Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: qh7orwIrdJAwkSfJTS3GN1/quTrCP9rDLBEj5iYc2ww=
Subject key identifier: 9D:1C:2E:66:56:D7:08:B9:F7:37:FA:13:C5:67:5C:E4:C2:F0:9E:B0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019E4DD8474FB7A2C01F80924348CF8C4040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 14E8
Signing time: Fri 22 May 2026 04:01:20 +0000
Manifest this update: Fri 22 May 2026 04:01:20 +0000
Manifest next update: Sat 23 May 2026 04:01:20 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: oSUWUYwdL11TMkoo3A8WCnJkVtFFLZBUZZ/7JXsGYIY=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4d:d8:47:4f:b7:a2:c0:1f:80:92:43:48:cf:8c:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 22 04:01:20 2026 GMT
Not After : May 23 04:01:20 2026 GMT
Subject: CN=9d1c2e6656d708b9f737fa13c5675ce4c2f09eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:a4:7c:64:83:8d:64:0d:33:e8:7d:4e:b8:
4a:5e:54:1e:41:54:36:12:51:82:05:a8:e7:d0:55:
1b:68:ad:ac:b7:c4:5e:38:ec:30:15:e8:e5:ac:52:
75:2e:d7:51:2c:06:43:10:5e:33:ce:92:6e:f1:ef:
69:f3:91:74:dd:29:97:79:1c:48:ad:01:ce:81:a3:
97:1a:d0:a1:65:c3:91:a9:c3:f1:48:56:6b:2e:fa:
21:cb:78:68:de:6d:d5:ad:6b:35:84:45:3b:09:fd:
07:a3:79:37:3e:0e:e2:74:f8:34:e1:d1:2f:bb:fe:
6a:22:96:82:5b:1e:89:29:02:39:9d:fb:27:7c:9a:
a8:5a:c4:3f:bb:f1:9e:27:3b:1b:f0:cb:06:99:13:
d5:3d:31:14:81:33:ec:1e:07:1e:22:f9:11:f7:12:
aa:d7:71:4c:dc:14:4f:11:68:8f:45:78:de:03:5b:
0b:1b:43:39:06:83:7b:2d:31:6d:5d:9f:3f:f0:ad:
36:c1:1a:25:9d:94:89:b6:c7:59:e9:b9:37:9b:96:
7c:32:fb:09:d3:a7:8b:80:06:1d:aa:4f:70:98:f6:
28:75:30:c9:26:00:90:04:29:b3:4c:77:87:e1:8f:
ed:27:bf:fa:a2:9f:46:34:d7:ef:2a:dd:75:62:88:
c6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1C:2E:66:56:D7:08:B9:F7:37:FA:13:C5:67:5C:E4:C2:F0:9E:B0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:54:94:20:90:67:c8:e8:58:79:42:90:72:95:9a:ea:80:22:
e2:f2:a9:71:dc:b4:22:d5:01:9b:ad:d0:16:13:49:f5:cf:70:
fd:be:f5:56:ea:6e:b8:9a:af:93:af:c2:45:da:7d:0a:2d:86:
16:0a:97:a2:fe:1b:0f:6a:bc:c0:e2:02:ec:f0:c0:c1:b0:7c:
11:41:d6:81:a1:f4:67:6f:79:0a:a9:3b:ee:7e:82:d7:87:04:
49:84:89:2e:41:44:b5:a5:25:b9:c1:27:89:72:8d:48:03:9c:
45:45:c4:b8:8a:23:89:7e:d4:d9:a8:ab:08:8f:3c:3f:27:6c:
4f:c8:40:ce:57:1e:ee:f7:a0:05:dd:90:45:91:f3:2c:08:ea:
3c:81:c6:73:b9:f2:67:87:7e:11:98:41:7b:ba:c7:83:cc:06:
db:9c:cd:54:88:1f:27:06:ad:5f:7f:0c:bf:3b:5c:95:20:35:
b6:ab:1e:2d:74:43:18:80:53:fb:ce:4d:16:8c:d8:c1:b9:24:
4d:4f:b1:74:89:2f:e0:81:90:c9:d8:5c:45:ff:4f:cb:9f:79:
19:8b:d0:11:ee:2a:ae:d6:c9:a4:66:00:67:37:5b:85:9c:82:
0f:79:99:30:c9:f7:8c:79:48:c7:5c:69:36:0a:8e:ce:06:f4:
ea:bc:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 07:52:42 2026 by rpki-client