Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: sEHbf/NeDaLug9v2nRgA7+nOqFSPqERqCzwNF2/fJoY=
Subject key identifier: C2:DE:3C:F3:F4:EF:6F:B1:5A:43:93:80:8F:59:B5:F4:7D:83:9E:DA
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019F67CC220373EE5F74955E02AD7A027972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 157A
Signing time: Wed 15 Jul 2026 22:00:59 +0000
Manifest this update: Wed 15 Jul 2026 22:00:59 +0000
Manifest next update: Thu 16 Jul 2026 22:00:59 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: klNSHBc7FdH3OdiXL1hIG+A6w8ZKTp6ETpGr9S2iOAA=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:cc:22:03:73:ee:5f:74:95:5e:02:ad:7a:02:79:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 15 22:00:59 2026 GMT
Not After : Jul 16 22:00:59 2026 GMT
Subject: CN=c2de3cf3f4ef6fb15a4393808f59b5f47d839eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:51:f3:8e:7c:e7:dd:4c:5d:41:e0:1d:81:
06:b5:d6:6a:76:6e:4d:b4:a8:16:74:b9:cb:03:f0:
96:c8:95:f0:44:47:64:bb:44:72:f8:07:2f:d4:ea:
ca:7a:62:30:08:a1:20:10:68:cd:0f:2b:f9:50:d1:
e3:18:c3:6f:c6:d8:0a:a1:77:d7:ed:66:26:7f:e0:
1e:df:5e:77:b7:cf:c0:9e:fa:b3:88:2d:28:8e:e0:
55:e3:3c:90:f7:fd:c3:d2:05:be:fb:cc:a4:c7:9c:
3a:36:5e:ef:71:37:d7:3c:7c:95:b4:10:d7:a1:1b:
72:11:f4:84:d0:a4:38:b1:c7:cc:90:18:1a:d3:a3:
50:29:f7:32:7c:a7:f5:dd:a7:fc:44:cd:48:b1:8e:
c5:59:8e:a7:cc:1d:82:72:de:f4:92:ce:94:25:0f:
32:a3:82:ea:56:ce:e0:ad:eb:63:7b:ac:8b:6a:20:
65:87:90:a0:1f:73:9f:7f:07:11:bb:8c:a3:9f:95:
0d:9e:99:a6:15:8d:3b:74:ca:1c:f4:a1:3b:0d:1f:
08:31:8d:09:9e:fd:95:c4:d4:c2:38:9a:b6:46:54:
92:b2:0d:d3:04:24:4e:4f:4e:5b:04:97:43:82:d7:
7f:ef:fc:c4:21:36:cc:0f:5f:a0:14:31:ae:ad:d2:
fd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DE:3C:F3:F4:EF:6F:B1:5A:43:93:80:8F:59:B5:F4:7D:83:9E:DA
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:64:0f:45:8e:e8:40:3f:f8:73:37:42:b2:3b:4b:00:a1:a0:
92:f2:27:17:29:56:8b:3f:a3:e8:75:97:dc:0f:e4:99:ec:e6:
4a:5d:16:10:24:e0:18:e2:2f:10:ff:6c:b0:f2:c6:d1:d1:dd:
1a:9c:32:b6:ac:35:3f:cd:af:23:aa:58:9d:a7:4d:f8:05:2d:
ab:8f:b7:d5:a6:2b:bd:bf:46:66:e1:d4:55:14:83:1a:4f:77:
08:88:83:d5:4e:84:74:f9:25:5d:09:10:2c:72:73:4f:92:9f:
9c:d3:53:40:9f:6d:ca:19:6c:d5:c5:0e:f5:84:b0:b6:9b:0d:
b8:1e:4b:5c:b9:20:36:c9:a5:0b:c9:ba:62:8e:e2:18:d6:6b:
82:70:c9:c5:1a:f6:3a:0e:33:95:bb:72:2e:7c:28:a6:6d:d0:
d8:63:0d:d6:37:90:5f:4d:d1:1f:bf:4b:79:c7:ff:68:5a:8a:
7d:4a:21:77:f4:ec:b9:2e:36:f0:76:dc:12:a8:fd:91:f4:82:
6f:40:dc:cf:55:81:fe:b8:1a:25:49:fe:19:68:49:48:84:f7:
ef:f6:75:08:4d:e4:59:98:d6:a5:d8:57:ac:5d:30:20:29:6c:
09:6d:a5:bb:38:8a:a9:c0:7e:3f:5e:0c:85:6b:f5:b4:fa:e6:
79:cd:a6:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9nzCIDc+5fdJVeAq16AnlyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjYwNzE1MjIwMDU5WhcNMjYwNzE2MjIwMDU5WjAzMTEwLwYDVQQD
EyhjMmRlM2NmM2Y0ZWY2ZmIxNWE0MzkzODA4ZjU5YjVmNDdkODM5ZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvFR8458591MXUHgHYEGtdZqdm5N
tKgWdLnLA/CWyJXwREdku0Ry+Acv1OrKemIwCKEgEGjNDyv5UNHjGMNvxtgKoXfX
7WYmf+Ae3153t8/AnvqziC0ojuBV4zyQ9/3D0gW++8ykx5w6Nl7vcTfXPHyVtBDX
oRtyEfSE0KQ4scfMkBga06NQKfcyfKf13af8RM1IsY7FWY6nzB2Cct70ks6UJQ8y
o4LqVs7gretje6yLaiBlh5CgH3OffwcRu4yjn5UNnpmmFY07dMoc9KE7DR8IMY0J
nv2VxNTCOJq2RlSSsg3TBCROT05bBJdDgtd/7/zEITbMD1+gFDGurdL9iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLePPP072+xWkOTgI9ZtfR9g57aMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2QPRY7o
QD/4czdCsjtLAKGgkvInFylWiz+j6HWX3A/kmezmSl0WECTgGOIvEP9ssPLG0dHd
Gpwytqw1P82vI6pYnadN+AUtq4+31aYrvb9GZuHUVRSDGk93CIiD1U6EdPklXQkQ
LHJzT5KfnNNTQJ9tyhls1cUO9YSwtpsNuB5LXLkgNsmlC8m6Yo7iGNZrgnDJxRr2
Og4zlbtyLnwopm3Q2GMN1jeQX03RH79Lecf/aFqKfUohd/TsuS428HbcEqj9kfSC
b0Dcz1WB/rgaJUn+GWhJSIT37/Z1CE3kWZjWpdhXrF0wIClsCW2luziKqcB+P14M
hWv1tPrmec2mqA==
-----END CERTIFICATE-----
Generated at Thu Jul 16 05:51:52 2026 by rpki-client