Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: AsW5QWYrAdvdAwkwaLPSt2dRq9P2PmlWGSkDsVonlEI=
Subject key identifier: B1:17:4D:3C:D7:43:04:F7:93:D4:5F:F7:46:1B:CE:84:48:CB:68:46
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019EDAD278C9CDAD74B6AEC4B8A60CF66689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1531
Signing time: Thu 18 Jun 2026 13:01:26 +0000
Manifest this update: Thu 18 Jun 2026 13:01:26 +0000
Manifest next update: Fri 19 Jun 2026 13:01:26 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: 7BE0ynThSyA2epMSQDYHCO8vhbIlSMlLrH9UD9uEwEM=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:d2:78:c9:cd:ad:74:b6:ae:c4:b8:a6:0c:f6:66:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 18 13:01:26 2026 GMT
Not After : Jun 19 13:01:26 2026 GMT
Subject: CN=b1174d3cd74304f793d45ff7461bce8448cb6846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:8a:99:39:76:c3:6b:fa:88:aa:38:b8:a2:
d6:9d:99:0c:c5:83:b1:75:68:42:f1:49:65:01:e8:
35:de:4b:90:a0:14:cc:f2:cd:55:ad:61:7d:cb:b8:
db:41:91:9e:10:f8:20:e3:ea:9c:dc:d3:2f:09:17:
e4:30:c1:60:1d:da:ea:54:01:fc:76:bf:2f:ef:3b:
2d:4d:de:87:1b:fb:61:06:2c:54:b1:bd:ad:04:12:
cf:84:c1:52:b7:2b:04:c4:52:19:e6:4a:35:8b:df:
3c:1b:c4:a9:1b:de:59:3d:30:c9:98:53:33:95:19:
e4:99:73:e1:3b:5c:83:aa:34:4c:54:22:0b:0e:61:
19:61:15:50:78:19:23:95:de:81:43:c5:e7:7d:2b:
79:87:a4:ae:8a:13:c4:bb:c2:40:fe:86:79:cf:b2:
cc:75:2b:6a:d0:79:02:0f:82:f9:f3:1f:3b:8c:82:
3e:3b:e9:a2:e5:1e:ba:c4:3c:ad:41:44:9b:b1:39:
b1:d6:8a:5d:d4:de:aa:58:db:9c:98:6a:de:81:6a:
c7:57:c3:a4:42:2b:0c:62:ec:42:72:15:3a:45:73:
0d:91:2f:0a:16:14:8f:1a:76:f0:7d:99:60:7c:c4:
21:99:f0:98:5d:4e:b0:cb:5a:0c:9e:44:35:0d:9f:
a5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:17:4D:3C:D7:43:04:F7:93:D4:5F:F7:46:1B:CE:84:48:CB:68:46
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f3:01:9a:24:27:94:fd:40:43:9a:fc:06:ad:ce:25:35:49:
a8:8f:19:6a:82:af:bf:c0:c3:d7:3c:8d:72:fd:27:35:a9:97:
4f:07:53:46:bf:69:26:85:5a:1c:d2:6a:0d:2b:b8:2e:01:15:
ec:e0:2b:40:d4:9b:94:eb:a4:bb:3d:d4:b5:83:55:04:08:6e:
2e:27:9a:a7:80:9f:c7:8a:9d:f0:e6:66:9c:d2:27:b8:16:03:
59:0e:f0:70:84:12:29:0b:a2:b6:50:74:f6:99:9f:76:d1:bd:
4e:a5:14:26:6d:d3:29:82:25:4a:75:69:77:8b:d3:b1:1d:b4:
e6:60:22:0a:51:f5:96:18:19:dc:dd:e2:fc:2a:e1:77:8d:dc:
a0:ea:cc:ea:2d:f1:ac:d8:50:9a:37:6c:18:af:8c:59:96:5d:
27:fc:7d:18:00:8f:b7:d2:0e:bc:16:ae:58:11:70:67:29:cf:
52:a3:d6:d3:f9:f5:66:4c:d8:21:f4:66:05:29:29:ef:0a:9b:
e8:87:5a:cd:9e:be:c8:c7:d1:45:15:f6:e5:da:7f:aa:43:56:
ea:ca:8d:42:ca:b7:36:80:f0:2d:a4:21:30:26:31:05:c1:ef:
7b:af:4f:8f:95:51:fd:59:43:b7:32:f0:6f:d9:f7:f2:5c:68:
b4:6b:ba:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 20:25:43 2026 by rpki-client