Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: +QGyBtb34mbPJ2I408WYPY6W6dHcU9hPIjVGnyKt5KU=
Subject key identifier: CA:6C:79:F9:F3:92:BB:17:E3:79:76:1B:B8:F9:70:30:F2:96:41:61
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019D3D8C34BBAF8F3657567562896BBA5421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 145B
Signing time: Mon 30 Mar 2026 07:01:31 +0000
Manifest this update: Mon 30 Mar 2026 07:01:31 +0000
Manifest next update: Tue 31 Mar 2026 07:01:31 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: N4ryA1Fz1dyXgbWVixR/EekteQQ+oX90QxnRJtgOl5k=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3d:8c:34:bb:af:8f:36:57:56:75:62:89:6b:ba:54:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 30 07:01:31 2026 GMT
Not After : Mar 31 07:01:31 2026 GMT
Subject: CN=ca6c79f9f392bb17e379761bb8f97030f2964161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:e6:45:92:eb:a2:9a:1d:b3:08:60:a9:0b:
50:10:4f:ab:c5:7b:35:49:b4:c7:71:37:e2:83:8b:
a0:ba:70:d0:90:93:8b:d4:2c:09:51:60:23:75:43:
4e:76:e6:c5:c6:5a:a1:b2:d1:88:d3:b9:42:fa:40:
85:1c:6e:9f:a6:d0:dc:90:51:2f:76:63:26:4f:1d:
6a:33:6b:ef:3e:cd:35:e2:03:fc:c0:06:46:6f:a3:
c6:31:ee:30:0e:8e:29:dd:8a:c0:1b:a0:f9:85:f9:
7d:06:26:63:84:ce:44:50:cc:ae:2d:8b:d2:b0:58:
6c:86:76:c7:b8:71:e8:7e:71:12:db:79:12:b6:bd:
53:68:e3:bc:1f:b2:50:d6:ea:1a:bb:f8:f5:da:f1:
20:11:31:ed:f4:a7:fe:5c:95:60:2d:fb:35:14:de:
7f:1d:c4:e5:5e:ed:00:5f:c4:40:ab:b6:5c:a6:f3:
53:92:e6:be:37:98:b1:97:70:15:01:cf:b5:96:7d:
eb:68:d4:a2:a8:a8:66:d7:57:91:20:ad:67:2e:e0:
19:93:e7:4c:30:d0:b8:35:0d:59:72:70:ef:cd:39:
d9:9d:02:3c:4a:8b:4f:8e:a7:0b:16:b9:fa:15:a1:
a6:9c:f7:13:2d:99:23:14:2f:0e:e5:e5:d3:1f:76:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6C:79:F9:F3:92:BB:17:E3:79:76:1B:B8:F9:70:30:F2:96:41:61
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:30:40:5d:98:77:9f:b6:ae:08:96:6c:21:e4:be:11:31:cd:
72:b7:40:4c:2c:2a:9a:42:52:97:04:9b:45:0a:cf:81:1e:a3:
2d:7b:8e:89:02:1b:5a:42:a7:fb:e7:91:a7:06:df:53:aa:46:
a2:2d:e4:32:74:b7:19:68:6d:4f:13:3f:3e:ad:eb:ec:b7:fc:
24:9c:83:51:60:0c:ad:c7:f9:7f:7c:ff:f3:61:70:fd:02:48:
ad:17:ba:aa:59:9c:bc:30:dd:45:62:3c:b1:b7:6f:06:b6:df:
36:80:75:9d:a3:f1:f9:43:f3:3d:ed:1f:1e:ad:fd:28:b5:3e:
44:a5:e2:03:2c:30:64:b0:e6:30:d5:fd:a5:5a:c9:03:20:f7:
97:90:e8:27:f1:84:6c:95:56:c6:82:b2:51:90:8a:97:a8:ce:
f3:f5:dc:ec:41:de:78:54:2d:57:b1:ff:6a:97:a8:1d:61:92:
53:73:8a:6f:de:ba:f6:6e:e0:e7:9e:45:c7:bc:65:8b:f8:01:
1f:7e:08:bc:e2:0e:e2:e3:1f:62:97:46:be:09:77:ad:c4:89:
78:8e:9b:48:f9:ef:3b:58:14:ec:04:33:14:8e:59:a3:54:15:
8e:87:64:cd:32:c0:96:53:1f:45:43:3f:36:8a:20:27:b4:08:
7d:c4:32:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 10:56:55 2026 by rpki-client