Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: 7cZuBmI4mUAyQscUHzXONl2/EFvN0RjBZbxL/SRkUDQ=
Subject key identifier: 9E:38:0B:18:72:4E:C2:71:23:FB:E8:FC:E0:C3:E1:26:29:0F:E2:45
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019E29275C3D6DB119E839FD176180FE4B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 14D5
Signing time: Fri 15 May 2026 01:01:45 +0000
Manifest this update: Fri 15 May 2026 01:01:45 +0000
Manifest next update: Sat 16 May 2026 01:01:45 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: Haf2o0laxMAJgvmSVD/4DP3r2NpMie6fcnxb4G2fq5A=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:27:5c:3d:6d:b1:19:e8:39:fd:17:61:80:fe:4b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 15 01:01:45 2026 GMT
Not After : May 16 01:01:45 2026 GMT
Subject: CN=9e380b18724ec27123fbe8fce0c3e126290fe245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b4:3c:6b:da:87:32:94:b3:04:ae:8b:5d:83:
4c:0d:1f:3d:7f:bf:ce:3e:14:53:8f:1e:ff:44:fa:
5f:16:a0:61:e0:c0:92:6a:f9:40:e1:4d:85:06:b8:
3f:40:86:e0:12:c4:97:07:fd:9a:cb:70:9d:f1:8d:
c1:67:55:f3:83:7c:5a:69:e6:d8:e2:94:ef:4e:e4:
c3:ee:2d:8a:77:75:93:c5:9f:a4:57:7b:83:b7:80:
58:1b:43:ed:88:f1:e4:c2:2b:5c:75:fb:d6:08:ef:
9f:1e:b7:39:e4:8c:85:68:d5:68:7f:fc:30:64:65:
44:09:4c:d1:e4:79:43:46:21:0f:aa:2e:03:95:86:
6b:85:cd:42:f6:95:fb:34:ad:df:5a:f5:2b:d9:b0:
1a:bf:96:6e:e7:f9:f1:e6:8c:fb:c0:18:18:c3:22:
01:9f:e2:bd:b5:96:4e:ce:55:e5:c7:ec:c0:24:b4:
6a:ea:70:d6:9e:87:61:2e:c6:01:81:6c:8e:76:cd:
c3:09:27:f9:6e:02:26:1c:2b:bc:a3:e0:b9:57:c6:
98:00:5c:90:03:50:0b:2c:50:55:aa:a1:86:c7:d2:
b2:a3:b3:63:a9:a5:f9:83:b9:6a:d0:55:34:3b:0c:
e8:85:30:2a:c1:74:2a:51:6d:ba:d5:2d:4d:8b:a5:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:38:0B:18:72:4E:C2:71:23:FB:E8:FC:E0:C3:E1:26:29:0F:E2:45
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e9:f8:32:f2:42:f8:97:e0:b2:e8:8f:3f:d8:dc:21:1c:44:
ad:f5:6e:7d:bd:ef:56:dc:6b:13:dd:2d:17:74:e5:a0:4e:e7:
2f:f5:32:e8:a8:cd:f1:2a:b0:63:b1:45:3b:f6:ad:01:a1:9b:
fc:4a:07:bb:6a:37:eb:aa:5b:9f:75:28:d4:92:09:cb:16:bf:
f8:15:1a:48:79:92:73:0a:ba:9f:17:cf:b4:84:c3:d5:a2:33:
19:a5:36:8c:ad:9f:15:e9:4d:aa:6a:f1:44:3b:46:15:fb:46:
90:5c:88:ce:96:da:41:b0:a8:e8:97:10:d8:17:13:3a:fc:89:
46:bd:5a:b0:4a:ef:b6:f5:5c:88:5b:8a:31:0d:cf:a2:13:59:
ec:cd:16:98:6d:68:44:49:da:71:0f:35:84:dd:8a:9d:66:14:
b3:7a:05:bc:9f:97:e3:6d:43:69:b2:4a:aa:e2:b7:a6:d6:10:
d0:78:9e:21:9b:a3:04:fb:42:43:91:89:98:51:84:e0:cd:2a:
45:fe:4d:8b:4c:48:ad:06:c0:5c:d8:14:8d:bd:34:38:ba:46:
63:8a:31:d9:f3:47:0a:73:75:4f:62:25:d4:ad:09:86:93:ef:
ff:a4:c3:e5:0a:36:84:ee:34:6c:b9:7d:7e:2b:93:5b:af:96:
ce:8f:8d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:39:21 2026 by rpki-client