Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: 3AJ1yB6k7KSSkr39W/ZebWpEjcUs8cLwbC+eCTxJulo=
Subject key identifier: EA:F4:2C:EC:D5:36:CA:DE:46:5C:A0:95:9D:C6:72:BE:71:A2:B7:AA
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019DB16ABAC25A78C58583F4868BF507179C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1497
Signing time: Tue 21 Apr 2026 19:00:54 +0000
Manifest this update: Tue 21 Apr 2026 19:00:54 +0000
Manifest next update: Wed 22 Apr 2026 19:00:54 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: AIujtY8i9n13LqsSgSCYEA/hPdFs1BD4w2vf7+3zZG4=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6a:ba:c2:5a:78:c5:85:83:f4:86:8b:f5:07:17:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 21 19:00:54 2026 GMT
Not After : Apr 22 19:00:54 2026 GMT
Subject: CN=eaf42cecd536cade465ca0959dc672be71a2b7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:2c:cd:48:86:92:3f:cf:76:49:f0:28:1e:
82:ea:44:95:7e:54:66:22:1f:91:4a:31:5b:83:ae:
69:8d:c2:76:f8:a9:2c:41:f5:03:22:79:17:69:63:
10:da:2f:fb:61:33:2c:b4:01:36:cd:eb:9a:d7:ff:
b3:de:3d:a4:9c:4d:e6:48:08:80:ce:fd:f6:80:c3:
75:34:49:7e:d5:d1:e6:bf:eb:c3:fe:4d:dc:25:57:
31:7c:43:48:78:56:00:5c:0e:0d:4d:c6:71:76:6e:
6f:3d:ea:08:7b:8f:d1:ac:46:68:ac:4f:11:5a:48:
bc:df:d1:6f:12:0c:ca:0c:95:a1:16:81:4f:3b:30:
f8:af:d5:19:b5:b0:7b:6c:24:8e:b1:86:6d:01:23:
48:70:db:2e:36:96:00:1d:70:4c:0b:46:32:e3:1a:
9e:8a:ce:a2:b5:b4:8a:f8:01:3d:9c:82:61:20:1a:
ad:eb:40:ee:61:85:e1:e6:8f:0d:16:f4:a5:d4:74:
66:c1:ea:03:36:c6:49:0a:fc:8f:36:ba:f7:b3:a1:
e4:de:77:87:4a:b2:49:0b:e5:5f:6a:80:36:b2:a3:
eb:41:da:09:d1:70:df:8b:3f:29:44:81:7b:29:8f:
4c:26:4e:6d:ad:04:ea:f4:ce:e9:46:33:06:ab:a7:
93:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F4:2C:EC:D5:36:CA:DE:46:5C:A0:95:9D:C6:72:BE:71:A2:B7:AA
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7d:ee:16:4f:63:db:8a:1a:e2:5d:4d:df:0b:1e:34:3a:e5:
57:34:58:c2:2e:fe:9f:ed:3d:c2:6b:f7:2b:15:4d:92:08:0b:
05:3a:3a:32:51:ae:53:eb:27:28:53:4a:b6:b0:4a:3f:02:01:
8e:17:b3:d1:15:c5:29:9f:32:7f:bf:a9:f1:59:e1:7c:96:a5:
29:e2:9a:a2:fb:c0:6d:41:8c:f5:ec:84:5c:0b:f1:e4:e1:25:
15:fb:ce:33:99:44:7e:d6:9f:6f:fb:33:66:b1:af:9a:6b:1e:
c0:21:cc:db:50:3f:b8:48:ec:37:fd:1d:84:8d:67:5c:ac:d4:
70:15:b4:3b:e8:6f:cd:bb:7a:8a:7a:8e:be:b7:e7:60:42:cb:
75:db:85:c2:0f:6c:e7:e4:e9:03:60:4b:d5:f5:d1:75:94:d3:
b4:bd:49:4b:22:ee:42:ac:19:1f:1c:7c:9f:6f:df:e9:36:f0:
1f:d7:d3:1c:c8:94:60:bb:58:73:eb:fb:10:5e:c0:2d:b4:ab:
14:a3:f9:2f:34:77:e9:1d:25:27:27:47:06:2c:45:43:08:f0:
91:84:c4:d1:45:f5:fa:d4:c8:d6:01:a6:4d:5b:cb:38:4b:1c:
e6:c5:b4:d8:0f:56:62:4c:d5:2f:a3:6f:26:15:4d:52:1d:80:
bf:61:75:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 23:46:11 2026 by rpki-client