Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: Z+pMbO/tzbqS6pJlsYNqYuUS0dv3piVQC7O10KGdhgA=
Subject key identifier: AC:EA:2C:A6:27:DF:09:A6:E6:35:DD:2B:5E:4C:6B:C5:33:72:E9:F1
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01A062DAA3A300BB1F212C1BA1BE59B668C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 15FC
Signing time: Wed 02 Sep 2026 16:01:30 +0000
Manifest this update: Wed 02 Sep 2026 16:01:30 +0000
Manifest next update: Thu 03 Sep 2026 16:01:30 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: zO9ysAfByyD7G8FMtYzFl4KhDw0zm5zLD6SO/Mxvk9k=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 14:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:da:a3:a3:00:bb:1f:21:2c:1b:a1:be:59:b6:68:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 2 16:01:30 2026 GMT
Not After : Sep 3 16:01:30 2026 GMT
Subject: CN=acea2ca627df09a6e635dd2b5e4c6bc53372e9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1e:6e:b1:be:6b:5b:a1:1e:aa:11:fc:db:21:
b2:08:a2:39:c7:e1:33:59:8b:14:fb:cd:f9:f7:02:
25:f0:ab:a3:29:0d:6d:0f:5c:d2:8f:26:2d:8b:28:
e1:28:2d:41:47:91:cd:43:ae:e1:93:7f:6d:a1:c0:
26:f4:b0:a8:ea:a9:9d:de:f2:3b:f4:d9:ec:0f:e3:
44:2b:51:2d:7b:66:dc:9b:d8:f5:ef:9a:50:7a:00:
e0:16:82:c7:27:28:7b:85:e0:d6:3e:36:cb:d7:22:
9f:40:6d:8e:d5:d3:c4:fe:75:ad:15:4b:b0:f0:77:
1c:fc:73:57:62:ab:20:a4:92:86:73:45:3f:01:1e:
46:8e:ac:4f:81:9f:e6:dc:51:f5:c8:4d:69:a3:80:
48:56:6c:90:db:34:ad:cf:25:7b:5c:73:29:51:25:
3a:f1:10:ee:b6:18:eb:bd:6d:13:55:bf:45:e1:d1:
9a:98:60:71:f2:3d:ce:32:85:29:6f:94:95:0d:6e:
8c:5d:7c:4b:fb:2f:de:c3:7e:5d:b1:bb:24:cb:86:
2d:ca:cb:09:03:96:e1:6d:0f:f4:e2:c3:c7:48:2a:
44:52:23:2e:05:90:b7:b9:a1:5b:30:67:65:6a:11:
11:37:9f:b2:19:ea:a0:df:a0:6f:5c:19:09:27:36:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EA:2C:A6:27:DF:09:A6:E6:35:DD:2B:5E:4C:6B:C5:33:72:E9:F1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:86:ec:9e:ce:46:e0:92:ba:89:60:af:3e:3f:d4:7d:1b:c2:
75:f4:a2:01:71:be:4a:0c:9e:23:33:d0:ec:50:9a:e0:95:ec:
24:62:68:b4:88:78:91:dc:2a:9a:92:be:8d:b4:ef:c6:fa:ea:
03:fe:31:57:88:36:40:6c:01:bf:5a:96:b5:3d:04:f3:bf:d4:
9f:61:d6:59:f5:f3:31:a9:9d:66:69:cd:c8:1f:22:d7:32:8c:
80:68:dc:43:97:e5:a7:af:e0:7c:60:4c:5e:ea:40:66:b9:93:
42:2b:70:d2:3e:d9:b2:99:76:47:ae:44:0b:0f:ae:e7:75:d3:
04:11:a5:6f:76:22:ea:5a:42:cb:0b:89:cb:bb:40:aa:26:2c:
8c:09:ca:09:74:ac:8b:22:e0:81:03:1d:c4:b1:ce:ed:ab:f9:
58:b1:85:c8:db:70:42:be:bb:86:16:e0:d2:5e:1d:47:94:d9:
58:45:ac:37:a5:52:0e:4a:3c:26:8b:8d:6f:42:7a:6c:dd:96:
15:bb:fc:95:89:5e:a0:e8:89:36:0b:23:f0:a2:7d:45:28:0c:
6e:88:bf:90:0f:b7:36:cf:eb:49:78:32:aa:6f:66:37:a3:e8:
97:be:db:a1:84:7a:8c:80:c5:ff:d3:ff:e0:72:e1:2b:a4:ab:
91:6e:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 23:42:49 2026 by rpki-client