Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: lpEo/+88Wqs2o9H7GnQpQiFmSUnInnfffA++40VFOgk=
Subject key identifier: 58:B6:CE:35:B2:0B:72:07:4A:1B:20:C4:86:C2:DB:8F:32:51:D0:54
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019DAD8DEEA0E3B77ABF754046C1331F61DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1495
Signing time: Tue 21 Apr 2026 01:00:53 +0000
Manifest this update: Tue 21 Apr 2026 01:00:53 +0000
Manifest next update: Wed 22 Apr 2026 01:00:53 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: HaEI7BAIA4yBO32V+Qz1qIsJBThGa8CRRWYlRCz3jDk=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ad:8d:ee:a0:e3:b7:7a:bf:75:40:46:c1:33:1f:61:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 21 01:00:53 2026 GMT
Not After : Apr 22 01:00:53 2026 GMT
Subject: CN=58b6ce35b20b72074a1b20c486c2db8f3251d054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:f1:91:9a:19:69:61:56:8f:a8:65:f5:dc:
69:d8:96:64:ba:08:48:67:26:51:fc:8f:2b:8d:a5:
62:01:4a:35:e0:4c:56:01:0c:ba:38:f3:49:72:bb:
78:da:b8:93:7b:9c:75:2d:04:0e:b1:34:98:49:bf:
59:e5:0c:f6:31:4b:b2:46:18:c7:a9:e1:8e:a4:8c:
a3:64:ea:79:2e:6c:56:28:8b:37:d5:e9:f5:a8:e8:
ab:87:8c:d5:47:09:9d:8a:22:5f:42:8f:e1:8e:b2:
38:31:ef:be:52:7b:25:10:57:53:61:f0:34:ab:12:
53:c9:ab:1b:a3:90:64:6f:e3:0a:c1:e2:45:66:80:
a0:2e:ad:fb:5b:7f:03:4d:88:5d:68:e6:3f:36:e9:
8e:fd:70:c2:60:ce:5c:24:a7:fc:05:76:eb:ec:9c:
39:d8:48:52:cd:af:9d:b3:24:6a:4e:bd:72:58:8f:
0e:f6:38:df:3f:3c:d1:f3:83:63:41:0c:6f:9e:7a:
89:42:13:0e:a0:91:8f:db:6e:64:ec:5a:7e:ed:0b:
e4:21:e2:32:70:68:cf:dd:14:c1:f8:ef:1c:b1:08:
41:8d:e6:d3:9a:8e:bb:d5:44:b0:49:95:4e:ba:9c:
99:fc:23:11:fa:3f:4a:40:8d:7e:2f:d8:37:89:b8:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B6:CE:35:B2:0B:72:07:4A:1B:20:C4:86:C2:DB:8F:32:51:D0:54
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:36:d1:12:9a:3c:a0:81:4b:78:bb:6d:16:fb:8d:55:c9:d1:
0b:e6:c4:25:dc:73:35:b8:55:20:44:d5:77:4c:d0:fb:2d:09:
5a:c1:bc:02:8a:68:2e:7e:f2:63:b8:02:1b:2d:42:c6:f3:d9:
3e:6f:08:9a:37:93:40:5b:8c:b9:c0:45:9c:8d:74:8a:da:af:
ee:96:20:c8:ad:32:38:74:69:51:5a:64:16:93:47:96:d6:f5:
b7:81:8a:8e:95:fd:94:13:28:d2:3a:e4:4c:c6:a8:ed:36:32:
8a:c6:19:ed:28:15:a7:73:2a:d6:29:cb:6b:df:85:9f:17:d0:
de:b0:17:89:95:18:b0:8a:ef:aa:0e:63:3f:b2:d1:b1:a5:a7:
82:06:58:9a:15:8e:57:4b:9d:47:71:2f:f9:c5:1e:a2:ba:d5:
9f:06:a2:55:94:39:12:2a:49:a8:e4:97:16:ed:fa:53:f3:3e:
5d:93:36:b5:ff:f1:74:e1:a0:fe:aa:c9:1c:45:0d:92:cc:75:
5c:0c:93:f4:0c:c1:30:2c:bc:57:10:09:63:d5:08:bb:9a:80:
bc:f1:df:3b:8a:86:a0:9d:ef:4c:72:79:b8:32:c4:df:54:ab:
1a:db:45:9d:59:52:07:58:4f:48:08:83:9b:08:6a:53:52:8d:
9f:40:54:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2tje6g47d6v3VARsEzH2HbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjYwNDIxMDEwMDUzWhcNMjYwNDIyMDEwMDUzWjAzMTEwLwYDVQQD
Eyg1OGI2Y2UzNWIyMGI3MjA3NGExYjIwYzQ4NmMyZGI4ZjMyNTFkMDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zvxkZoZaWFWj6hl9dxp2JZkughI
ZyZR/I8rjaViAUo14ExWAQy6OPNJcrt42riTe5x1LQQOsTSYSb9Z5Qz2MUuyRhjH
qeGOpIyjZOp5LmxWKIs31en1qOirh4zVRwmdiiJfQo/hjrI4Me++UnslEFdTYfA0
qxJTyasbo5Bkb+MKweJFZoCgLq37W38DTYhdaOY/NumO/XDCYM5cJKf8BXbr7Jw5
2EhSza+dsyRqTr1yWI8O9jjfPzzR84NjQQxvnnqJQhMOoJGP225k7Fp+7QvkIeIy
cGjP3RTB+O8csQhBjebTmo671USwSZVOupyZ/CMR+j9KQI1+L9g3ibhZXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFi2zjWyC3IHShsgxIbC248yUdBUMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyTbREpo8
oIFLeLttFvuNVcnRC+bEJdxzNbhVIETVd0zQ+y0JWsG8AopoLn7yY7gCGy1CxvPZ
Pm8ImjeTQFuMucBFnI10itqv7pYgyK0yOHRpUVpkFpNHltb1t4GKjpX9lBMo0jrk
TMao7TYyisYZ7SgVp3Mq1inLa9+FnxfQ3rAXiZUYsIrvqg5jP7LRsaWnggZYmhWO
V0udR3Ev+cUeorrVnwaiVZQ5EipJqOSXFu36U/M+XZM2tf/xdOGg/qrJHEUNksx1
XAyT9AzBMCy8VxAJY9UIu5qAvPHfO4qGoJ3vTHJ5uDLE31SrGttFnVlSB1hPSAiD
mwhqU1KNn0BUBw==
-----END CERTIFICATE-----
Generated at Tue Apr 21 10:52:18 2026 by rpki-client