Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: YLsTVQHrfW/sy6PN9iRqzGLGd6ZE/9Z70QDQKdsbDlY=
Subject key identifier: 67:7D:38:9C:40:FB:6D:09:7A:B8:38:9C:64:2C:44:C6:EC:94:00:A8
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019D9C2D5A6C8F4F0B7E30A394259BED0141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 148C
Signing time: Fri 17 Apr 2026 16:01:51 +0000
Manifest this update: Fri 17 Apr 2026 16:01:51 +0000
Manifest next update: Sat 18 Apr 2026 16:01:51 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: LZTMheNKz3JgyHvkYnwrp2Pm4d+aFVxJ7eUe8wtbKAE=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:5a:6c:8f:4f:0b:7e:30:a3:94:25:9b:ed:01:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 17 16:01:51 2026 GMT
Not After : Apr 18 16:01:51 2026 GMT
Subject: CN=677d389c40fb6d097ab8389c642c44c6ec9400a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:20:6d:09:1a:48:2f:ef:65:27:8e:df:1f:
a9:e3:00:a7:48:f9:f4:1d:64:6d:16:ca:48:ae:f9:
5c:7b:3f:36:83:6f:cf:d9:80:33:6c:d5:9a:c0:32:
a4:67:b5:b1:da:36:15:7d:e7:f0:f3:f9:cc:0f:bc:
18:19:a2:92:77:35:85:00:ed:68:42:f7:f6:8c:60:
77:0a:27:04:18:1e:9a:1d:9c:60:19:f8:5f:cf:1d:
29:bb:18:0a:16:f3:62:29:51:37:4f:4e:3f:4b:76:
be:1b:b6:29:1d:50:14:46:12:26:f2:86:ed:31:d6:
38:c7:8a:3d:55:09:a0:91:88:07:78:ac:9f:84:50:
94:3c:68:34:de:cb:b6:df:0b:b4:34:bc:5d:7d:34:
55:83:e3:6d:d3:85:e9:3e:97:4b:52:77:a0:84:0a:
3b:c8:b9:db:c3:27:3c:2f:89:29:04:cd:27:77:4a:
c5:39:2d:5f:33:ed:23:10:7f:7d:a4:ab:d0:a3:71:
14:a2:20:19:3d:59:43:ea:31:eb:51:0a:e9:ff:64:
91:25:27:1d:31:dd:d6:f1:53:fe:1a:54:77:25:ab:
ad:ef:b6:4a:89:2d:cf:1d:03:65:09:5c:e5:1c:e6:
21:b3:0b:89:55:3c:d4:ef:25:b9:a5:c8:54:c1:94:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7D:38:9C:40:FB:6D:09:7A:B8:38:9C:64:2C:44:C6:EC:94:00:A8
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4e:2d:15:95:ee:b3:f6:68:f4:85:96:55:94:5b:07:ff:d3:
53:37:21:d7:88:be:85:69:f1:6f:49:33:3d:cf:b9:15:8f:12:
61:7b:a0:f7:c2:f0:44:c0:1f:04:ae:48:1e:8b:c6:d1:a8:2f:
7a:72:82:35:e6:24:e0:f0:c4:5b:6f:06:20:c7:27:78:f3:c8:
45:25:48:aa:0d:2b:fc:71:29:fc:fd:a8:ee:e7:1b:a4:35:00:
ac:a9:b4:9f:89:f6:c5:dd:29:55:d8:81:bc:95:ed:23:59:a6:
96:c9:58:7c:26:41:2f:51:b0:1c:28:da:b0:bc:2b:5c:1b:f3:
c2:5d:a0:e3:b9:46:93:fe:8a:f8:42:59:6c:d1:b5:15:fe:ba:
9a:03:73:ba:e3:d9:d0:fd:7f:1d:f5:af:83:a8:5a:4a:bb:c4:
93:6f:80:1d:d6:a7:2e:26:bb:a9:68:0d:e9:82:75:d7:fb:93:
a4:89:f9:00:ad:f2:ce:97:9e:50:a1:be:84:81:66:af:de:10:
84:80:78:b8:be:78:8e:3a:9c:e6:f2:e5:40:4a:08:46:02:68:
e5:65:e5:86:7e:51:2e:3d:bc:53:e2:90:6b:25:89:03:9a:2c:
b6:6b:60:4f:ae:5f:f2:09:c3:ed:db:5a:34:35:ac:85:da:6e:
9c:93:f1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:36:04 2026 by rpki-client