9:4d:
e6:61:a6:80:0e:d5:65:b5:c6:a2:ba:e7:a3:99:64:
ca:0c:b6:df:56:cf:c1:57:38:6d:f9:c6:0c:49:16:
ac:fc:4b:f7:93:79:2d:b3:e3:1e:71:b6:53:38:b9:
98:ba:5c:2a:00:d0:4a:a7:b7:01:5c:8e:80:90:c4:
31:f9:6f:1b:3f:c0:4b:d2:7d:e6:28:d8:40:bd:a5:
2d:02:ed:6b:9b:bc:3d:2e:28:bd:1b:64:f7:68:4a:
6b:51:6c:4c:ba:a5:5a:3a:4f:ed:c6:58:1a:6e:b6:
03:e2:7d:ef:2d:d9:43:90:d2:1c:c6:5e:9d:22:6c:
03:c7:db:34:ca:5f:af:39:14:42:0d:03:af:78:b6:
77:71:2a:94:e4:9a:99:fb:8e:65:ab:bc:ce:4c:9d:
b2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6A:7B:95:E0:60:C9:F3:42:3F:F2:43:EC:A8:33:33:63:22:39:EC
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:de:d3:0f:47:ad:23:5f:7f:ea:2e:81:df:52:1d:71:81:0d:
35:b1:63:3e:6b:96:e4:89:4e:b5:92:85:20:bd:b0:73:ed:18:
c0:10:68:e2:04:47:36:bf:46:d2:1d:ef:a0:f6:93:5e:43:f1:
50:bc:f7:36:0d:79:42:32:a1:4e:95:a3:2e:cd:b3:38:b6:e3:
f4:8c:24:4f:d9:84:6b:07:c8:7e:92:2d:04:82:e5:bf:08:3a:
5d:04:d5:3e:12:71:cd:89:78:01:6e:ac:0e:97:70:1c:c2:87:
cf:ba:ea:20:bb:20:c9:83:b0:ec:46:a9:76:27:b6:4a:8c:64:
59:54:3a:f4:03:a2:00:e8:dc:1b:a5:2d:f9:5f:01:75:31:b1:
de:da:f7:23:5a:7a:f4:ec:68:55:e3:1a:44:17:51:5b:16:f0:
4f:ad:a3:60:1e:7f:6f:f6:45:07:08:71:94:6f:b2:5c:5c:d4:
8f:7a:18:31:20:1e:c6:38:f5:89:47:ce:b8:48:83:10:8a:c3:
6e:62:67:a8:97:98:2e:79:88:3e:f6:95:fa:fa:c4:50:a7:15:
7e:ad:ff:5b:f4:16:c0:d6:a2:1f:2d:b5:42:29:f1:cb:63:67:
b8:75:a3:b7:78:18:21:43:06:5b:4e:fa:46:45:18:84:23:b1:
fc:77:f3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 30 21:50:38 2026 by rpki-client