Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: 1aqS1HKDvNIy8/589rGUaN/KN6BdwBhpgwqHf7BMAYI=
Subject key identifier: E0:E4:32:DE:CB:D6:D1:DD:74:FD:27:78:6A:1A:E2:76:DA:30:EB:23
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019CDB0E73F6553585AC3F0698B44340A93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1428
Signing time: Wed 11 Mar 2026 04:01:23 +0000
Manifest this update: Wed 11 Mar 2026 04:01:23 +0000
Manifest next update: Thu 12 Mar 2026 04:01:23 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: L/wWywU78DCj6fdrTEa5rAp4NWVrXg4Dce7pVJJUX4M=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:0e:73:f6:55:35:85:ac:3f:06:98:b4:43:40:a9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 11 04:01:23 2026 GMT
Not After : Mar 12 04:01:23 2026 GMT
Subject: CN=e0e432decbd6d1dd74fd27786a1ae276da30eb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:e2:82:f3:df:20:8e:78:56:a2:f4:c7:69:
d5:c5:b7:ba:0e:e0:79:ce:ab:53:d0:ed:c9:2f:85:
7e:d9:da:cd:e0:73:2e:0b:ae:3a:de:a9:29:83:99:
92:93:0e:27:76:53:68:bb:51:e3:2b:9a:b8:c5:dc:
8a:e1:5b:31:66:53:71:00:4d:f9:dd:b7:8b:60:e9:
24:8f:ac:31:5f:c6:1c:85:89:9e:38:d3:16:e5:48:
b5:44:6c:3f:0c:74:6f:8f:c9:a0:29:6d:7b:b3:b8:
0d:9c:e6:c2:83:99:9e:04:6b:4e:1a:d3:14:d2:23:
72:29:41:75:7b:a9:23:c6:b7:b7:e9:76:18:da:17:
09:57:dc:b4:e5:0f:6c:63:a7:1f:d1:9b:f2:d6:c6:
24:2a:17:a6:71:be:01:6e:3c:88:14:28:e2:ba:6a:
e2:3c:a1:7d:ab:f6:03:60:24:1c:da:b6:94:68:f8:
d2:9c:3b:21:3c:44:e6:28:7d:8f:26:58:a4:a6:09:
69:09:40:41:e0:e4:c0:4a:0e:a9:79:1c:9b:f9:aa:
aa:3f:08:f3:8c:16:8c:8f:d5:4c:1c:6d:29:46:db:
d0:77:b9:82:c0:b0:e2:5b:91:4e:4c:58:f5:03:34:
37:85:6c:f6:ec:87:5c:7a:e2:14:57:5d:58:f8:ce:
e8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E4:32:DE:CB:D6:D1:DD:74:FD:27:78:6A:1A:E2:76:DA:30:EB:23
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:54:00:33:64:c6:dd:cd:d7:b3:92:4c:be:68:f0:d3:b6:61:
94:7e:fb:68:e9:90:69:f0:bf:61:52:2d:46:ff:4d:d1:4d:33:
15:11:db:e2:e1:7c:59:00:04:cb:1a:88:7f:8e:cf:19:00:f5:
df:a4:5b:94:6d:50:23:50:60:52:17:20:3a:13:ff:f0:2a:ff:
fe:8e:a4:c2:34:60:69:82:7e:12:ee:4f:d9:38:12:0b:71:7e:
73:a0:7a:fe:75:bd:7e:3f:df:cf:b7:2b:63:46:e4:10:fa:f7:
58:97:86:fb:54:da:d6:20:57:75:73:ac:fe:81:03:06:52:75:
80:9a:9d:28:18:f7:0c:3e:b2:b2:1c:d8:2e:69:0b:fd:ca:e4:
9f:cb:cc:be:60:97:c3:14:df:71:be:39:4d:2e:70:e8:0a:c2:
c4:9d:73:21:68:4f:82:f4:8a:4d:45:55:4b:bb:3d:e4:73:19:
7f:45:9c:6f:6b:f6:e2:bc:d9:83:98:39:be:71:36:18:42:fa:
5d:64:5c:a7:72:22:7b:ef:b6:90:8a:be:8f:40:81:f4:2f:41:
e2:2f:8c:e5:83:86:c6:8b:c5:38:f8:8b:ea:af:86:c0:86:a8:
e8:de:56:b2:ff:55:fd:45:4c:b5:80:68:b7:9d:56:b6:1a:c2:
23:fd:c7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 09:20:24 2026 by rpki-client