Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: UIdmThrRbeVUX/LdNbXbCBANjdvDzIGI/kfd+1Kx5cs=
Subject key identifier: 7B:C1:F7:91:39:09:5E:C0:12:3C:62:73:B0:C4:8C:78:16:9C:78:B1
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01A127D5A086CD22C3734700ED90D4CA762E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1662
Signing time: Sat 10 Oct 2026 22:01:13 +0000
Manifest this update: Sat 10 Oct 2026 22:01:13 +0000
Manifest next update: Sun 11 Oct 2026 22:01:13 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: ZxAXVdLCvUgrQKq8U10gPqVL0mBRag9gxTd8k5fuWro=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:d5:a0:86:cd:22:c3:73:47:00:ed:90:d4:ca:76:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 10 22:01:13 2026 GMT
Not After : Oct 11 22:01:13 2026 GMT
Subject: CN=7bc1f79139095ec0123c6273b0c48c78169c78b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:79:f9:71:cf:02:79:db:11:c3:0e:c2:51:
7f:01:65:62:95:84:5d:92:ff:89:2a:25:51:ee:08:
cc:4f:af:67:11:f2:ab:1b:16:ae:4f:d8:2e:f9:5a:
a7:0d:15:e1:3b:14:73:46:09:84:4f:f4:dd:5e:1a:
c5:0c:04:25:b1:ae:b2:ae:d2:63:f7:64:22:b1:26:
57:f7:7f:da:84:f1:c6:69:e4:20:02:4e:e4:ac:6a:
d1:45:4b:3a:39:e2:5a:f4:e3:f7:c6:58:48:06:d0:
f7:cb:21:ba:25:4c:ee:c9:5a:2f:ac:3d:f7:4b:83:
0a:bc:81:7e:32:d9:fe:a8:6b:5c:e7:3d:a9:f1:a9:
71:e1:d8:6a:69:cd:67:f6:dd:7d:5e:a1:78:61:d2:
f2:6b:9f:55:b2:54:83:41:e8:13:93:b3:71:9f:f4:
8e:fb:d7:d7:3e:5e:ff:60:cc:25:aa:ab:01:f4:a7:
7d:8c:2d:f1:9b:97:71:4a:ff:28:b0:b9:06:af:6a:
c6:fd:93:62:0b:f2:82:40:96:d8:69:39:a5:a1:61:
7f:f9:b7:63:e1:51:37:a0:56:a6:10:21:02:21:c7:
e5:92:fd:85:37:22:de:60:12:a3:f5:d4:83:58:d6:
7a:ac:ba:e2:db:49:6f:ce:d9:fa:3b:d6:f3:f8:15:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C1:F7:91:39:09:5E:C0:12:3C:62:73:B0:C4:8C:78:16:9C:78:B1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1a:ba:63:2f:f2:dd:58:c2:85:d7:c6:d2:af:b5:ad:76:ab:
6b:7c:12:e6:22:e5:de:5a:5c:0d:a3:2a:65:e0:91:ce:bd:fe:
35:02:ec:0c:3d:ef:55:3a:a9:68:6f:57:6d:c5:a0:4c:17:aa:
4c:2a:3d:15:57:eb:a4:41:13:2d:af:cf:95:73:14:c6:08:53:
17:3d:90:ba:34:d7:df:fc:55:c9:55:65:e0:8a:1e:fe:a7:7e:
43:dc:a0:10:76:68:45:38:78:85:21:92:ff:eb:50:d4:93:c3:
1b:ee:f5:d7:da:18:0d:1d:b7:f6:e8:77:90:6f:a2:21:ee:cc:
c4:53:10:29:6d:f8:06:64:03:c8:68:67:06:68:e7:5e:30:e9:
58:f6:78:c1:b0:82:de:d4:18:19:11:1f:75:9f:53:87:75:2c:
17:fd:c0:dc:0f:61:e0:01:3b:1a:78:cd:73:e6:bf:5e:45:59:
ce:e4:ba:b5:41:63:b0:9c:e6:11:75:59:2c:66:1d:01:fc:2b:
92:60:b3:1c:52:e9:76:06:17:c8:ab:ad:c3:d4:9d:5b:ea:04:
2d:55:21:16:87:1a:e6:2a:b2:54:62:03:12:80:b5:37:20:f9:
8c:c3:6e:1d:fe:1c:68:29:04:5f:93:66:19:3e:8c:77:20:24:
82:49:98:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:57:07 2026 by rpki-client