Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: ze/+L0ltVvFcFo8kjnq2H9CyDez3HTrBl6QuHrgVrC0=
Subject key identifier: 52:32:49:B1:E8:19:D7:D2:34:EC:48:AA:59:FD:2C:18:44:F0:33:CE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 019D2A3BBB48A5C66BC3B49D69DADC7A0055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1451
Signing time: Thu 26 Mar 2026 13:00:50 +0000
Manifest this update: Thu 26 Mar 2026 13:00:50 +0000
Manifest next update: Fri 27 Mar 2026 13:00:50 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: O1YGo62hastGVvuEw9Eqbt5dWU56Rdvi4faEkxHZUVs=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:bb:48:a5:c6:6b:c3:b4:9d:69:da:dc:7a:00:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 26 13:00:50 2026 GMT
Not After : Mar 27 13:00:50 2026 GMT
Subject: CN=523249b1e819d7d234ec48aa59fd2c1844f033ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:10:56:c4:50:af:be:4d:99:a4:45:a1:c6:
a3:c4:f0:a3:75:fd:30:bf:cc:31:7b:61:56:d7:ec:
1a:44:16:2b:c4:f8:56:a6:2d:f3:4b:80:a1:6a:8b:
9e:ad:c2:7e:b4:a8:ec:08:a3:d5:33:29:48:bf:67:
cb:4f:4d:24:71:c0:4a:00:c8:ef:4d:f5:b4:e0:93:
0f:e1:15:1f:91:2c:b5:42:47:8b:f2:61:85:2c:6c:
76:c9:4f:15:9b:7e:5d:c9:24:c4:00:3b:8a:f8:23:
28:09:7d:48:7c:93:ea:2f:9f:3b:2e:ef:2e:5a:98:
fd:65:f1:db:f1:cb:e9:ff:bb:ae:78:06:23:73:45:
a8:87:0a:f4:b8:66:d5:75:02:13:4a:b8:5e:ca:64:
dc:9e:c3:a4:a9:ec:eb:e3:12:3d:8a:ac:c8:be:3e:
ee:a6:33:0d:dd:96:af:73:cb:6f:e7:e6:32:32:0b:
c1:8f:aa:a5:68:60:47:e2:31:ec:da:c9:1e:f4:e2:
61:4d:76:b1:d5:88:2e:5c:6f:02:46:34:0e:00:d4:
05:bf:03:ac:1d:04:c8:31:30:d9:02:81:c2:88:72:
16:b0:e2:e5:b3:89:ee:0b:d1:96:42:28:d2:8c:a6:
3c:7a:ca:97:c2:11:16:4b:cd:dd:8a:1b:92:59:fb:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:32:49:B1:E8:19:D7:D2:34:EC:48:AA:59:FD:2C:18:44:F0:33:CE
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6a:9e:1c:80:a1:e9:dc:ed:fc:bd:66:ba:7a:7c:2c:7a:60:
b2:0f:84:f9:00:16:71:4a:5d:8a:8e:1a:35:b0:d2:b7:35:75:
85:f4:c2:b6:db:ec:f0:18:78:bf:5a:22:11:8c:ed:d4:7d:81:
c5:9e:de:20:68:aa:73:38:ff:d2:cc:91:45:3b:a8:e2:8b:4e:
17:2c:ce:0a:35:d2:74:4d:ea:8b:b7:c9:cf:14:25:29:ad:3b:
a5:1c:fb:dd:80:c2:bb:f9:e0:75:8b:7f:b4:1e:a6:1b:e7:bd:
c0:a1:4d:12:77:69:41:fb:5a:04:c5:1a:6f:4d:94:9e:22:e9:
1a:46:e5:e1:c2:49:5b:05:0d:f0:48:32:12:c7:18:04:6d:f3:
5c:54:40:cb:d1:15:06:d7:63:ce:75:c5:86:19:aa:cb:da:ee:
6f:35:27:f0:72:c0:95:44:a0:15:e9:a9:b5:fe:99:46:1d:ca:
b4:0b:80:92:82:a3:0d:a6:98:4a:62:8c:bf:f9:9a:f9:6c:16:
2b:66:52:00:2d:e6:3a:06:50:b1:b0:0b:30:aa:78:79:a8:f2:
d8:45:76:9c:d9:89:9b:de:ba:13:e5:08:f4:2a:fa:35:23:b7:
79:04:c2:9a:09:1c:e8:43:d0:b5:3d:6a:95:dc:d3:bf:f3:7e:
c1:60:88:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:20:36 2026 by rpki-client