Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: 3OYJCMmB0+AtK4XGd87dDyOvee2QSu310rjz0W/fUSs=
Subject key identifier: 00:E0:61:EC:6F:94:58:F6:D4:65:99:25:71:5C:02:49:55:E0:86:BE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019FB50C1E586B9B000A5C54FAB5419670D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 15A2
Signing time: Thu 30 Jul 2026 22:01:38 +0000
Manifest this update: Thu 30 Jul 2026 22:01:38 +0000
Manifest next update: Fri 31 Jul 2026 22:01:38 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: dlsmuxKLqIKcYkobDuwTei47kUBJHnNZ0v7whPhPw64=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Jul 2026 22:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b5:0c:1e:58:6b:9b:00:0a:5c:54:fa:b5:41:96:70:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 30 22:01:38 2026 GMT
Not After : Jul 31 22:01:38 2026 GMT
Subject: CN=00e061ec6f9458f6d4659925715c024955e086be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:be:a9:8e:e2:9f:0c:97:c7:63:1b:0f:b7:6a:
69:c8:ab:97:70:0a:d9:1a:ef:de:24:17:10:c2:2c:
84:f0:66:2a:1d:78:80:73:e5:f8:cb:ff:b4:a7:83:
1e:1e:e8:cf:ca:91:01:4f:15:27:41:73:31:e9:3f:
fd:ed:6d:d2:e3:d3:94:89:59:74:6a:3d:94:05:76:
14:2d:81:0e:7d:96:07:9b:fc:9f:9f:64:28:87:51:
a9:a2:f6:11:f0:5c:b7:74:7c:47:54:a8:44:91:e1:
16:1e:17:55:cd:78:56:28:22:0b:c5:d6:f8:18:5f:
02:d2:63:d5:60:69:aa:ae:35:94:d4:22:f8:52:48:
fd:3a:f6:f4:b7:23:3c:fe:8c:5e:15:80:38:02:79:
38:c5:1a:b4:d1:eb:99:7a:6a:10:35:00:aa:52:82:
60:92:d4:d1:1f:45:b5:4d:d4:a6:96:d8:5f:87:53:
e1:8d:3c:22:de:f4:c3:8b:3b:4b:46:a9:35:ef:b7:
04:1a:ac:1b:e5:89:5b:93:59:92:16:03:1a:9d:07:
2c:df:33:a9:b4:36:ab:07:db:de:93:7f:d6:21:8c:
ee:ef:e0:69:c4:2f:06:4a:e6:ab:9d:95:1c:93:96:
a2:56:0b:b9:bb:b7:53:7d:de:dd:f3:0b:8b:2c:06:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E0:61:EC:6F:94:58:F6:D4:65:99:25:71:5C:02:49:55:E0:86:BE
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f4:5d:75:ef:fa:98:45:35:f3:69:1a:d1:56:2e:7e:93:46:
71:52:d6:a3:6e:ec:31:4f:02:e7:6f:34:8c:d9:9c:d7:36:a3:
f5:f8:f8:75:dd:05:cb:6e:08:49:a7:4f:ee:df:59:92:8a:e6:
2d:d9:1f:21:41:e6:eb:c7:d1:3e:c2:70:a2:f3:11:3a:47:ca:
e1:ac:52:8e:ff:1b:53:d8:8c:3e:7a:ff:44:c3:2b:1f:06:b0:
4b:bc:e3:05:dc:05:c1:71:db:2a:8d:17:ee:bd:e4:86:7e:38:
e4:14:5b:e4:c0:b4:1f:bd:5e:27:3a:81:56:ee:1f:ba:f8:17:
a3:41:6c:46:47:8a:35:65:5b:c0:c4:be:31:20:25:82:9e:1c:
e3:86:b5:d7:96:ea:27:8d:3f:46:8e:89:ce:97:56:e8:34:5d:
12:2b:3f:a4:79:63:cf:a4:9b:f4:06:3e:c8:dc:0d:29:a5:ca:
d6:5d:d9:99:99:d1:d4:0f:f9:b4:c9:bf:3c:99:30:45:b8:ea:
ce:84:63:04:d6:6c:91:ff:13:7c:01:95:72:96:93:8e:ec:2e:
9a:de:35:b5:0e:6d:61:3e:dd:83:cb:86:01:b9:53:a4:39:43:
df:82:0b:61:72:c2:00:ee:e5:ed:62:d0:38:50:39:a8:68:1d:
c6:9d:59:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:42:31 2026 by rpki-client