Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: mKStubHPYqZiJVxy2e70/DsZYIKWjQwocOHvLR742AM=
Subject key identifier: 4C:01:4B:82:1B:3A:ED:E6:F0:64:06:FA:7B:16:29:38:78:58:D0:59
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01A0250D90F45AC228566ECB09236F140B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 15DC
Signing time: Fri 21 Aug 2026 16:00:41 +0000
Manifest this update: Fri 21 Aug 2026 16:00:41 +0000
Manifest next update: Sat 22 Aug 2026 16:00:41 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: DMRIS2ukygTZ/TqtyV0TaAjoxexAvpFgF662abrctX8=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 14:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:0d:90:f4:5a:c2:28:56:6e:cb:09:23:6f:14:0b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 21 16:00:41 2026 GMT
Not After : Aug 22 16:00:41 2026 GMT
Subject: CN=4c014b821b3aede6f06406fa7b1629387858d059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e0:8f:b8:4c:e0:9d:88:da:5a:28:5e:94:6a:
16:f6:40:b0:ad:92:c7:cf:03:f6:e3:14:f3:79:d8:
9e:35:ae:88:53:c2:5b:2c:6e:b2:be:a8:ec:06:87:
f4:35:88:97:21:af:52:ed:5b:0d:da:21:19:b4:be:
de:44:45:95:6d:d9:88:a8:bb:91:8f:ef:47:65:14:
28:92:c9:17:96:fa:c1:fd:1d:59:b5:cd:45:30:68:
e7:5e:f7:a2:a4:d1:99:5f:a4:9e:37:8d:20:73:7c:
d1:ef:e8:fe:e3:77:d7:df:96:f5:c4:83:42:05:2b:
c6:3a:5d:b1:c6:4f:13:ad:26:46:6c:da:c9:c6:60:
71:bc:0d:da:99:e4:27:16:6c:bf:ce:72:c2:97:4e:
df:09:4c:47:4f:1a:e8:54:1e:c3:98:9d:1d:0c:db:
c3:bf:b5:97:e1:ee:74:95:32:64:e7:1a:27:a7:ea:
ee:74:1e:a1:b1:ad:37:6f:de:71:72:ef:96:c7:54:
4b:b2:0f:47:ef:5d:aa:3c:0f:f2:04:f6:cd:ed:32:
30:5e:83:b5:d8:c8:e3:58:e5:73:32:9c:1e:ce:58:
a9:df:48:86:2b:69:22:36:74:8f:85:3b:41:47:6d:
5c:1c:58:c4:c9:b3:90:77:1c:44:b8:b1:ca:02:50:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:01:4B:82:1B:3A:ED:E6:F0:64:06:FA:7B:16:29:38:78:58:D0:59
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:09:db:08:bd:8c:88:93:fa:f6:80:8d:b8:59:f9:94:ec:0b:
47:d4:4e:02:3c:9c:7c:da:42:64:c5:0f:22:45:4a:d3:68:c8:
40:8c:c5:95:1b:13:c4:09:13:0b:67:78:f5:f4:75:93:4d:85:
27:fd:92:05:2d:b2:56:08:5c:16:c2:41:76:8d:ae:8e:c9:2b:
8c:14:8b:e0:71:c1:37:af:54:a2:a6:e2:ae:8c:24:41:42:81:
3c:fb:73:a9:46:4c:04:60:73:17:61:d2:f7:b4:64:37:03:a1:
86:ee:50:75:01:dd:2f:02:5e:99:48:16:0a:c3:21:4c:f2:80:
7f:10:b2:4d:cf:d1:4e:44:f0:c2:a0:f2:5f:eb:af:7d:8a:e4:
73:29:f5:ec:d9:e7:fe:df:7a:2d:19:99:2e:6f:1f:c4:19:51:
a8:da:b5:a3:33:16:42:9d:46:6e:70:12:78:9d:d4:dd:6b:b2:
fe:8c:43:c9:56:3d:29:f0:c6:af:1f:86:5c:b8:42:3f:c8:c2:
25:b4:a3:9b:1a:1e:e4:0e:58:35:4f:d8:a4:ec:ba:e9:73:ee:
81:5f:47:d8:e6:d5:57:a2:f8:55:82:f4:ce:25:1c:fd:ef:05:
49:6b:41:58:7f:12:55:66:cb:6a:6b:90:27:63:5b:28:25:27:
e8:a0:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 18:07:50 2026 by rpki-client