Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: bxR/XhyXuAASpOpjPhQarBeyXQrZICRIgm3t0AO2dgA=
Subject key identifier: 23:92:32:ED:62:16:4B:B5:16:C5:1B:83:B7:0A:BE:3D:AE:BE:83:ED
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019FD5E01B22972794647154451B967F9348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 15B3
Signing time: Thu 06 Aug 2026 07:01:01 +0000
Manifest this update: Thu 06 Aug 2026 07:01:01 +0000
Manifest next update: Fri 07 Aug 2026 07:01:01 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: DG7teqa+9feebPllOrfZc7vdYeA3J43CdiTLmzWCd/8=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:e0:1b:22:97:27:94:64:71:54:45:1b:96:7f:93:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 6 07:01:01 2026 GMT
Not After : Aug 7 07:01:01 2026 GMT
Subject: CN=239232ed62164bb516c51b83b70abe3daebe83ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:80:48:19:de:df:2b:3f:92:8a:59:62:42:
1d:61:71:d2:05:6b:3c:fc:dd:84:be:cf:28:dd:a0:
84:8a:36:9f:a0:ef:f9:7a:4f:73:82:2c:ad:21:b2:
f9:ab:c5:9e:b5:34:80:a3:5e:d9:5b:d4:ed:94:65:
dc:07:36:8a:5d:28:47:6a:3c:ca:32:9b:c9:aa:59:
73:39:94:2d:86:b2:fc:a3:6b:b7:65:8b:65:b2:f8:
c2:09:8d:5f:2a:d6:68:6c:e5:80:ab:36:05:b7:4e:
91:7b:b4:bd:a8:a6:3e:53:05:6c:93:75:ee:a4:14:
19:9f:7d:43:f8:d9:00:cb:56:f2:36:83:6a:53:9b:
c7:57:4b:cf:47:e4:e2:8c:33:f2:89:c3:ca:6d:50:
05:e1:a9:76:50:88:34:32:c3:8b:09:a7:cd:40:50:
fe:c1:05:83:25:07:1c:5e:1e:0b:d5:db:a4:04:50:
99:ee:29:43:db:85:51:cc:af:62:ff:fe:da:3d:bb:
d7:a7:5d:75:b7:3b:6b:04:7e:38:28:64:d5:c1:3f:
d2:3f:4c:33:61:d6:d2:12:f3:87:e7:9f:1f:e3:fc:
76:d4:c5:1a:6f:7c:a0:10:ba:36:3e:3f:4b:0f:28:
5e:3d:44:5f:04:96:9a:c8:f7:f0:ea:31:9b:ad:0e:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:92:32:ED:62:16:4B:B5:16:C5:1B:83:B7:0A:BE:3D:AE:BE:83:ED
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:df:91:6d:1c:33:a6:84:d2:6b:02:05:1e:c9:a8:92:ed:4c:
19:f9:1c:33:a3:c4:3e:fb:62:da:99:f2:5e:98:49:39:a2:34:
8f:f1:88:51:d5:56:a0:8b:5d:29:3b:a3:4b:23:d7:95:53:82:
1e:54:dc:3b:3b:15:96:1e:75:03:a3:f3:da:86:d7:d9:8c:34:
ac:ca:db:ea:02:18:b7:e9:c0:4c:66:69:e6:51:af:38:a8:38:
f7:b7:d8:3e:7a:e9:86:be:d5:08:35:8a:e2:44:39:34:b8:07:
09:0d:21:c9:57:38:84:32:27:ec:22:82:ae:6b:8f:e5:9c:5c:
7a:57:a5:5f:ba:23:d6:69:84:2b:ae:fc:4c:a8:7c:34:34:05:
6d:8e:de:87:c0:dc:4a:97:a9:10:2c:77:2f:a8:d3:c3:a9:15:
ea:0d:77:87:e6:76:79:31:94:54:59:bf:3d:ce:2f:d1:1f:49:
67:80:d7:19:f8:c5:92:95:4a:dc:a2:e6:63:e9:30:37:81:73:
6c:5c:ee:e7:59:19:2e:c7:b8:d6:96:fd:18:df:aa:06:f2:64:
41:3e:1d:d3:f9:fd:4b:ff:81:7a:26:17:d2:3d:17:19:ad:e2:
83:f8:8a:69:c3:3f:5d:77:46:93:8e:99:01:99:bb:18:af:f8:
11:17:25:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 09:15:44 2026 by rpki-client