Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: Bs3WCHJ1aHzGfeTqXbKyuMpAwm/bqlabdV1s/UgHXaA=
Subject key identifier: 89:AD:47:CD:A6:45:CD:47:E2:6F:70:99:BF:20:E9:AE:68:C7:B3:E0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01A004396249604A59E45F81A7BBE865EBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 15CB
Signing time: Sat 15 Aug 2026 07:01:04 +0000
Manifest this update: Sat 15 Aug 2026 07:01:04 +0000
Manifest next update: Sun 16 Aug 2026 07:01:04 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: yCT2O6cutWU6T3ljb2R6xouTxWF/37neYqQBCjloWEc=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:39:62:49:60:4a:59:e4:5f:81:a7:bb:e8:65:eb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 15 07:01:04 2026 GMT
Not After : Aug 16 07:01:04 2026 GMT
Subject: CN=89ad47cda645cd47e26f7099bf20e9ae68c7b3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:af:44:e5:94:4d:01:9d:68:81:97:a6:cb:6b:
e1:68:ba:85:81:f1:07:53:e3:4d:d5:df:e2:28:a6:
c7:33:66:fb:8b:a5:62:60:48:f5:ef:c8:fb:d4:0d:
f8:24:58:ba:81:5a:4f:39:4d:fc:82:01:9b:bc:dd:
88:07:4c:b6:7e:d8:ad:63:77:fa:7e:13:fe:82:b4:
cb:ed:61:39:4a:7e:c5:62:d9:45:75:7c:65:10:a6:
fe:fe:c1:f7:95:cf:52:2e:14:0b:3b:fa:50:dc:7c:
1b:e6:56:e5:c8:e6:83:42:6d:ab:fa:37:c9:86:b7:
98:43:55:12:67:ab:8c:2e:13:79:a5:c7:23:8c:57:
a2:6b:b5:0b:42:4c:f9:6d:68:c6:be:e3:4a:f7:8a:
e2:e2:1e:1c:83:3b:61:93:b9:a4:92:e1:5b:ab:3c:
a1:df:5a:d7:17:7e:45:a7:cb:3f:49:2f:10:a8:95:
fd:55:f4:26:a1:94:2a:93:99:fe:50:8e:19:89:a1:
55:b3:86:5e:db:d6:8f:83:b6:53:bc:34:9c:6a:a9:
29:00:ec:6f:58:18:46:c3:56:66:04:dd:8d:86:a8:
c5:64:b8:cf:0e:e3:ef:19:f8:eb:dd:35:13:c2:49:
85:bf:c5:d3:54:b8:5a:00:53:d3:09:08:6c:3e:82:
7d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AD:47:CD:A6:45:CD:47:E2:6F:70:99:BF:20:E9:AE:68:C7:B3:E0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1b:45:55:ef:fd:1a:ad:68:c7:f1:91:a5:de:6d:b9:10:25:
11:b0:c5:01:46:f8:8f:b5:93:f6:6f:e1:ad:5d:12:4f:7b:62:
db:dd:63:f7:03:9d:9e:ef:f1:71:0e:c7:27:4e:15:b0:17:87:
6f:58:0e:1c:0a:4d:29:6e:38:01:1f:e2:fb:bb:8a:0c:d2:f0:
bd:29:2b:48:8e:cf:60:77:85:56:73:82:e9:a3:42:c6:ac:d3:
74:56:fa:6b:73:45:a6:1e:17:c1:97:9c:ad:a0:1f:41:35:09:
90:07:e9:ea:97:2c:fd:28:d5:bf:36:1c:94:ed:c5:03:79:8e:
a2:18:f2:e3:8b:33:8f:10:73:b8:0c:1f:13:76:df:53:1d:c7:
65:e1:ec:6f:67:e9:e9:89:1e:94:c2:d7:c4:08:a8:2e:5a:03:
30:6e:f9:e7:dc:11:45:b1:57:a4:eb:73:50:3c:55:42:44:a1:
f5:90:51:dd:fa:40:93:6d:7d:b7:cb:21:44:24:26:f0:33:7c:
6c:06:d0:05:dc:20:a9:1e:12:fc:5f:85:8f:14:37:bf:c6:ea:
06:08:2c:99:75:45:80:b9:15:fb:90:2d:0a:78:19:a8:ab:91:
f2:9e:e7:9d:b9:13:e4:bc:e7:08:f7:2f:1b:f6:95:5a:f8:91:
9f:1d:a6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 16:59:25 2026 by rpki-client