Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: ZZi0FyAniF2ArCjWvPJkEv0DePxS+/rwKCboBe1NHlI=
Subject key identifier: 9B:C8:A5:F8:14:C7:18:AB:24:41:98:D6:D4:F3:A2:6D:5A:57:DB:9C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019F1A8CB0075384B09BBD1EEA485FA946D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1552
Signing time: Tue 30 Jun 2026 22:00:55 +0000
Manifest this update: Tue 30 Jun 2026 22:00:55 +0000
Manifest next update: Wed 01 Jul 2026 22:00:55 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: 6vrI63KeKjoCmn9LrichaN2Uhul28uN/q6SlKrDhUzE=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:8c:b0:07:53:84:b0:9b:bd:1e:ea:48:5f:a9:46:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 30 22:00:55 2026 GMT
Not After : Jul 1 22:00:55 2026 GMT
Subject: CN=9bc8a5f814c718ab244198d6d4f3a26d5a57db9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:f7:16:64:82:5c:52:db:6d:c4:6b:13:c7:
8d:09:d6:58:5d:54:63:db:e9:7a:f4:2c:fd:fd:a2:
6a:f0:66:db:b5:e8:2d:ed:cc:74:72:f6:5d:2f:4a:
c3:ee:ce:c4:f5:72:61:d3:6c:1d:f3:13:17:61:b5:
cd:8c:1f:c8:48:1f:06:64:28:32:fb:ef:8f:30:66:
87:a1:b0:bb:92:5c:99:83:b3:12:da:b1:bb:44:29:
5d:fa:ec:d1:6c:f3:70:18:22:b6:a6:9c:22:bc:30:
2e:5b:82:4b:55:15:a4:46:d9:1c:5d:dc:5b:be:ef:
2b:a2:ce:84:a9:55:9a:d1:6c:6c:d0:44:1f:60:22:
cb:50:6f:ff:78:8c:3e:e9:fa:55:03:05:91:16:2e:
1c:16:51:9e:51:f1:d3:7d:73:34:ee:f9:e2:eb:0e:
0a:a5:fe:74:32:88:ee:29:e4:27:f2:38:9c:d5:cc:
12:89:1a:cf:b0:45:47:4c:70:15:15:b7:d8:11:e4:
40:1d:27:ac:da:87:91:c6:c4:81:25:a3:30:b1:aa:
a4:46:87:0f:d9:d5:ad:04:23:42:2c:44:a0:b4:2f:
b9:50:a8:c0:17:46:40:0f:d0:42:dc:ec:52:9b:f5:
dc:4d:1f:0b:d4:68:f7:ef:5c:47:24:11:ba:22:6e:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C8:A5:F8:14:C7:18:AB:24:41:98:D6:D4:F3:A2:6D:5A:57:DB:9C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b6:d9:6b:e3:d5:ad:73:e0:17:32:ac:eb:f7:92:2f:41:bd:
a5:17:ff:66:23:88:4e:25:53:17:c9:19:06:70:43:bb:54:bf:
1c:65:2f:f4:b1:8c:c5:99:bd:3c:78:54:b2:56:30:62:a9:ba:
14:20:e0:6e:fe:1e:75:e6:68:ae:82:6c:d4:28:f7:a2:b2:49:
d6:2f:99:22:62:03:23:4d:46:b7:39:28:fb:39:ae:24:dd:35:
3a:8a:4f:8c:39:73:c6:e0:fa:6d:d5:f1:d3:49:1b:43:34:7c:
0d:1b:71:35:4a:59:be:51:37:32:b5:67:78:23:40:3a:5e:4b:
81:c0:99:22:fd:8a:4d:43:77:d1:c1:19:24:2f:23:03:5a:92:
1b:3e:31:46:94:6c:f2:3b:a9:41:5e:fc:b3:93:93:30:f2:4f:
9b:ff:96:4f:fe:ea:74:5c:4e:42:e4:10:43:58:fb:87:75:b9:
9d:16:2c:8a:16:a6:f4:ac:a7:0a:46:82:e1:99:d9:38:66:87:
50:58:99:a4:36:17:39:1b:bd:89:d4:01:08:c1:b5:11:c3:0e:
f6:4d:79:c5:c5:93:9f:02:11:0e:b3:93:3f:6e:98:16:af:ec:
37:e1:2e:4b:7c:b3:6c:df:83:0f:b9:ac:fe:80:60:ae:ca:5f:
9d:a6:14:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 01:42:35 2026 by rpki-client