Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: TjyXVh8OK/Fd5G/1a4PAxssaCpsmyXGT9VirUFJQBg8=
Subject key identifier: 34:AE:B2:A1:90:4F:9D:8F:6B:29:56:11:6A:02:1B:72:FF:FC:4E:C3
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019D5E60E90BFDD580D2D0F06E08B931722C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 146C
Signing time: Sun 05 Apr 2026 16:01:42 +0000
Manifest this update: Sun 05 Apr 2026 16:01:42 +0000
Manifest next update: Mon 06 Apr 2026 16:01:42 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: j/TFuBYU1iLysCh1aInrUpCD6VUCi1PAsiEdxdtkTps=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5e:60:e9:0b:fd:d5:80:d2:d0:f0:6e:08:b9:31:72:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 5 16:01:42 2026 GMT
Not After : Apr 6 16:01:42 2026 GMT
Subject: CN=34aeb2a1904f9d8f6b2956116a021b72fffc4ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:cb:1d:78:9b:bc:47:9b:85:bd:a1:b0:de:
2e:72:5d:e6:d6:88:b6:87:1f:84:5a:d8:ad:8f:ef:
81:5c:a8:0c:d8:8c:1f:be:cc:a0:e2:6e:ad:20:29:
a1:f4:0e:df:bf:8f:1c:40:62:3f:5d:16:9d:c7:5c:
39:85:66:21:ae:0d:d9:da:8c:4e:77:af:30:78:93:
29:84:21:1d:f7:15:43:c2:60:59:38:33:8c:b9:bb:
47:77:2c:58:de:7d:55:3f:23:e5:32:b2:57:e3:40:
c5:11:b2:b4:37:83:b4:f9:dc:fe:52:63:9c:16:4c:
0a:c3:c1:0a:9a:d5:a0:94:5e:c0:bb:56:72:fb:d0:
64:03:d1:d2:45:81:21:10:24:65:7a:26:3c:8f:01:
11:f4:c5:76:3c:96:86:8f:bf:e4:28:74:a2:ec:aa:
65:d4:5d:41:ed:0f:2c:c8:19:cb:9a:d4:96:f1:47:
02:33:d5:45:e7:30:c4:09:93:da:36:46:23:8e:8e:
a5:3f:a5:30:c4:27:c9:b6:f8:26:b7:8a:59:93:b9:
92:e4:fe:1e:8c:9b:c9:81:80:ea:f4:df:d2:1b:41:
d4:d7:a8:ab:ae:34:19:3b:f6:1e:c1:2c:f4:3b:80:
3e:67:9b:0b:78:85:0c:91:76:30:4c:ad:43:8c:48:
93:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AE:B2:A1:90:4F:9D:8F:6B:29:56:11:6A:02:1B:72:FF:FC:4E:C3
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a9:a5:87:0b:25:6d:52:9d:57:0d:2c:e5:2a:1b:14:d9:a4:
c6:64:94:6e:b9:d5:4f:af:41:87:dd:b6:2f:df:f0:cd:91:5f:
8f:0e:9c:59:50:f9:ff:a4:58:cc:ed:8c:2a:14:65:f1:d9:03:
5b:37:73:67:2a:ae:5e:7b:48:d7:81:2e:ba:56:75:0c:ca:9c:
bf:22:7e:b0:4b:b0:95:a2:cf:6a:4b:c9:68:95:42:20:12:f0:
a3:17:25:b2:b9:b2:6c:38:ea:a9:79:81:61:f9:61:63:b5:9c:
b3:7d:81:98:fb:ad:2e:03:b9:27:64:af:72:78:62:37:2d:43:
be:a0:a6:57:b3:af:06:9f:4c:8e:6f:74:22:3d:41:8b:bc:e5:
95:d1:a6:b6:1e:1e:f3:4b:77:3e:b5:91:c4:b7:6f:a1:b9:cd:
73:41:3c:e6:00:06:d3:bb:48:b5:7b:a9:9b:0a:e1:4a:15:0c:
66:5f:e1:44:f9:23:19:0b:bc:cd:66:35:6a:59:1b:c8:9c:a1:
d5:71:98:d1:12:ef:67:9f:09:eb:8c:51:b4:42:3b:2a:5e:97:
77:59:32:6e:ff:57:fd:ab:fd:9e:cc:d4:43:8d:9c:bf:49:92:
fb:fc:e7:ca:93:bf:fd:8b:b3:3a:3f:7e:e4:ca:f1:b4:36:31:
07:2d:46:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:32:51 2026 by rpki-client