Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: QDWx67lgpKMqYVKGbcfMvBl594F0wMJNwqPWkibGtUI=
Subject key identifier: F9:AA:89:88:FF:E8:62:68:7E:E3:A8:E7:C5:A9:04:92:B8:61:EE:34
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019F5858F7352B597A36F6C04E96F6F07D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1572
Signing time: Sun 12 Jul 2026 22:00:53 +0000
Manifest this update: Sun 12 Jul 2026 22:00:53 +0000
Manifest next update: Mon 13 Jul 2026 22:00:53 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: Xrsx0J0BGpbFVW1iw0InNTuHs9tKEOj1mjcA9EWh2s8=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:58:58:f7:35:2b:59:7a:36:f6:c0:4e:96:f6:f0:7d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 12 22:00:53 2026 GMT
Not After : Jul 13 22:00:53 2026 GMT
Subject: CN=f9aa8988ffe862687ee3a8e7c5a90492b861ee34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:99:ac:cc:c9:06:a7:78:d0:de:0f:84:11:
01:89:b0:7b:26:ac:a3:b5:6a:dd:d4:44:f0:8f:24:
30:6a:95:3d:a4:e7:d2:cc:23:8c:b4:ed:50:15:36:
74:86:ca:d1:72:8a:0e:c4:8b:5c:29:de:27:6f:f3:
ee:e2:6e:b8:50:e8:ba:db:42:d7:63:e4:69:b8:29:
74:04:a5:56:06:0f:79:37:d7:89:26:40:de:26:ca:
67:43:7c:3b:5e:5d:55:19:3f:4b:b9:50:5e:7e:8f:
af:5f:d8:38:f7:2c:00:5d:ec:3f:9f:53:19:00:9e:
8b:3a:1a:9c:1c:62:b6:36:cf:7f:d3:78:7a:d6:ae:
29:a8:1c:34:bf:61:2c:fd:6e:4c:3a:8c:89:79:71:
7e:8e:be:31:14:57:3e:83:80:b8:1b:e7:52:15:de:
91:5b:1f:c9:0f:44:d0:1b:98:af:3f:92:d7:30:1e:
53:59:a3:00:2f:06:2f:b6:39:01:8a:c5:a8:f9:73:
e6:40:2c:82:73:e7:8d:49:4c:36:f2:9d:07:6c:52:
37:36:3b:a2:5c:1a:f3:b8:6c:95:c5:bf:1e:4e:7f:
f5:ca:fb:50:bd:cc:9b:67:fe:54:bb:f3:74:d2:ea:
0d:aa:66:b0:a8:78:1c:61:17:85:3c:7f:89:5b:8e:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AA:89:88:FF:E8:62:68:7E:E3:A8:E7:C5:A9:04:92:B8:61:EE:34
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:2d:95:52:bf:59:e1:1f:91:56:32:97:7c:4e:c8:d3:69:99:
62:08:14:1d:51:54:31:4f:7b:ea:54:df:71:1f:d3:f3:07:dd:
d9:a2:31:8c:9a:41:2b:2c:26:72:02:2f:c5:b1:af:db:09:85:
90:1e:c6:8c:76:e2:b0:3c:dd:a9:46:85:d8:63:63:91:5f:2a:
01:bb:bc:fa:5c:0f:9e:08:42:4c:2d:64:29:0b:ba:4f:78:a6:
cf:87:f0:b8:ab:ce:3a:65:eb:0d:87:ea:46:31:19:e0:2c:61:
c8:5b:5a:05:33:4c:98:af:3b:d4:c4:bb:aa:0c:9f:d3:2a:36:
92:a8:7c:52:ba:c5:f1:6b:4b:d9:11:76:ac:34:b1:f6:e3:e4:
ac:9c:bd:53:26:36:6d:47:19:e3:81:a8:ea:3c:9a:f9:d0:7f:
89:3e:89:aa:e9:69:88:21:0c:0b:3c:10:e1:fd:7c:f2:d8:ab:
cd:e0:2b:f3:08:d9:35:00:70:67:09:27:1c:41:6d:39:06:40:
f5:51:c4:76:f2:bb:be:fa:81:1c:cb:7b:10:2c:fe:ae:22:7b:
07:09:73:05:92:1b:61:ae:89:8b:d3:22:c7:3d:67:be:11:d7:
cf:d1:cf:ff:a3:e0:48:49:92:90:a4:6d:86:2c:6c:1f:1a:6d:
54:78:0e:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9YWPc1K1l6NvbATpb28H0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjYwNzEyMjIwMDUzWhcNMjYwNzEzMjIwMDUzWjAzMTEwLwYDVQQD
EyhmOWFhODk4OGZmZTg2MjY4N2VlM2E4ZTdjNWE5MDQ5MmI4NjFlZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtleZrMzJBqd40N4PhBEBibB7Jqyj
tWrd1ETwjyQwapU9pOfSzCOMtO1QFTZ0hsrRcooOxItcKd4nb/Pu4m64UOi620LX
Y+RpuCl0BKVWBg95N9eJJkDeJspnQ3w7Xl1VGT9LuVBefo+vX9g49ywAXew/n1MZ
AJ6LOhqcHGK2Ns9/03h61q4pqBw0v2Es/W5MOoyJeXF+jr4xFFc+g4C4G+dSFd6R
Wx/JD0TQG5ivP5LXMB5TWaMALwYvtjkBisWo+XPmQCyCc+eNSUw28p0HbFI3Njui
XBrzuGyVxb8eTn/1yvtQvcybZ/5Uu/N00uoNqmawqHgcYReFPH+JW477vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmqiYj/6GJofuOo58WpBJK4Ye40MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyi2VUr9Z
4R+RVjKXfE7I02mZYggUHVFUMU976lTfcR/T8wfd2aIxjJpBKywmcgIvxbGv2wmF
kB7GjHbisDzdqUaF2GNjkV8qAbu8+lwPnghCTC1kKQu6T3imz4fwuKvOOmXrDYfq
RjEZ4CxhyFtaBTNMmK871MS7qgyf0yo2kqh8UrrF8WtL2RF2rDSx9uPkrJy9UyY2
bUcZ44Go6jya+dB/iT6JqulpiCEMCzwQ4f188tirzeAr8wjZNQBwZwknHEFtOQZA
9VHEdvK7vvqBHMt7ECz+riJ7BwlzBZIbYa6Ji9Mixz1nvhHXz9HP/6PgSEmSkKRt
hixsHxptVHgOiA==
-----END CERTIFICATE-----
Generated at Mon Jul 13 04:49:13 2026 by rpki-client