Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: bxEsrVol36DoGPd7oEj4MksrIsbCYh6V4MwI+7dnUpM=
Subject key identifier: 67:DA:44:C3:5A:70:EC:61:A2:7A:C4:76:61:B2:B6:A3:5E:EC:F8:62
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019D4CFF34FE6705128A8A8467F07EE8186A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1463
Signing time: Thu 02 Apr 2026 07:01:26 +0000
Manifest this update: Thu 02 Apr 2026 07:01:26 +0000
Manifest next update: Fri 03 Apr 2026 07:01:26 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: mKep7cM7DpavRHjNJqxmht5hctupRnwiFE9uR8hflVI=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Apr 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4c:ff:34:fe:67:05:12:8a:8a:84:67:f0:7e:e8:18:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 2 07:01:26 2026 GMT
Not After : Apr 3 07:01:26 2026 GMT
Subject: CN=67da44c35a70ec61a27ac47661b2b6a35eecf862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:f3:35:38:31:32:b9:ab:18:81:eb:22:91:
01:4b:91:65:ee:56:50:8a:78:78:2e:2f:f6:8e:d2:
eb:c5:05:2c:ad:74:81:39:7e:00:7e:0d:28:c8:2a:
1b:0f:9d:b3:9f:f3:e9:57:3f:03:27:76:33:c5:d4:
6b:e9:30:15:f1:4c:16:6a:e7:92:ef:ad:08:bb:d5:
67:bc:5b:08:98:9c:e2:a2:40:54:3b:5b:df:a9:e0:
77:0f:41:15:46:28:01:6a:c9:97:e6:74:5b:e0:cb:
9c:79:06:01:77:7b:21:02:6b:55:e6:5c:7d:3d:f0:
a2:92:1a:ea:e7:45:35:57:fd:e3:76:9d:95:eb:1e:
5d:6a:3a:9f:af:8a:46:14:01:01:92:06:6c:d5:2b:
f7:2b:47:82:13:b6:1f:c1:07:75:93:13:40:06:fc:
17:21:62:eb:78:5a:e5:b9:e8:ad:23:b2:0e:28:59:
ff:3f:e2:a8:f9:8b:91:da:74:8e:72:03:af:1e:b2:
28:86:74:a1:33:d7:a5:60:a7:ab:ab:1f:63:22:29:
7c:0c:28:b5:01:4e:8d:7a:cb:e3:a8:4e:8d:eb:ad:
aa:43:50:07:a5:f4:0e:6d:f9:b8:81:bc:54:96:db:
ce:cb:a0:21:fd:97:c0:ae:37:ae:1c:78:55:55:74:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DA:44:C3:5A:70:EC:61:A2:7A:C4:76:61:B2:B6:A3:5E:EC:F8:62
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e8:a1:1f:b0:68:5c:f3:5e:86:dd:76:11:7c:bb:33:06:cd:
b6:02:48:6b:b6:e3:5a:c8:cf:47:f2:00:20:3f:b8:18:40:e8:
ff:45:47:f2:69:be:a3:50:ea:c1:39:fd:a5:0b:54:2f:73:97:
11:50:89:8d:59:0a:8e:8f:31:d1:9f:22:2f:b5:04:69:3b:8c:
8b:55:91:94:df:11:a4:b5:09:99:7a:2b:d1:c0:d8:c5:76:2c:
2a:74:65:69:93:84:55:18:e0:4d:77:13:8f:f6:d9:64:8d:d8:
6a:6d:a2:2a:9c:21:df:b4:59:63:56:e4:56:01:21:ec:7b:f3:
d2:38:c0:97:2a:2f:68:0e:46:c7:2a:9a:c2:1b:c0:26:0b:0a:
79:a4:fd:4c:f5:f4:40:36:15:ec:9c:a9:c3:41:80:d8:a4:24:
8a:62:7f:5e:0d:1f:58:28:12:45:48:c2:0f:ba:b6:98:64:6b:
89:d0:3f:f3:8a:75:79:7f:99:fa:39:72:50:f6:b8:63:df:2e:
7f:27:b9:d3:7e:2f:d8:3e:b3:4b:1b:1b:d1:37:74:6c:9f:62:
90:55:f4:1b:9a:98:d1:4e:54:1b:c1:53:0c:75:13:3a:44:63:
b8:fc:c5:0e:55:b6:07:e9:1c:4b:52:0e:dc:67:f9:8c:1c:a8:
12:52:30:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 15:51:42 2026 by rpki-client