Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: 2XLHPLndETd4o+3cDMfV5rnba0+Ow3TrRottEHaT+KQ=
Subject key identifier: EE:B9:07:DC:D3:77:47:1A:3C:24:E8:DC:67:45:08:38:93:F5:23:42
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019DFCBC015050A44C6FFB11B36029DEA699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 14BE
Signing time: Wed 06 May 2026 10:01:12 +0000
Manifest this update: Wed 06 May 2026 10:01:12 +0000
Manifest next update: Thu 07 May 2026 10:01:12 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: EAGzlmGYoCP+3Wxz1qghefIil2m3w2zLESLf+DSnb3I=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:bc:01:50:50:a4:4c:6f:fb:11:b3:60:29:de:a6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 6 10:01:12 2026 GMT
Not After : May 7 10:01:12 2026 GMT
Subject: CN=eeb907dcd377471a3c24e8dc6745083893f52342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:ec:50:b0:89:47:89:f1:72:4b:50:e3:cf:
15:79:c3:9a:a5:ba:60:b4:f7:e7:da:2c:ee:fd:35:
ea:85:4f:cc:0a:99:45:62:15:41:0c:0e:25:3d:dc:
c6:0e:0e:f6:2a:29:7a:e9:bc:b2:68:fe:dd:42:bc:
ad:89:d8:4b:92:0b:24:de:76:fb:a5:f3:1b:59:cf:
6e:f8:ed:2c:6d:e0:5e:8b:97:20:96:8b:16:aa:c7:
3c:e0:e5:a8:6b:a6:04:f6:9f:e8:06:8c:73:8b:04:
ba:a6:3d:43:19:d3:47:91:01:94:fa:ba:0a:68:2d:
7b:70:c8:d7:78:a8:b5:d8:36:da:6b:9a:48:f3:8e:
74:aa:80:a3:79:db:8f:9a:89:be:9b:4e:10:0e:c6:
02:b2:3a:a4:8c:79:61:1d:db:46:8e:1d:0b:35:f1:
84:c1:ac:22:72:86:43:82:f5:ba:98:1f:10:cb:a6:
de:97:de:d0:98:f1:f4:df:9a:6c:14:06:32:7c:b8:
e2:c7:44:bf:2a:5b:81:b0:18:8e:26:e6:8d:34:3e:
c6:c0:39:26:2b:8b:0e:85:c0:ea:97:07:9d:76:1f:
58:44:e8:33:ff:ec:c7:26:7b:b2:57:52:57:47:b2:
a5:2f:0a:89:ce:02:c1:3d:30:90:8c:de:db:9e:51:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B9:07:DC:D3:77:47:1A:3C:24:E8:DC:67:45:08:38:93:F5:23:42
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8f:f9:3f:45:36:7c:68:43:4c:ee:e5:4d:3e:61:3f:6f:96:
e9:74:b0:0f:dc:ac:88:af:f6:18:c9:c8:d5:d9:e9:8a:c8:7f:
0d:42:57:fe:42:08:06:20:6b:5c:73:65:f7:8b:2f:9c:f6:2e:
1d:f5:87:d0:36:e2:6e:40:48:81:27:b1:e1:53:9f:8a:09:91:
7b:66:53:0a:7b:3a:70:e4:72:46:1f:87:63:fd:8e:42:ef:ee:
fc:ec:d2:e5:3b:9c:bc:19:9c:04:be:eb:81:26:25:1b:12:de:
5a:21:97:f7:c5:d4:c7:4e:48:1f:d6:2f:38:56:7a:26:b4:9d:
90:68:a1:1d:24:a6:83:38:5a:0b:67:61:ea:68:14:59:91:73:
00:fc:bc:a9:ba:51:7a:0b:d1:94:fc:20:c9:de:e7:2c:71:b9:
11:5d:c8:28:38:63:81:c4:5c:58:f0:bb:70:a8:da:2b:13:0e:
d5:12:bb:f5:70:00:8a:f8:e5:de:2e:78:d4:06:df:34:43:96:
c0:79:bb:02:2b:77:25:60:3d:cd:f8:d9:20:2d:8d:4a:db:c4:
3f:0e:32:93:35:b3:33:12:c8:93:e5:06:fe:c3:41:74:08:9c:
12:bb:f8:13:13:1e:15:13:4a:09:bd:26:f4:a5:89:c9:c2:e0:
2c:7f:94:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 16:17:22 2026 by rpki-client