Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: iCGySwE2LYAjwQXat+OnnRZPNNgHkQexPkQAiNzZbl0=
Subject key identifier: 63:ED:AB:B2:20:7F:C8:7C:79:07:3B:9F:9B:65:3E:2C:86:76:EE:15
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019FF4C69E80F8B131C9D359981A8DD13DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 15C3
Signing time: Wed 12 Aug 2026 07:01:25 +0000
Manifest this update: Wed 12 Aug 2026 07:01:25 +0000
Manifest next update: Thu 13 Aug 2026 07:01:25 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: WO5fVZSpC0+GTlCEK0xScguzpuackeeVCtiwdWcKf+M=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:c6:9e:80:f8:b1:31:c9:d3:59:98:1a:8d:d1:3d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 12 07:01:25 2026 GMT
Not After : Aug 13 07:01:25 2026 GMT
Subject: CN=63edabb2207fc87c79073b9f9b653e2c8676ee15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ca:52:79:73:7b:f8:18:94:93:62:ea:b8:d4:
b2:d4:31:91:b9:d3:65:8c:41:d9:ad:bc:e3:ec:b1:
f3:a2:db:46:f7:c0:51:cc:7a:bc:d6:90:94:82:fb:
42:fe:40:6b:9a:7d:ae:d9:80:40:58:12:f0:4d:07:
e5:d6:92:8d:18:55:f7:b9:7e:f8:a4:fa:8f:e8:f1:
8c:04:92:fb:4c:2f:22:61:51:3a:6b:92:65:41:01:
22:8d:50:8c:76:3e:c8:43:ab:81:00:8c:b1:5b:2b:
ee:68:d5:e4:eb:e8:16:f1:ec:73:a2:13:e5:f5:7c:
f0:55:d5:af:14:47:a6:80:31:c2:2a:f0:46:47:ac:
22:33:df:72:ee:7d:a8:8e:15:aa:97:04:66:f2:02:
9f:90:8e:7f:1f:b5:8c:4c:6c:0e:c1:3a:b0:4e:a7:
33:4b:41:ce:24:e0:88:bc:0b:09:41:9e:69:d8:a1:
ad:8a:a3:91:a2:52:ce:eb:6e:b8:7e:9b:84:5f:e9:
cf:23:2b:66:2a:87:26:0a:92:ec:9a:2c:3a:2a:b6:
5e:22:82:01:d9:ff:75:26:cd:97:15:dd:78:21:b8:
df:bb:60:44:f4:d2:13:1e:6b:ed:65:f0:e3:0b:2b:
a5:3a:c8:40:6c:56:5e:28:7e:6f:61:21:04:69:6b:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:ED:AB:B2:20:7F:C8:7C:79:07:3B:9F:9B:65:3E:2C:86:76:EE:15
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0d:42:cc:f5:ad:b4:48:cb:39:17:40:db:7d:b2:71:1a:aa:
b4:4b:3b:11:7a:09:c3:53:e5:00:15:82:c4:78:4e:90:73:a4:
3c:2c:0e:c9:c6:b9:bc:1c:b5:ab:72:7f:0f:eb:fa:73:79:40:
5c:90:a0:86:41:9f:de:eb:6b:27:1c:ad:31:13:df:a0:33:7b:
2e:8f:77:e4:c3:eb:44:36:c9:ee:c5:38:63:34:a0:ca:4a:49:
23:39:22:06:0f:2b:81:ce:9e:cf:57:06:3f:b1:19:9d:8e:f5:
14:11:3d:6f:67:df:fa:d7:1a:99:3c:62:32:2d:85:8b:fa:73:
14:4d:41:f4:e9:36:6c:ca:96:6d:87:22:16:25:91:c1:46:c7:
e9:01:c1:58:c9:05:28:02:71:3d:98:9b:8f:5c:d0:64:b4:b9:
35:3a:98:e5:03:d9:08:dc:d4:a3:e4:b7:2f:c7:84:f2:9e:a9:
11:ed:ef:54:6e:db:de:b0:9f:f3:03:50:ec:7e:41:f2:c5:12:
55:b9:e3:2b:e8:76:f5:d9:6e:e6:1a:b8:b8:6d:4c:e3:cd:a0:
41:79:5a:86:4c:c7:52:4d:2b:46:c7:28:7b:46:eb:2a:de:e2:
5d:32:9b:db:b9:70:9a:81:25:bf:5f:ca:26:a8:41:4e:13:5c:
d2:67:0c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 14:35:01 2026 by rpki-client