Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: wHqRtURGWtKWtEovmTYHjwt+G4rTX1tFF4fQowAKQZE=
Subject key identifier: 8C:00:15:11:A9:EA:79:27:70:7C:46:E7:81:FE:7D:5C:B7:EE:D7:6E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019CE2C72EB761ED65BCC2CE875929C03C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 142C
Signing time: Thu 12 Mar 2026 16:00:30 +0000
Manifest this update: Thu 12 Mar 2026 16:00:30 +0000
Manifest next update: Fri 13 Mar 2026 16:00:30 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: m+i4I1ZE0okkrAj0+c+bjrhWDZySv7rLnYbJC1G9svQ=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:c7:2e:b7:61:ed:65:bc:c2:ce:87:59:29:c0:3c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 12 16:00:30 2026 GMT
Not After : Mar 13 16:00:30 2026 GMT
Subject: CN=8c001511a9ea7927707c46e781fe7d5cb7eed76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:e0:81:de:97:45:7d:0a:a0:71:94:ad:22:
67:a2:bf:f5:c0:0e:b6:59:5d:0c:41:e7:1e:f9:bb:
c2:09:4b:f4:2d:ec:07:4d:02:47:80:2b:5f:1d:ab:
01:77:52:2c:47:e2:a6:90:6f:22:1a:56:48:a9:ca:
a8:6d:5b:c9:7e:15:35:21:b3:18:cb:b6:1d:99:24:
23:ed:3c:11:0f:92:7b:cc:8f:8c:d0:04:2f:a8:e9:
18:42:7b:4c:0f:8e:47:98:7b:01:ee:1c:b3:a3:39:
a6:97:1d:00:8a:e5:b7:3b:b8:23:49:4b:03:68:7f:
17:69:11:65:86:cc:10:8f:ae:40:b2:61:56:12:62:
9c:81:41:24:da:6d:28:65:96:8d:c6:7f:fa:36:80:
7e:52:3c:c9:6b:80:79:77:fa:74:55:52:ba:ce:bf:
af:74:60:65:d0:a1:ca:88:04:bd:95:29:d4:a9:bd:
e7:a0:dc:6f:43:93:94:67:b8:8b:7e:b5:c5:91:3b:
53:82:26:da:b4:ed:ef:5f:b7:b1:e4:a8:93:b4:32:
f9:05:15:0e:01:ce:4f:86:10:84:19:17:13:f0:f4:
46:35:e8:08:87:05:53:49:76:4e:a1:32:90:83:ea:
43:f5:17:7e:89:01:e4:af:38:26:87:dd:29:dd:c2:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:00:15:11:A9:EA:79:27:70:7C:46:E7:81:FE:7D:5C:B7:EE:D7:6E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c8:61:14:a2:24:0a:64:c4:ff:19:fb:f3:6a:de:71:fb:7a:
8e:bc:6c:87:fb:c1:77:a0:f5:fc:3b:62:7d:80:5a:b3:ad:4a:
69:9a:8e:ee:54:ab:30:16:64:a9:bd:b8:18:4e:f6:ed:9d:68:
59:50:ea:6d:a5:b8:d7:7b:00:d8:b8:01:a5:9f:eb:71:3a:d6:
87:51:af:11:8b:76:e8:2f:04:17:5f:6b:9f:ab:81:ac:91:a5:
23:ac:48:29:fc:fa:be:9b:14:86:f6:b3:0e:0c:03:ac:14:36:
85:42:4c:d3:40:fb:7b:c3:23:e0:dc:f3:da:6b:f2:43:34:3b:
e6:e1:4e:5a:b2:01:b1:29:59:99:2a:72:bd:8c:d7:0a:7e:61:
90:36:ef:37:17:1e:cf:26:5d:65:48:49:0b:95:53:ac:31:cb:
76:2b:cc:07:0f:a2:36:13:cc:e2:cd:fa:bc:b1:30:05:3a:b9:
55:bc:b4:0e:16:52:8c:88:ba:ab:9f:37:03:4c:14:40:0b:6d:
9d:01:67:19:9d:b4:44:ce:d4:e6:9b:fe:3f:5f:34:b8:cf:f1:
2e:98:ff:f4:5d:2f:69:70:2e:08:97:65:85:4e:80:23:5d:f0:
f3:49:a1:50:92:fe:54:c5:a4:5f:ef:f5:eb:92:1b:5b:fe:d6:
8a:84:90:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:21:50 2026 by rpki-client