Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: CipEGZgJLi83B0JqtmnwcPTvKLEnGivRSwZodDQG4wU=
Subject key identifier: 20:0A:A1:79:93:20:E1:60:99:42:F2:95:CE:FD:4D:C1:3B:39:E6:FF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019EEA45F0CBAA66A6B6F38264477F3FB69C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1539
Signing time: Sun 21 Jun 2026 13:01:52 +0000
Manifest this update: Sun 21 Jun 2026 13:01:52 +0000
Manifest next update: Mon 22 Jun 2026 13:01:52 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: NDGBr8XAfMNQ1/R7rn5QvOChT2d/VlgqMyONWH+ktOc=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ea:45:f0:cb:aa:66:a6:b6:f3:82:64:47:7f:3f:b6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 21 13:01:52 2026 GMT
Not After : Jun 22 13:01:52 2026 GMT
Subject: CN=200aa1799320e1609942f295cefd4dc13b39e6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:c0:d8:5f:25:8e:14:90:a1:62:0c:3b:ec:
2e:6e:66:88:44:6d:18:f3:3f:09:b7:67:18:74:9f:
f8:b0:2f:31:d0:1b:7a:48:bf:85:37:f0:b4:84:32:
63:8f:da:9a:6b:f1:13:1e:88:b5:63:52:3b:02:99:
e9:60:7b:d7:be:4a:4a:ec:14:ef:1b:e9:5b:fa:b8:
9c:a3:4b:db:57:17:41:b7:85:09:f8:bf:5f:87:cd:
ff:d2:8a:11:d8:67:2d:c0:a2:b9:31:98:e3:cd:13:
80:36:62:4c:da:ed:33:e3:02:45:d1:82:4f:66:4d:
c3:39:cf:93:f6:af:f7:14:e2:c2:03:be:19:e4:37:
1f:69:63:6e:3e:1c:78:0a:25:6c:e1:07:d1:29:c0:
13:da:82:ca:34:81:ec:a4:a4:d3:e9:be:54:3e:d2:
11:9e:6b:08:7f:b5:23:69:e0:86:38:c4:8f:a5:f7:
87:8c:ba:a3:87:8a:c3:7d:63:12:bb:78:1a:95:c5:
9a:59:6f:28:be:14:18:c7:02:47:d1:72:72:01:7b:
37:d3:0b:ad:9e:15:cf:a8:45:36:91:5f:ab:12:6a:
bc:cf:29:11:4f:21:26:fa:6f:cb:08:3c:31:b2:d9:
8a:c2:88:37:ab:8b:f2:f3:a0:14:86:d6:2b:ab:7c:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0A:A1:79:93:20:E1:60:99:42:F2:95:CE:FD:4D:C1:3B:39:E6:FF
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:14:04:90:c4:71:5a:f7:07:8b:69:86:79:db:e6:e4:76:70:
9f:a7:95:e0:0a:9e:7e:3d:11:bf:5e:1f:5f:89:83:c9:0f:3b:
20:bb:47:90:44:d9:0d:fc:95:72:df:58:65:dc:ca:4e:2c:0f:
aa:db:e0:a7:4d:78:c5:5c:bb:8e:ef:ac:88:63:e3:b0:98:ce:
18:87:ff:c6:86:b7:76:c3:f9:2b:1f:53:38:79:f2:1f:08:7f:
0a:fb:11:21:68:35:89:39:e2:7f:8a:6d:83:69:85:14:24:d9:
21:47:e4:b8:e5:90:33:e4:b8:cc:71:7e:45:4a:c5:10:2e:80:
1a:20:98:1e:8f:40:0b:d6:6d:b7:92:79:0d:86:31:f9:6d:a1:
33:d6:64:2a:57:42:c5:5f:65:12:e2:89:65:74:31:84:0d:f6:
9f:a5:5c:14:1e:1e:6d:6b:e6:c2:1b:98:2b:95:ff:b8:df:1d:
83:da:be:0c:98:39:04:e7:9a:37:fc:f3:ad:29:b3:f6:5d:9a:
e5:3c:d5:20:0f:db:c6:19:90:c1:ee:ae:fc:73:6e:7b:38:ba:
fe:52:d1:fb:03:32:b1:2d:90:db:8a:1a:3e:80:8d:14:0d:c2:
5f:c3:90:fc:2c:c2:2a:91:be:1d:91:c6:ae:28:c9:62:e4:f2:
08:ec:c1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 20:21:55 2026 by rpki-client