Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: CnVTsJdKutJqcWEMJYok6OhxQOOUqjAr/U+49jspowI=
Subject key identifier: A4:55:EB:C0:F4:44:31:B4:B9:F7:BE:51:30:A8:D8:F9:E7:B5:AE:9A
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019DED498A9AFCD3C2042BDB16ABB96044EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 14B6
Signing time: Sun 03 May 2026 10:01:52 +0000
Manifest this update: Sun 03 May 2026 10:01:52 +0000
Manifest next update: Mon 04 May 2026 10:01:52 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: zK4waMy1OD2lFjUxdC5SItZyN8nCDm7oFd7q3FklwoQ=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:49:8a:9a:fc:d3:c2:04:2b:db:16:ab:b9:60:44:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 3 10:01:52 2026 GMT
Not After : May 4 10:01:52 2026 GMT
Subject: CN=a455ebc0f44431b4b9f7be5130a8d8f9e7b5ae9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:21:08:f6:16:fe:86:2e:93:35:32:00:98:af:
ee:6a:25:9e:0e:f2:e4:ce:5f:22:20:52:3c:e3:e9:
27:e5:72:64:c0:f4:63:b0:6f:61:5a:99:d5:97:49:
5d:05:f6:78:b1:9c:bd:be:2b:c3:72:66:17:28:de:
71:65:f5:64:70:30:1a:f8:06:28:07:98:9d:e6:70:
5f:13:fd:14:93:ab:55:80:8c:a1:44:59:57:12:c1:
bb:74:4a:63:98:18:20:4b:d8:be:15:68:77:3e:67:
30:30:e5:c1:95:24:fa:81:64:54:2f:b3:a1:00:59:
ef:21:9b:0e:3c:bc:78:44:c7:af:83:d5:75:76:d8:
4d:bf:7f:93:77:22:44:b9:8d:e0:ce:9d:7d:45:9d:
49:6d:50:7c:58:f2:68:db:27:07:e5:0a:ba:a6:64:
d5:cf:83:9f:12:91:83:64:8c:4a:fc:91:53:a5:d5:
cf:eb:b4:cb:b9:93:75:8d:09:cf:77:e9:30:08:d3:
e4:88:62:61:4b:d9:ab:48:e4:51:83:20:57:03:49:
30:6a:59:b0:a4:e6:02:d1:88:f4:e2:da:03:a4:8a:
cc:93:d2:ac:f3:26:85:a4:83:49:de:97:24:e0:18:
23:3c:fb:97:2e:54:19:ae:0d:fb:fb:71:9b:0e:a2:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:55:EB:C0:F4:44:31:B4:B9:F7:BE:51:30:A8:D8:F9:E7:B5:AE:9A
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b7:35:90:2a:59:51:b3:ed:54:d7:42:4b:f9:06:78:d6:af:
6f:ff:36:0d:ab:41:48:8e:e6:63:b5:d3:ae:58:af:ee:0d:82:
f0:27:1e:7d:0d:af:39:6e:5f:e2:33:d3:5a:2d:38:6c:9e:05:
10:b4:fa:af:6e:42:6d:7a:d1:36:d6:ab:0e:8a:6d:f3:a4:e0:
68:94:62:48:d3:a8:b0:ca:89:f8:58:24:3b:bb:4e:ab:eb:53:
c8:2b:65:d5:93:bd:fc:73:60:42:45:e1:12:c1:9e:71:c3:a0:
08:89:48:aa:42:ad:c5:f9:bc:ee:ec:5f:c3:22:41:ea:98:aa:
b0:eb:27:7d:96:5e:c1:c1:57:61:03:cd:f3:5a:97:43:85:80:
88:48:59:d8:4c:c8:80:ba:d0:72:de:d2:0b:52:55:6c:db:de:
43:e6:f1:7a:56:f5:ee:b1:b0:ac:89:53:50:1e:6a:a0:e6:18:
e4:19:74:bd:34:82:9d:7d:af:71:f1:aa:af:87:5f:42:6d:ac:
a9:f7:a3:1d:fc:46:0f:b0:05:c6:e0:01:42:f2:ac:42:d7:df:
3f:59:4a:33:7b:5a:25:6f:a3:e2:af:7f:89:a3:9b:10:98:f0:
21:a0:3d:5e:44:5e:24:fb:82:5c:99:22:38:0b:71:c8:07:47:
09:bf:d3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:51:32 2026 by rpki-client