Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: yDAuknR4TGaTnec6QH8mzU1a9xS89PGWJ/mSyJP5yYk=
Subject key identifier: AD:70:25:FC:32:28:C4:DB:79:B6:A9:A9:DF:C5:04:04:C6:82:8E:08
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019D1CB7BABE1CA1AB31B2D0A52A840128FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 144A
Signing time: Mon 23 Mar 2026 22:01:36 +0000
Manifest this update: Mon 23 Mar 2026 22:01:36 +0000
Manifest next update: Tue 24 Mar 2026 22:01:36 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: Enam2RmPPjc/xQ8iscmiOzqHUrUtc46DVCwdWGrTJ4k=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:b7:ba:be:1c:a1:ab:31:b2:d0:a5:2a:84:01:28:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 23 22:01:36 2026 GMT
Not After : Mar 24 22:01:36 2026 GMT
Subject: CN=ad7025fc3228c4db79b6a9a9dfc50404c6828e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:f8:67:c8:a7:64:24:aa:72:dc:86:43:3e:
ff:d4:77:9a:37:ee:32:98:64:f5:ee:28:c1:e0:f2:
ab:b2:27:8e:32:a9:07:46:43:12:f2:df:f8:b3:a7:
fb:77:ba:24:03:82:c8:75:26:99:9f:3d:5a:57:55:
2d:f7:e2:e6:f2:70:32:e2:a9:f8:71:92:f4:57:c3:
c7:c3:10:b3:fe:2c:84:d8:59:a1:08:21:d7:ca:1c:
bb:27:e5:de:bf:69:6d:b5:9f:ac:5a:30:54:6d:45:
21:fd:d6:8c:1b:56:2d:c1:49:8d:b1:fe:fe:b5:94:
1e:f9:4e:70:5c:c0:3a:02:68:5a:96:e2:62:cf:4a:
15:97:41:6c:4e:d2:c7:43:85:7b:5a:05:be:df:32:
36:d7:ab:9a:62:5a:d8:43:64:43:48:88:a2:af:ae:
35:6b:6a:7b:12:56:87:1d:1f:91:f5:21:05:6a:73:
ec:b2:6e:8a:47:91:0e:c9:54:ac:67:08:b6:b5:7c:
c7:df:c9:3c:d8:92:55:0f:a4:a4:7a:f0:a0:1d:b9:
cd:ec:d5:a4:20:82:0f:0a:e0:e8:b9:4d:60:0c:6e:
e4:79:57:29:d2:61:10:f3:cd:de:e3:0c:05:65:a3:
08:b3:95:4c:c6:01:b7:c5:17:e8:6e:83:bf:20:60:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:70:25:FC:32:28:C4:DB:79:B6:A9:A9:DF:C5:04:04:C6:82:8E:08
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:78:2a:b4:c8:81:25:df:bf:cc:3d:69:36:e3:90:53:bb:06:
2a:62:f6:3f:df:47:b6:04:99:a4:a6:6d:cd:35:ab:4b:da:6d:
62:13:13:48:24:01:d4:3d:2f:c0:76:20:c9:56:d5:5c:65:f1:
0a:5b:0e:06:11:13:73:92:bc:24:d3:66:21:24:e0:99:9a:e0:
7a:ba:73:c5:e3:59:f2:25:d6:88:eb:54:a8:de:cb:2a:43:59:
dc:ec:79:85:77:be:7a:13:eb:cd:e2:53:2c:79:3e:73:a1:96:
d4:fe:08:9d:ad:de:7f:cc:33:2f:9f:1e:a9:19:2e:ea:c8:b6:
36:90:04:d5:f2:0e:ee:28:e4:1d:dd:e9:5a:1e:ea:12:31:61:
85:83:d8:ae:1d:89:91:a9:43:db:02:45:a4:5f:eb:d2:4b:37:
51:1f:e7:40:44:50:aa:e9:fb:52:16:b9:6f:4b:f5:83:2f:31:
b1:df:4a:53:bd:2d:3c:49:43:76:72:99:a1:09:c8:64:aa:c5:
a0:09:37:31:92:5e:61:80:63:3f:ea:94:5f:b1:46:cc:b1:43:
0d:11:bc:7f:7d:2e:18:c5:d0:20:bc:59:43:eb:17:49:3e:e2:
d4:cf:6a:21:23:92:b4:32:6c:7c:dd:06:5e:62:82:16:61:43:
34:81:10:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ct7q+HKGrMbLQpSqEASj6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjYwMzIzMjIwMTM2WhcNMjYwMzI0MjIwMTM2WjAzMTEwLwYDVQQD
EyhhZDcwMjVmYzMyMjhjNGRiNzliNmE5YTlkZmM1MDQwNGM2ODI4ZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4b4Z8inZCSqctyGQz7/1HeaN+4y
mGT17ijB4PKrsieOMqkHRkMS8t/4s6f7d7okA4LIdSaZnz1aV1Ut9+Lm8nAy4qn4
cZL0V8PHwxCz/iyE2FmhCCHXyhy7J+Xev2lttZ+sWjBUbUUh/daMG1YtwUmNsf7+
tZQe+U5wXMA6AmhaluJiz0oVl0FsTtLHQ4V7WgW+3zI216uaYlrYQ2RDSIiir641
a2p7ElaHHR+R9SEFanPssm6KR5EOyVSsZwi2tXzH38k82JJVD6SkevCgHbnN7NWk
IIIPCuDouU1gDG7keVcp0mEQ883e4wwFZaMIs5VMxgG3xRfoboO/IGCszQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1wJfwyKMTbebapqd/FBATGgo4IMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3gqtMiB
Jd+/zD1pNuOQU7sGKmL2P99HtgSZpKZtzTWrS9ptYhMTSCQB1D0vwHYgyVbVXGXx
ClsOBhETc5K8JNNmISTgmZrgerpzxeNZ8iXWiOtUqN7LKkNZ3Ox5hXe+ehPrzeJT
LHk+c6GW1P4Ina3ef8wzL58eqRku6si2NpAE1fIO7ijkHd3pWh7qEjFhhYPYrh2J
kalD2wJFpF/r0ks3UR/nQERQqun7Uha5b0v1gy8xsd9KU70tPElDdnKZoQnIZKrF
oAk3MZJeYYBjP+qUX7FGzLFDDRG8f30uGMXQILxZQ+sXST7i1M9qISOStDJsfN0G
XmKCFmFDNIEQ/g==
-----END CERTIFICATE-----
Generated at Tue Mar 24 05:49:57 2026 by rpki-client