Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: BSDQ68kYPvGQYgr4kR3B12N4jC3P5MhMkFnneg+MHv4=
Subject key identifier: 6C:D8:83:FC:25:5F:22:02:08:50:59:92:90:20:22:99:A6:82:74:60
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019D6FC2B312AA071FD1C259842C13E4F041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1475
Signing time: Thu 09 Apr 2026 01:02:03 +0000
Manifest this update: Thu 09 Apr 2026 01:02:03 +0000
Manifest next update: Fri 10 Apr 2026 01:02:03 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: 7UILyapU1wa7KurT8xyNanJfLIryJhfFjngVKdypJis=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 20:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6f:c2:b3:12:aa:07:1f:d1:c2:59:84:2c:13:e4:f0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 9 01:02:03 2026 GMT
Not After : Apr 10 01:02:03 2026 GMT
Subject: CN=6cd883fc255f22020850599290202299a6827460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:0c:16:8e:74:71:17:b1:ed:16:88:c9:2f:
18:60:d2:7d:5c:ad:c4:8e:c8:b4:51:71:3c:e8:dd:
63:91:32:b8:93:a9:41:a0:de:41:83:8b:a5:1f:b9:
c2:75:85:67:39:03:98:b9:09:4c:49:24:a5:78:89:
94:32:73:34:9a:75:d6:f9:35:83:e2:6b:bf:ec:f9:
65:8d:fa:f7:6e:00:e6:90:7f:86:05:d3:4b:ad:6c:
01:21:57:e0:ab:f8:25:0a:04:bb:fb:63:8c:e5:03:
ae:91:22:88:84:df:95:1d:0f:a9:a5:a5:d0:74:14:
34:92:63:69:2e:df:5d:22:76:45:d6:36:5e:9a:d2:
2c:b4:28:85:e0:1c:b8:51:9b:ae:60:c3:17:34:52:
53:f5:d4:40:b3:66:8a:9f:09:c2:af:3c:72:aa:d3:
16:0e:5b:bd:a1:b5:f9:c9:08:5e:07:7c:17:87:ae:
e0:bd:30:ac:96:74:5c:db:08:d7:ea:db:38:fa:6c:
f5:3b:3e:4c:a8:e1:26:2d:61:a4:a2:ee:09:d9:b8:
63:c8:9c:a9:c7:93:ef:e0:da:71:80:f4:26:b4:68:
28:e8:96:5b:3b:53:0c:7f:48:1f:b5:02:31:b5:65:
74:29:2b:d0:07:81:43:d6:60:c9:1f:10:d5:9a:df:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D8:83:FC:25:5F:22:02:08:50:59:92:90:20:22:99:A6:82:74:60
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:dd:76:25:88:91:c2:13:aa:59:85:e2:c3:c2:40:c1:3b:bd:
b4:ad:97:fa:f0:8c:b1:a8:59:b4:10:72:8a:98:8d:f6:a2:55:
c8:e2:c6:af:2f:8a:9f:2e:68:7c:3f:e3:62:eb:d3:8d:f5:3c:
ef:11:66:e3:52:3a:50:60:9f:c8:ba:c5:09:76:dd:05:9f:98:
cf:9d:71:19:dd:64:a6:75:cd:a9:0b:b2:94:4e:50:df:8e:87:
e3:4c:f3:f4:f5:64:fb:a3:5b:f5:0d:ff:23:d3:16:b2:38:7a:
12:85:13:e9:e5:ec:09:d0:9b:49:c6:8b:7a:cd:f6:9a:9a:39:
ee:0a:94:88:6a:91:82:67:b7:42:29:51:1a:98:99:5f:f6:fe:
74:82:e9:1d:b1:4b:0e:b4:53:ac:eb:42:fa:53:1c:a2:df:d4:
ec:52:6c:12:4a:8b:88:55:0e:9a:34:35:42:7f:1e:a8:9d:90:
b1:36:18:ff:b0:c7:7b:4d:89:35:bc:bf:38:ea:22:51:0c:59:
26:43:8e:41:be:64:46:0b:fb:f3:1c:f9:e4:e2:af:97:f3:82:
72:99:35:32:c6:31:c9:c0:fd:07:6f:32:2f:71:b8:f9:34:e8:
8b:92:0e:6b:20:36:5e:57:96:0d:37:40:5a:1a:bc:60:7a:a8:
79:c5:7b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 06:28:02 2026 by rpki-client