Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: ysbh4EWyVIxV9VRKEluZIAUhFaazlpn1S3qKnhpAAf8=
Subject key identifier: 67:50:81:7C:A1:50:EE:64:56:08:08:CB:60:6C:5C:D2:0F:4C:A0:35
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019DB3591C35D03E685F0CB65BD33A32416C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1498
Signing time: Wed 22 Apr 2026 04:00:54 +0000
Manifest this update: Wed 22 Apr 2026 04:00:54 +0000
Manifest next update: Thu 23 Apr 2026 04:00:54 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: VNsCK0/wIwlc2HhERj7cFz26uo7QjoLa2Hz1qzS5XTs=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:59:1c:35:d0:3e:68:5f:0c:b6:5b:d3:3a:32:41:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 22 04:00:54 2026 GMT
Not After : Apr 23 04:00:54 2026 GMT
Subject: CN=6750817ca150ee64560808cb606c5cd20f4ca035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:0a:ca:3f:81:0f:61:35:d6:7b:67:a4:a9:
87:1f:b6:93:db:bd:89:84:59:a1:be:67:a8:a0:cc:
7d:70:47:6b:66:38:a0:15:11:1c:94:5e:6b:99:b3:
7e:05:cb:57:db:dc:3b:a7:ee:7a:7a:19:a6:05:82:
ee:41:43:c4:7a:44:b7:c2:cf:a7:a8:a5:fc:05:7f:
c4:0d:4c:ef:ca:71:6a:55:dd:19:74:fd:0f:f1:fe:
b3:ee:b3:6f:0e:5f:aa:f0:a3:c6:b2:07:47:8e:71:
f0:cd:0d:48:34:ca:19:62:13:5e:b4:b1:f5:8d:a4:
c3:07:6d:75:ee:f5:9f:ff:87:e3:4f:d1:29:3e:7b:
fd:6f:bb:45:6c:5c:d7:28:0b:5a:ab:cb:5c:c2:ed:
40:21:5b:c5:79:f2:51:45:3a:e1:dd:91:3f:6e:c2:
7e:58:03:37:11:d6:c9:e1:2a:8c:e2:65:63:0c:3e:
67:7b:d5:ac:92:a1:3c:d3:80:dc:af:c0:ac:6d:b5:
1a:be:5b:15:ef:52:ec:83:08:24:1a:a5:7b:ff:7c:
02:85:a9:ce:b4:10:a3:39:49:ed:cd:d3:1c:99:9c:
5c:fe:76:e5:9e:e5:f3:ba:c1:5e:9a:0f:61:f5:4a:
ad:08:8d:a5:7a:07:3e:8d:e4:91:48:7a:b1:66:b7:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:50:81:7C:A1:50:EE:64:56:08:08:CB:60:6C:5C:D2:0F:4C:A0:35
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4b:8b:5d:a1:0f:1a:cb:fe:2c:67:6e:09:ff:47:cc:a3:a2:
6c:d0:8e:80:c5:c5:f2:24:b5:57:21:20:08:2f:23:87:2f:3b:
28:42:b1:c0:33:93:5e:df:4d:0d:cb:28:18:7d:e4:0d:91:36:
99:9f:10:82:09:10:c6:e8:f1:ed:12:06:12:a1:2d:13:0c:5c:
06:e3:64:4f:07:ea:64:97:fc:54:f7:4f:2e:17:f5:1a:ce:91:
4d:07:ef:25:80:42:48:e7:3d:d6:05:60:7a:3b:c5:ee:19:9b:
ed:a9:84:85:41:f6:9d:54:a7:f8:94:53:05:d5:7e:fb:1c:e5:
66:55:56:16:db:9d:92:3a:9e:e3:13:73:2d:38:6c:98:05:92:
e5:26:33:d9:b6:81:67:0a:70:f2:e3:87:b0:7d:62:af:bc:cf:
82:33:b5:89:d7:84:10:48:b5:0a:14:d1:d4:27:71:2c:e1:1a:
c8:0e:d6:e8:65:71:d1:1f:0f:01:f2:a2:bf:24:22:93:35:fd:
ce:5e:92:a5:9b:ad:c9:43:57:72:3c:2f:d3:1d:68:42:19:36:
03:63:3d:59:d7:26:f1:45:7a:8c:f9:09:c2:d2:d2:7e:5e:76:
9a:82:7b:15:ed:5f:f2:08:bb:3b:63:4f:48:1f:af:d5:0a:a5:
ba:8a:e3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 12:03:08 2026 by rpki-client