Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: 1iDYoEIBs4TokV0ARNE8WuahpBXLdVUQaOzmXxxC+MU=
Subject key identifier: B8:EB:9A:E7:62:58:11:AC:25:91:CC:F3:46:78:60:85:54:1D:88:72
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019D8EA94218102A7D4B273E3FDB3675AAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1485
Signing time: Wed 15 Apr 2026 01:02:30 +0000
Manifest this update: Wed 15 Apr 2026 01:02:30 +0000
Manifest next update: Thu 16 Apr 2026 01:02:30 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: e+l3kto5XQJ18OxznBw8bpOgeID+8S0f/5/dV0gKwms=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Apr 2026 01:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8e:a9:42:18:10:2a:7d:4b:27:3e:3f:db:36:75:aa:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 15 01:02:30 2026 GMT
Not After : Apr 16 01:02:30 2026 GMT
Subject: CN=b8eb9ae7625811ac2591ccf346786085541d8872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:d1:48:3c:5f:13:be:33:06:14:af:af:5c:
89:bc:6d:9f:e2:e1:f8:0b:90:a3:d9:c8:ce:a7:55:
f7:fd:9c:36:1f:01:ad:14:65:90:e2:23:88:de:68:
28:d5:32:bf:19:f2:e6:0b:27:7f:c9:93:1c:cd:53:
16:0b:95:bf:a6:38:11:44:2b:13:32:b1:f9:2f:02:
7d:56:a1:6f:f2:52:55:3a:43:3d:e0:3b:ff:ab:56:
f2:71:d5:02:14:b9:38:44:e5:ac:bf:81:89:55:c7:
12:6e:6a:3c:ba:3d:79:63:a2:2d:73:b0:15:51:24:
9e:66:61:43:fa:08:ad:23:cb:df:f0:2a:32:53:40:
04:ea:4b:19:55:ac:2e:34:76:52:da:92:ca:d4:9f:
56:a0:d7:02:e9:f6:9f:d7:10:59:60:cf:21:c5:88:
ca:5b:f9:f9:74:c2:0f:28:64:82:66:fb:95:f1:d3:
22:ba:07:51:bf:40:36:b5:ce:f5:22:d3:3e:38:39:
ed:12:78:c2:fb:c1:c7:5e:99:f1:4e:0d:c9:59:54:
e3:f3:e0:c7:44:35:6a:76:ec:74:3d:2e:3b:1a:bb:
ba:70:8f:35:d7:00:a1:59:67:3e:2e:f1:bf:df:3f:
c9:14:b6:6c:b8:23:cf:10:12:5f:36:af:f4:f5:d1:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EB:9A:E7:62:58:11:AC:25:91:CC:F3:46:78:60:85:54:1D:88:72
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:80:50:ee:2e:e3:1a:f8:bf:c6:a2:46:a9:b6:eb:9a:71:88:
97:cc:00:03:26:8d:3c:60:ed:6f:4a:c6:d3:9e:dd:ae:0f:09:
7f:00:37:8c:ef:d4:1d:76:6b:78:de:49:36:f0:47:52:cf:0d:
49:ef:fe:77:83:f8:48:f2:36:10:03:3c:e4:ff:1d:7f:97:12:
c6:9d:84:ef:be:41:46:9b:81:d5:ab:aa:15:cc:0f:b3:af:e3:
88:ea:b4:ce:ba:f2:6d:61:82:18:e9:ea:e7:c8:8c:79:a3:7f:
46:60:26:b3:05:0e:96:06:9c:bf:01:0a:1b:ce:ba:a6:f3:f2:
cc:33:ff:4a:04:83:51:2e:58:8d:a6:7c:b9:cb:b3:cc:70:cd:
37:6f:4c:63:78:5f:e5:ca:36:9d:8f:83:71:d4:72:bc:80:98:
c6:aa:e8:29:f2:1b:95:aa:f4:b3:82:09:79:a6:2f:d8:c1:77:
97:58:91:67:fb:7a:4b:f0:54:3f:85:11:d5:ff:5f:6c:9f:64:
6f:e5:28:39:d8:83:ad:d3:51:75:03:40:a3:1d:b8:c2:04:a4:
0e:b8:0f:cd:44:ee:17:d1:97:7a:b8:f8:35:27:1c:b5:75:1d:
ef:8a:e3:c5:e6:fa:60:2b:9e:78:60:2c:18:e7:31:be:f0:4f:
23:fb:fd:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2OqUIYECp9Syc+P9s2daq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjYwNDE1MDEwMjMwWhcNMjYwNDE2MDEwMjMwWjAzMTEwLwYDVQQD
EyhiOGViOWFlNzYyNTgxMWFjMjU5MWNjZjM0Njc4NjA4NTU0MWQ4ODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7nRSDxfE74zBhSvr1yJvG2f4uH4
C5Cj2cjOp1X3/Zw2HwGtFGWQ4iOI3mgo1TK/GfLmCyd/yZMczVMWC5W/pjgRRCsT
MrH5LwJ9VqFv8lJVOkM94Dv/q1bycdUCFLk4ROWsv4GJVccSbmo8uj15Y6Itc7AV
USSeZmFD+gitI8vf8CoyU0AE6ksZVawuNHZS2pLK1J9WoNcC6faf1xBZYM8hxYjK
W/n5dMIPKGSCZvuV8dMiugdRv0A2tc71ItM+ODntEnjC+8HHXpnxTg3JWVTj8+DH
RDVqdux0PS47Gru6cI811wChWWc+LvG/3z/JFLZsuCPPEBJfNq/09dE6owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjrmudiWBGsJZHM80Z4YIVUHYhyMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIBQ7i7j
Gvi/xqJGqbbrmnGIl8wAAyaNPGDtb0rG057drg8JfwA3jO/UHXZreN5JNvBHUs8N
Se/+d4P4SPI2EAM85P8df5cSxp2E775BRpuB1auqFcwPs6/jiOq0zrrybWGCGOnq
58iMeaN/RmAmswUOlgacvwEKG866pvPyzDP/SgSDUS5YjaZ8ucuzzHDNN29MY3hf
5co2nY+DcdRyvICYxqroKfIblar0s4IJeaYv2MF3l1iRZ/t6S/BUP4UR1f9fbJ9k
b+UoOdiDrdNRdQNAox24wgSkDrgPzUTuF9GXerj4NScctXUd74rjxeb6YCueeGAs
GOcxvvBPI/v9aA==
-----END CERTIFICATE-----
Generated at Wed Apr 15 08:55:43 2026 by rpki-client