Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: 7UGobfDc04jeWB2gj/uiXaE1Y4rWfFDj6bxh7pAKNws=
Subject key identifier: E4:1F:2E:F1:54:FC:0D:E4:8E:8C:5B:10:3E:D0:E4:B4:D9:16:E3:E3
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01A0B207AF0F10AA8E8F72A1E2DAECF6ECCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1625
Signing time: Fri 18 Sep 2026 01:00:43 +0000
Manifest this update: Fri 18 Sep 2026 01:00:43 +0000
Manifest next update: Sat 19 Sep 2026 01:00:43 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: GOWiH+22F7AeVXSzg29ZE47zzhCRxDswDTZ2dt9hQuw=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 22:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b2:07:af:0f:10:aa:8e:8f:72:a1:e2:da:ec:f6:ec:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 18 01:00:43 2026 GMT
Not After : Sep 19 01:00:43 2026 GMT
Subject: CN=e41f2ef154fc0de48e8c5b103ed0e4b4d916e3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:6d:03:bd:87:2e:d9:c5:3b:72:a3:d6:6d:
ff:c8:d1:14:11:46:3e:0e:f8:6a:7e:76:dc:b7:2a:
fe:0d:6e:bf:98:20:dd:19:a7:9a:6f:91:2a:ce:72:
45:bd:58:32:80:65:d9:7d:40:61:d6:ae:cf:92:fe:
5f:8a:3e:5f:15:54:7c:61:37:dd:1a:af:43:24:6d:
4f:76:06:6f:d3:9d:4d:24:bd:45:9c:08:a9:21:30:
b5:bf:1e:3e:3a:ab:51:07:64:5c:95:70:11:a8:15:
3c:ef:e2:e5:5d:a7:27:89:1e:24:e0:c4:07:e3:91:
2c:eb:fe:d7:1a:de:d2:31:13:53:31:69:4e:19:79:
2a:eb:2e:7d:b1:a7:0c:7a:b6:96:69:ed:ad:03:49:
bc:b8:2f:6c:4a:f0:bd:a6:51:aa:19:02:67:67:a1:
ba:c7:4e:e2:f6:62:ae:5e:af:f1:75:a1:1f:50:63:
1c:51:db:51:e7:3a:7b:7d:d7:21:17:e7:c1:66:76:
e6:a4:f1:21:0f:5b:f6:e6:af:9f:4d:7f:b5:f8:27:
07:a4:4f:4e:28:58:a4:db:54:d6:4b:0c:27:80:dd:
18:d5:e9:fb:c7:95:61:36:73:29:68:91:0a:db:20:
0f:8f:32:7f:94:1e:d9:0b:7f:f9:fa:5f:93:78:1d:
fc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1F:2E:F1:54:FC:0D:E4:8E:8C:5B:10:3E:D0:E4:B4:D9:16:E3:E3
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:bf:63:57:d9:ca:63:22:96:54:55:4c:d3:34:d4:62:00:5b:
fe:00:15:d2:3d:f7:f4:4a:19:5a:cf:f8:35:e6:79:91:6f:6b:
3f:72:44:02:6b:dc:d7:90:ce:49:97:27:a0:ca:08:54:78:04:
36:85:2f:c4:ba:97:2c:12:6d:63:49:87:11:fe:94:eb:c3:ab:
47:12:94:67:15:d2:79:4d:8c:c9:4b:91:ce:bf:71:03:2f:e8:
b6:1d:3e:f1:41:c7:8a:44:f4:8f:8c:6f:33:e9:dd:5c:76:d3:
65:c8:e2:79:44:03:21:43:a8:78:2b:1e:b5:1c:fa:ea:e9:76:
f9:d4:23:44:e0:e2:32:d6:f9:9f:ec:24:38:31:ce:31:dd:63:
e7:ec:0e:a4:3b:0b:7f:89:26:6d:b7:fe:2d:ee:07:56:f2:4c:
7f:88:83:72:11:7d:6a:9b:69:d8:34:69:7f:9a:0d:e3:7c:b6:
02:eb:8e:5b:60:c4:63:61:0e:17:e4:aa:c7:e3:2e:ed:8d:65:
14:32:79:ec:f3:75:7e:55:d3:5d:a3:64:97:5e:3b:27:1e:0d:
66:15:fb:17:03:58:c4:52:fb:49:a2:82:46:31:8b:b2:34:d5:
ae:6a:74:c9:11:5d:09:c6:50:36:c8:2a:fc:d3:82:43:23:90:
b9:11:eb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 02:30:46 2026 by rpki-client