Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: KjO9XaUvSAUq7wnHJ51BsPuAYUVAzLKl6kA7eAQmgU0=
Subject key identifier: E7:E1:1E:2A:50:3E:7F:11:72:C0:D8:85:08:C0:3D:D0:5F:75:A9:98
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019DBD011234DF03808BA58871ED41AADAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 149D
Signing time: Fri 24 Apr 2026 01:00:57 +0000
Manifest this update: Fri 24 Apr 2026 01:00:57 +0000
Manifest next update: Sat 25 Apr 2026 01:00:57 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: jV1STMBiALXj0sgr8gk26IXwRkpkRLIHcyBxfbYJsgM=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bd:01:12:34:df:03:80:8b:a5:88:71:ed:41:aa:da:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 24 01:00:57 2026 GMT
Not After : Apr 25 01:00:57 2026 GMT
Subject: CN=e7e11e2a503e7f1172c0d88508c03dd05f75a998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:4b:32:ee:79:d9:50:f6:f2:ce:eb:06:d2:
21:f3:9b:7b:e2:51:44:2c:31:f9:0b:93:8d:56:b2:
3b:c4:c3:e5:b6:68:fe:f2:d0:12:f6:f5:de:6f:58:
0e:5d:51:ca:24:55:5f:83:58:c6:d2:be:12:16:80:
0a:1d:c7:31:0d:4b:bc:ba:96:aa:51:da:3c:6a:11:
25:37:cd:1c:20:ca:71:59:5b:5c:00:9d:e6:a0:0f:
4c:8e:c6:c4:d2:2e:d1:1a:05:8d:f5:13:a8:58:1d:
7f:6d:a7:31:3d:61:07:b8:0f:c5:90:f8:5c:20:65:
bf:43:f9:78:a4:fe:9d:14:a2:57:c9:fc:92:b9:f8:
e7:70:12:16:53:41:a1:c7:b0:3b:dd:3e:30:16:6d:
0d:7e:0a:9e:69:26:e4:3f:e5:bf:6f:f0:69:fe:1a:
95:6d:08:bf:e3:19:1e:a7:bb:b9:7f:9e:84:c5:a3:
40:0d:01:df:db:8c:c1:6d:e0:89:d8:7b:eb:a9:99:
c0:39:d3:4a:4e:3a:2c:2a:eb:52:0c:92:21:10:7c:
cf:55:f2:c6:4b:6c:87:bf:ba:c8:98:d5:05:37:ce:
a4:28:0f:71:26:67:9b:e5:20:6a:1e:c8:bb:df:b3:
27:89:3a:cc:a1:d5:8b:e5:3a:76:c4:c5:e8:85:ce:
31:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E1:1E:2A:50:3E:7F:11:72:C0:D8:85:08:C0:3D:D0:5F:75:A9:98
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a8:ea:24:e0:61:7c:19:3b:9a:e9:d8:2a:da:c2:52:30:7e:
8b:46:09:c0:86:d1:9d:4b:97:40:42:a7:74:61:69:5d:fe:a3:
be:10:17:a0:23:75:fe:e6:31:b8:6b:e5:a7:e9:77:84:dc:00:
fb:be:ad:15:47:16:9c:19:89:fc:7a:7a:a6:93:93:b5:03:45:
82:cf:34:a8:39:99:19:a6:e9:e7:e3:8c:1e:2e:0e:8a:b2:c6:
cd:05:7c:1a:34:76:36:66:62:58:3a:34:ff:c4:90:4e:bb:c8:
6f:52:0a:7f:12:e7:c8:0d:0e:51:ca:7f:c7:ac:09:02:66:41:
dd:09:9c:0b:4c:ae:46:c2:ec:00:21:e4:4a:f2:4b:14:9e:01:
22:26:d6:4f:2d:49:31:62:8d:b5:7d:40:52:af:b4:b7:73:b0:
66:c8:35:64:15:88:23:e0:06:6e:44:35:52:32:69:77:90:33:
ab:4a:95:f7:a7:36:2a:3a:33:a5:6c:15:d1:76:f0:53:63:3e:
04:61:d6:93:4c:fc:0a:df:6c:cc:5a:3b:0f:ba:e4:49:42:68:
cd:88:52:35:e8:03:fe:c8:75:60:70:16:bf:83:76:c8:11:b8:
f5:27:84:48:03:75:d9:4f:b3:b4:99:55:ed:11:b5:98:f2:8f:
49:46:e7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 12:33:34 2026 by rpki-client