Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: HBsyuAxUsadi9HbJdUhlfBzDd9Bx8/Tj5NzoY1RiqQc=
Subject key identifier: 60:86:34:EF:E8:80:0C:72:BA:92:6C:F1:9A:C4:5C:1D:59:A0:8F:3B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019FAB6364D8FD46742D6B31B3955F6C0164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 159D
Signing time: Wed 29 Jul 2026 01:00:45 +0000
Manifest this update: Wed 29 Jul 2026 01:00:45 +0000
Manifest next update: Thu 30 Jul 2026 01:00:45 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: dKoLcn6lARoOyf4tomL5JKWa2ZtwZZgWS2RXNwlijaU=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:64:d8:fd:46:74:2d:6b:31:b3:95:5f:6c:01:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 29 01:00:45 2026 GMT
Not After : Jul 30 01:00:45 2026 GMT
Subject: CN=608634efe8800c72ba926cf19ac45c1d59a08f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fe:d0:bf:c7:d8:7b:d1:09:44:f5:d8:1c:14:
31:3d:3c:e7:f2:a5:95:1b:61:85:6c:37:5b:be:df:
38:ad:35:13:e5:f9:1b:df:17:19:5d:7e:6e:cd:1c:
fa:9f:32:30:56:b1:36:1d:6d:e3:b3:66:5b:53:61:
f1:0f:bd:46:06:38:2e:0a:a2:fa:04:be:12:02:6e:
4d:56:60:45:31:39:1b:11:78:a3:9e:ae:6b:7c:c2:
ef:30:2b:63:d7:37:25:5a:25:cc:56:e4:04:7a:88:
7c:cc:28:25:d8:e4:f4:5c:56:e3:68:1d:81:57:ec:
3d:60:da:6a:c8:41:6c:8d:58:48:32:11:79:fa:c0:
9c:40:9e:b1:71:70:3e:19:97:e0:dd:c7:92:3d:90:
41:d6:3f:54:8b:4a:ae:26:8d:f6:2f:ef:2b:d9:e7:
36:72:5f:25:3e:2a:6d:e7:77:74:3e:67:d3:4b:aa:
ff:b1:a1:14:fc:3f:1a:47:a3:e3:cf:05:68:b0:91:
48:bf:12:53:c1:04:36:79:30:3a:93:e7:aa:dc:5a:
bf:56:b8:fd:ea:c5:11:62:a0:3c:4b:ab:8c:24:5e:
f8:84:c4:5d:5d:aa:c5:77:64:19:61:c8:21:6b:43:
37:41:40:b4:6a:b5:eb:21:6e:52:18:fd:1e:02:d0:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:86:34:EF:E8:80:0C:72:BA:92:6C:F1:9A:C4:5C:1D:59:A0:8F:3B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:11:e4:ca:c8:b8:43:62:f9:ea:75:61:6b:67:ae:e5:aa:85:
9b:c9:c4:ae:47:28:89:71:85:c9:e3:6b:c5:7a:ab:79:7a:72:
73:fc:64:38:ac:fa:50:5e:d4:19:dd:c9:42:cd:29:a1:5e:13:
14:60:90:b1:19:2e:ac:8d:c6:9c:a2:9a:18:53:3b:4b:3c:f1:
f3:6e:21:30:0d:c9:0a:dc:ad:54:32:81:fc:26:60:85:57:67:
d0:59:db:c4:47:f5:2e:ed:3b:2c:ac:f7:ba:a6:be:bd:66:02:
46:19:fd:17:e9:31:77:7a:6c:f4:cf:97:f3:6d:8e:5e:eb:25:
a3:b1:81:61:8d:8a:52:6a:63:b9:bf:46:6f:4f:e8:b1:a4:da:
6f:6a:c1:01:12:f1:b5:af:e7:91:3c:e7:86:23:a9:9d:09:2e:
04:7c:3b:d0:04:23:c1:a3:aa:00:8d:71:ba:32:66:c9:5c:4f:
50:ec:cb:8f:6d:37:88:7c:bb:00:19:ae:07:94:37:0f:ff:65:
56:e9:0b:c0:b0:95:86:b0:4d:6a:0b:af:b1:c7:6b:90:39:4c:
f4:9a:3b:c6:90:c5:af:d2:85:8d:31:f9:2e:7a:94:26:ca:1c:
66:36:e2:d6:2c:64:99:0d:98:1a:6b:53:03:fa:32:93:87:fd:
c8:af:ca:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:55:36 2026 by rpki-client