Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: LXO5b07Z3tNPHTRZ/pkCiX2ZnDa26izVoj931o4KKSY=
Subject key identifier: 1D:54:A9:54:46:65:DE:FC:73:3B:B9:1D:B8:AB:87:0D:86:66:3D:1D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019F0B1A656DCC4F4872A9B6A57C8E41F512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 154A
Signing time: Sat 27 Jun 2026 22:01:47 +0000
Manifest this update: Sat 27 Jun 2026 22:01:47 +0000
Manifest next update: Sun 28 Jun 2026 22:01:47 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: cdnJjUIHqv3Dv7EjlLn+6WCIrp39v4pb6w8QAvSEImM=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0b:1a:65:6d:cc:4f:48:72:a9:b6:a5:7c:8e:41:f5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 27 22:01:47 2026 GMT
Not After : Jun 28 22:01:47 2026 GMT
Subject: CN=1d54a9544665defc733bb91db8ab870d86663d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:15:f2:83:3c:ff:e9:44:1e:4b:6e:4d:71:
4b:a4:52:07:72:01:74:03:53:94:2f:e9:c3:98:35:
3c:99:d1:0f:61:b0:f6:fc:80:15:32:43:79:44:6e:
81:51:c1:bb:7c:4e:fc:c8:42:5a:00:d2:20:d4:57:
fe:73:be:60:dc:77:56:ff:94:53:55:d7:f5:18:f2:
68:7e:59:2d:f8:a0:e5:f3:93:71:77:3d:86:39:7b:
4b:7d:a1:43:86:95:02:40:b7:94:5d:e9:d4:91:f8:
d9:5c:42:4c:61:e0:7a:42:f4:f0:d4:db:81:77:af:
3d:ec:3a:1f:61:36:9a:bb:c5:37:d6:2f:0e:5b:9f:
c6:d2:8a:94:ca:a2:bb:7d:2f:9a:80:07:0b:ee:dc:
b3:37:09:06:65:43:3c:61:d0:fd:d7:c5:d1:b1:fd:
07:04:b7:59:0f:71:ba:34:5c:c8:14:2f:5e:38:0b:
92:a7:f2:8e:7f:67:98:18:ad:67:f2:47:26:cb:70:
69:48:a2:21:28:0e:8c:73:a2:4c:9a:35:4c:1b:d4:
ab:38:6f:f1:db:bb:06:5c:88:fc:3b:00:b9:7a:8e:
fd:d4:fd:5b:93:62:b2:f8:ce:50:d1:7b:9b:e1:8a:
4a:2e:b4:b9:4a:b3:97:2c:7b:a5:8f:68:32:53:13:
59:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:54:A9:54:46:65:DE:FC:73:3B:B9:1D:B8:AB:87:0D:86:66:3D:1D
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ee:b7:fc:75:ac:49:e6:25:a9:07:f6:2f:43:38:05:78:74:
be:df:fe:38:39:73:2b:45:0b:3b:b5:24:7e:77:a9:a8:6d:4c:
33:96:de:56:7b:cd:4d:a9:01:88:d9:35:72:80:d8:0e:c5:6c:
ca:89:58:4c:0d:55:92:8c:c3:c8:6d:b9:de:97:38:95:98:51:
a3:23:68:fb:4d:49:19:a1:35:cd:26:fe:13:5a:a8:7c:ea:94:
6c:b8:f0:10:20:54:25:71:a8:82:53:32:e2:a7:3d:90:02:fc:
dd:fa:c7:a6:44:a6:58:35:4b:9f:93:44:88:db:72:de:05:a5:
91:ee:d9:9d:ae:17:62:68:ed:e5:eb:71:48:bf:67:5f:6f:ca:
af:66:60:37:fd:ed:0d:cf:3a:88:b5:1d:d3:62:f8:14:8d:e1:
85:f1:dd:85:bb:1d:df:ad:23:1d:45:f5:b0:53:93:e9:db:52:
14:d7:c6:a6:60:ed:9a:ea:d5:28:6b:ae:c7:78:29:56:d6:48:
da:a4:dc:a3:7a:4d:0e:6e:ac:b6:64:a7:2c:67:89:20:e9:a3:
13:03:9d:d9:aa:f8:f2:06:b1:c3:b3:8c:10:4b:5a:e8:0d:bf:
df:ce:ce:74:ea:f8:9a:68:23:cb:16:f5:8e:a6:42:cc:c6:d7:
24:4f:5c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 00:58:49 2026 by rpki-client