Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: mhfrSW4zXC6w9r7aYEGQjlpX8AjDcHpfZhot1qCiTgY=
Subject key identifier: 78:49:67:9E:23:06:72:27:A6:92:C9:8C:A7:39:F2:60:79:A9:0F:62
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019D7F351CA2FD03BF63EB7AC3FB2BD3AFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 147D
Signing time: Sun 12 Apr 2026 01:01:20 +0000
Manifest this update: Sun 12 Apr 2026 01:01:20 +0000
Manifest next update: Mon 13 Apr 2026 01:01:20 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: kHeWryDMBHV8Qvc1KN6EPguwDlZz1K8MbhTXpn8/VPM=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7f:35:1c:a2:fd:03:bf:63:eb:7a:c3:fb:2b:d3:af:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 12 01:01:20 2026 GMT
Not After : Apr 13 01:01:20 2026 GMT
Subject: CN=7849679e23067227a692c98ca739f26079a90f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:31:0a:0c:18:98:d6:1d:cf:f0:9c:63:bd:
d0:68:ca:91:8a:1e:bb:cf:92:78:e4:59:86:bc:ab:
57:8b:00:6e:3c:95:e5:1e:87:20:ce:e3:27:f8:9c:
25:a2:55:ff:3e:6d:00:3d:27:70:b5:bc:6b:ea:29:
6f:0b:c6:51:dc:6f:6d:0d:a6:56:2a:3d:d4:7c:ae:
45:b2:1c:19:77:6f:67:59:90:5f:4b:e8:23:17:2b:
f5:99:54:8c:74:9a:0b:a9:3d:90:80:86:ea:59:68:
44:4e:c5:6d:22:ad:b3:90:6f:1f:98:c3:b4:8d:52:
3d:da:41:c2:c6:69:2e:33:5b:c5:17:6d:cb:28:ba:
32:e8:4b:9f:37:79:1e:15:de:27:16:5a:81:1f:e0:
86:26:c0:b4:66:1c:6f:c0:cd:ce:f9:56:69:15:0a:
76:d5:e6:a0:3a:a3:ff:2b:4f:1a:a2:99:4c:38:02:
3d:0e:18:72:09:f8:7c:e1:52:8b:8a:f5:c3:15:cf:
98:2b:8c:9f:b5:f5:40:d3:7e:29:16:6f:91:d4:b1:
fc:1c:42:bd:1e:be:02:c2:f2:1a:d1:42:dc:18:de:
01:f5:21:13:de:7e:5c:23:59:80:0d:a6:67:ae:86:
0a:4e:ce:c5:15:38:2b:86:50:db:9d:2c:8c:7d:d6:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:49:67:9E:23:06:72:27:A6:92:C9:8C:A7:39:F2:60:79:A9:0F:62
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:14:82:5c:79:79:13:4f:a6:a4:f2:50:e2:c9:78:ff:c8:46:
5b:50:12:e9:bc:e6:13:e1:ca:2c:5a:3d:db:a3:fa:88:ff:26:
4c:dc:de:65:12:8e:7e:42:27:8c:c0:1c:9c:3b:2a:ed:07:e4:
d6:a0:b1:06:00:66:25:d5:14:a5:bb:de:31:45:a3:b4:5c:c5:
ac:97:fd:9d:27:23:60:fe:4d:ab:f6:a7:33:50:73:89:81:fd:
64:a9:db:ce:f4:39:dc:d1:63:35:41:b9:43:a5:eb:d3:0c:ca:
bb:f4:4e:68:52:e3:ef:91:39:91:12:38:e4:5b:3b:8a:4f:3b:
d8:83:eb:bb:81:aa:a6:23:ca:96:8f:0d:a5:46:43:17:7e:46:
33:05:2a:6d:77:1f:43:da:a9:d9:bf:39:0d:56:c8:6a:49:23:
b0:02:aa:98:98:ae:c0:af:df:27:57:1c:63:02:e5:ad:0f:bf:
4c:f0:98:61:bb:8c:09:7f:e2:8f:dc:87:b0:98:b3:33:33:ce:
af:d3:d6:07:35:2d:55:1f:d5:a0:87:72:52:77:a3:7e:50:50:
8d:0f:10:13:b2:4a:bb:dc:b8:3b:33:f1:d3:28:ae:5f:5e:c1:
e3:e9:6b:ea:5e:3b:72:78:b4:0b:28:e4:67:02:16:25:28:72:
9d:45:42:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 07:22:33 2026 by rpki-client