Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: ea3X4kzv7mQJOk5WztoWHs2pFF8cZsBdfXNb987Q6Tw=
Subject key identifier: CE:AD:DF:AA:FE:E1:D3:5B:8D:BD:C2:5B:8C:F2:B2:77:30:D1:50:81
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01A03A4C81B082A3689E7488055019730A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 15E7
Signing time: Tue 25 Aug 2026 19:01:27 +0000
Manifest this update: Tue 25 Aug 2026 19:01:27 +0000
Manifest next update: Wed 26 Aug 2026 19:01:27 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: to30+vkDlYEhxuzUlvMyE6trtU+01snwWVAwnjcNTtE=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:4c:81:b0:82:a3:68:9e:74:88:05:50:19:73:0a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 25 19:01:27 2026 GMT
Not After : Aug 26 19:01:27 2026 GMT
Subject: CN=ceaddfaafee1d35b8dbdc25b8cf2b27730d15081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:f1:7d:14:9b:53:73:af:ae:54:ad:98:ab:
91:ae:be:f5:d7:dc:03:80:83:a4:04:e4:43:be:d6:
8e:cb:b7:65:ad:b8:6d:77:b1:98:49:36:ad:50:67:
09:e6:32:5d:8e:95:2a:51:e9:85:f5:58:ca:5d:b1:
78:0e:cf:57:9c:46:57:c0:a6:14:76:d8:f0:7d:51:
56:56:4a:69:c4:83:9e:86:a7:cc:62:24:8e:cb:7f:
be:7b:1f:50:12:37:1e:f0:75:30:8e:47:3f:11:9a:
97:3f:b7:e8:a3:07:d3:41:29:4b:87:cf:9a:e0:ed:
9d:15:e0:c1:36:df:f2:45:c9:71:74:60:60:94:2d:
00:f2:93:f8:01:fe:55:98:9c:24:9d:5b:67:5f:d7:
14:81:72:95:d4:c7:5d:52:a5:9f:ad:76:97:88:85:
6e:e6:63:2d:8f:dd:ed:c5:39:dc:07:bf:59:80:36:
a7:03:ef:e9:69:d6:fe:c2:f7:7f:10:24:0e:cb:da:
fa:e7:c5:75:6b:87:80:ff:fd:bf:c9:32:5f:60:a5:
31:8c:54:bb:66:bb:7a:c4:0e:3f:d3:32:2e:b1:46:
e0:db:50:8a:e9:e4:09:0c:5c:39:31:22:20:c2:90:
18:f6:fc:c8:45:12:2b:3f:f7:55:4a:c5:08:dd:fd:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AD:DF:AA:FE:E1:D3:5B:8D:BD:C2:5B:8C:F2:B2:77:30:D1:50:81
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a2:e3:b3:d9:93:50:b1:49:05:be:81:4d:e3:ee:d7:eb:af:
b4:6d:a1:ac:11:1a:2a:42:f6:57:2a:56:34:21:8b:0f:90:38:
26:30:63:f0:cc:b3:58:e0:fd:9e:f9:90:dd:57:b2:9c:3d:17:
c8:d5:31:36:1a:90:f1:6a:f9:cf:85:14:93:bc:34:ac:cb:cf:
e3:0d:92:b2:48:aa:6b:19:ee:95:e2:d9:25:79:ee:47:72:45:
78:f2:fb:21:4d:1c:f1:a1:a9:cc:aa:ec:31:ac:97:8e:72:85:
d1:c0:a1:fa:9a:1f:78:ef:ea:db:93:2e:19:12:57:20:cc:f7:
b4:8d:e2:e6:9a:a1:ee:09:02:b1:64:f5:20:78:56:6f:73:ff:
dd:59:a2:ec:26:7f:4a:f1:06:30:65:24:76:a9:25:eb:2a:fc:
88:ee:84:20:83:dd:a7:4f:33:1b:d0:90:ed:c1:18:a3:f8:65:
3d:97:af:f9:84:4b:f5:00:2b:68:c4:6a:fc:44:49:31:4d:56:
47:2d:8e:1c:c0:39:15:0d:72:15:30:8e:48:98:07:03:35:b9:
0a:a0:da:bb:9c:ac:c9:3c:55:b1:8a:48:99:9f:49:a7:28:e2:
fc:e6:9e:d0:6f:8d:c5:8a:af:43:65:1d:6d:90:e5:ea:54:03:
70:d1:5d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:35:12 2026 by rpki-client