Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: AOB8hUMBZWOTKSGYKNO554tN481K1dOKz4tRoLjnSpI=
Subject key identifier: 4D:07:F2:51:5B:65:D0:69:14:D6:50:8F:F7:A6:2B:AC:86:9F:29:28
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01A0724E1B0F03D8B2416A733B073520961A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1604
Signing time: Sat 05 Sep 2026 16:01:56 +0000
Manifest this update: Sat 05 Sep 2026 16:01:56 +0000
Manifest next update: Sun 06 Sep 2026 16:01:56 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: MYlyBqib17NngIb4ViOXK9ZSXhN6BzUVMNzNvuQsqzY=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 16:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:72:4e:1b:0f:03:d8:b2:41:6a:73:3b:07:35:20:96:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 5 16:01:56 2026 GMT
Not After : Sep 6 16:01:56 2026 GMT
Subject: CN=4d07f2515b65d06914d6508ff7a62bac869f2928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:45:4e:47:ef:8b:1f:fd:7a:83:fb:05:0f:
c4:e4:8c:ea:a8:d1:cc:c8:d8:f7:68:29:81:75:9b:
78:bf:31:01:95:a8:7c:40:a7:a1:0e:bd:4d:a9:28:
67:55:4d:93:32:c6:4d:e7:2c:74:c5:87:5d:54:3b:
dd:6a:57:fc:c4:8e:71:30:36:e2:fa:7b:4e:0b:ce:
ee:0b:ba:d8:8c:2b:8b:9d:40:46:20:56:49:81:7b:
3c:46:b5:4d:78:79:bc:2a:a7:43:e0:25:45:27:7c:
67:ae:ba:f3:3c:3d:e3:e8:66:28:c2:49:e2:44:80:
80:d0:0e:09:b8:94:e8:8f:64:fb:c6:66:c8:e9:d3:
45:b2:ea:4a:6e:d0:ee:ca:1b:f6:e6:a8:88:de:9e:
83:f4:3f:39:fc:69:d1:ed:09:f2:04:af:45:b6:0c:
fd:a8:44:95:93:13:f4:59:8c:2f:75:05:dd:a7:b4:
1c:14:a0:9c:a3:0f:f2:d1:f5:58:56:f2:47:76:8c:
4a:f5:6b:e1:8d:85:1c:58:9b:04:bb:ad:c9:03:c4:
5d:ef:5f:89:94:4a:33:5b:68:8f:d4:84:ae:08:12:
b6:75:08:31:a4:92:73:dd:81:6e:48:22:d9:c4:88:
37:13:dc:66:89:0c:66:6e:da:4e:18:9e:42:27:12:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:07:F2:51:5B:65:D0:69:14:D6:50:8F:F7:A6:2B:AC:86:9F:29:28
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c5:45:53:5d:fb:33:ca:a9:b0:ef:c2:60:e6:f1:cc:f0:c8:
6d:72:00:c5:77:b7:2c:9f:3f:3a:c0:cb:55:2a:64:37:52:06:
5d:db:d9:82:31:68:86:4c:99:1e:21:31:a2:4b:64:76:e3:fd:
17:8e:88:b9:e8:54:5a:e7:68:67:70:8d:d6:0d:15:6b:63:0d:
10:ff:29:b7:42:81:b5:10:40:ae:96:c0:26:b3:be:43:b0:f9:
8b:b6:48:34:49:a1:04:bb:27:19:82:a4:dd:c6:02:8d:bd:b2:
4c:e1:16:61:d1:ec:e5:ff:89:19:df:2c:3f:04:e4:b0:21:98:
aa:f7:56:18:f4:e3:79:a4:ee:86:8e:f6:68:13:86:a8:94:46:
0d:e6:f9:b9:87:3d:9c:e1:87:61:67:d3:e2:c9:2e:74:f8:21:
44:9b:d6:8f:0a:0b:25:51:ff:56:0c:50:e6:00:3a:7f:26:67:
9a:65:0e:2f:a5:b0:bc:a3:f5:30:c0:3d:9f:d2:97:b0:2d:3d:
66:16:f3:3b:ce:c4:71:da:69:61:22:c8:91:53:2b:88:d0:7a:
d1:e0:5e:9e:63:95:a0:ad:cb:13:0c:84:ed:79:c9:10:9b:f2:
87:fe:be:ab:0b:f6:7b:1a:85:de:84:55:d7:f4:82:34:39:96:
ec:08:40:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 22:54:23 2026 by rpki-client