Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: ZYfCEfv1lmR4pYtXMh3HKSFbOogrqrTwhdxCfM9m9QA=
Subject key identifier: 46:4E:19:0A:5D:CA:6D:C3:EB:11:90:4A:EB:82:DF:42:94:DC:B6:38
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01A0BD9D7A0D538C1B99781B7CFCDDC8BEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 162B
Signing time: Sun 20 Sep 2026 07:00:09 +0000
Manifest this update: Sun 20 Sep 2026 07:00:09 +0000
Manifest next update: Mon 21 Sep 2026 07:00:09 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: FO3MA0egni6UKRMl1pjlDW7FFGe8glfl6flBl+zFU0w=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9d:7a:0d:53:8c:1b:99:78:1b:7c:fc:dd:c8:be:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 20 07:00:09 2026 GMT
Not After : Sep 21 07:00:09 2026 GMT
Subject: CN=464e190a5dca6dc3eb11904aeb82df4294dcb638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:4a:9c:07:34:dc:33:c1:51:ea:69:ce:dc:
0f:2c:ef:a0:a5:aa:21:e0:5f:e7:3d:04:fa:2d:04:
46:85:1e:89:de:f1:e2:8e:e0:48:3b:21:8b:4c:26:
eb:82:24:94:7b:ed:2b:61:13:f1:db:3f:60:b9:3f:
81:53:4e:e2:bb:dd:01:b0:95:43:01:82:1a:15:5d:
c2:73:6b:82:33:1b:3f:12:24:08:e2:63:68:40:97:
2a:2b:ba:ab:ee:aa:c8:8c:64:7e:13:3c:1d:88:10:
ec:48:6d:05:59:76:0a:ab:db:7d:ba:d9:cc:df:db:
85:ab:5b:b9:8f:3d:4f:ff:95:de:cf:b5:3e:59:b0:
92:d0:6f:e7:87:2b:ef:70:30:43:c4:f3:92:c9:ed:
ea:60:a6:eb:6d:31:d6:65:01:2e:e1:14:a3:cc:ba:
52:d6:d1:ca:09:67:ce:aa:d7:85:94:db:8a:54:8d:
87:60:5e:e6:f1:54:51:72:fa:18:8c:c0:c6:8e:36:
41:94:bf:77:db:4b:d0:f5:d1:d3:a7:3b:c1:19:bd:
fa:9c:fb:b0:07:69:ec:30:05:4e:f3:ce:4b:ef:d2:
d7:cf:5d:ee:a5:cf:7b:11:c0:52:db:eb:55:7f:6f:
0b:fe:e5:4e:d3:ac:2d:8b:d5:ce:bb:72:6d:2d:ce:
2e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4E:19:0A:5D:CA:6D:C3:EB:11:90:4A:EB:82:DF:42:94:DC:B6:38
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e1:26:0b:8a:eb:cb:1c:88:b9:38:ab:ba:cb:8d:37:27:af:
f8:7b:bc:df:90:2d:64:1c:a8:06:d9:ed:8d:44:1b:e1:06:51:
08:4e:20:87:5d:81:d6:20:a9:05:9a:f1:e0:c5:06:6c:87:68:
9d:02:c0:27:41:d0:d5:ae:38:87:86:96:78:e7:1f:07:72:de:
45:da:b0:d7:f8:ef:ff:fb:da:54:02:e1:b7:6a:fd:5f:e0:9a:
09:69:84:2b:e3:e1:57:7b:c6:8a:e3:37:5d:e8:26:3e:e7:59:
56:e9:9d:06:d7:ec:7f:1e:0d:05:b7:37:b5:46:ee:ef:e1:f7:
48:8a:71:f7:f7:d3:e2:74:24:68:5f:f1:24:c6:44:bb:5e:e5:
69:c4:ee:1d:22:93:6e:6c:f1:ca:8d:14:fe:c8:e4:14:53:3d:
54:4f:af:92:40:bb:03:f2:06:a0:68:a5:d9:f0:ad:5b:7f:74:
93:10:8f:4a:7c:2c:82:a1:81:90:3e:fa:49:1d:86:78:5d:64:
c0:69:47:58:01:c9:54:7d:3a:55:1e:82:de:8a:d6:ce:c1:8a:
31:ed:e6:c8:15:77:d3:14:20:34:53:5d:4b:e8:24:05:90:31:
9f:96:4c:cc:c9:2b:55:82:cc:1a:f9:13:29:e3:a0:3f:c9:b0:
37:51:91:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:00:10 2026 by rpki-client