Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: hyf/r+hp8BJD+yautEiD8O3DCE4BLCa/AbtWatH9oQU=
Subject key identifier: 23:A8:38:88:00:7C:D6:2F:E5:BA:C0:5D:AA:2F:77:64:07:69:6F:06
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01A13F029460DDA9E62FB619C4B1A1D8F302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 166E
Signing time: Thu 15 Oct 2026 10:01:35 +0000
Manifest this update: Thu 15 Oct 2026 10:01:35 +0000
Manifest next update: Fri 16 Oct 2026 10:01:35 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: d5IN0hLbvsVzpeNDwyeGSda7qvYnL4ISrHwQ714MFFs=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:94:60:dd:a9:e6:2f:b6:19:c4:b1:a1:d8:f3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 15 10:01:35 2026 GMT
Not After : Oct 16 10:01:35 2026 GMT
Subject: CN=23a83888007cd62fe5bac05daa2f776407696f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:66:7e:de:b9:90:41:9a:97:3b:4a:ca:54:55:
09:30:5d:a4:85:70:ec:b2:13:f4:16:71:00:44:e0:
af:d5:d3:f9:80:48:19:7c:0c:e2:db:38:82:56:52:
3f:3d:dd:ce:28:5e:21:69:dc:78:8c:d2:6f:b1:46:
6e:bc:3e:18:00:73:7c:0d:ad:07:62:90:cb:05:5a:
52:30:0b:e8:86:9f:61:6a:ae:8a:92:8e:ce:f7:de:
c7:f9:bc:32:5c:88:6b:b4:fa:f2:2f:21:9d:82:08:
78:58:a3:b1:5a:31:3c:63:69:b9:09:cf:e5:a7:74:
e9:3b:f1:2d:d2:f1:6b:3f:97:d0:77:ed:7b:99:52:
2c:e8:44:38:15:20:99:b8:32:b7:56:00:98:9c:be:
5b:99:92:9e:e8:ca:93:c8:9c:11:99:32:1f:74:e9:
9d:6a:33:62:17:9d:6a:55:42:24:4a:c1:90:13:43:
3b:00:f5:8e:e3:fc:3d:d8:39:82:2f:2b:78:6f:fa:
d6:df:e1:f2:33:cb:2f:ee:08:d8:c4:b8:ec:73:c6:
c1:aa:4e:cd:ba:2b:7f:a0:cb:c0:80:ab:79:7f:02:
f7:76:c3:8d:43:02:0b:0e:99:c9:87:25:b9:c8:f9:
72:76:b1:65:8f:db:46:b0:fd:dd:c8:6c:55:ed:95:
f6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A8:38:88:00:7C:D6:2F:E5:BA:C0:5D:AA:2F:77:64:07:69:6F:06
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:37:55:99:38:bd:e7:1b:79:e5:55:16:96:c1:5a:47:89:0e:
15:3c:da:1b:8a:e2:ad:1b:46:72:44:62:16:f1:99:c2:cf:14:
31:4f:6b:2e:de:d2:ed:88:dd:1a:99:31:8e:1f:fb:18:32:80:
3b:1e:85:38:87:e7:8e:46:c5:99:3a:67:76:18:78:a7:ba:d1:
ab:69:50:dd:24:c6:0f:3d:f2:47:ed:65:27:66:c5:7b:26:74:
6c:a3:12:72:20:40:c4:ca:af:4b:98:a0:33:96:e5:d1:2c:44:
79:4a:96:81:e7:89:16:10:05:3b:4f:3a:93:b3:b6:3c:ef:a1:
c5:ba:e5:03:da:6f:be:93:96:b3:d2:95:d3:75:73:85:f1:fd:
36:d2:75:76:ed:64:1f:0e:30:16:f7:92:40:9d:2e:30:48:ce:
42:dd:e3:72:51:c9:34:7e:20:0b:15:b0:8c:53:51:bc:c1:a0:
50:eb:ea:79:65:a5:64:b1:4d:dc:b6:ee:b6:38:b8:c5:ef:e8:
24:f5:19:02:47:3e:5d:ce:05:ab:ac:f4:74:b7:76:f7:d2:16:
7b:16:e7:c1:39:51:b9:21:03:9e:87:13:4b:5f:24:d2:5c:2e:
8b:59:6f:4b:c8:07:76:ce:da:4f:19:6c:e8:0e:fe:e1:e2:9a:
ad:38:fa:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/ApRg3anmL7YZxLGh2PMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjYxMDE1MTAwMTM1WhcNMjYxMDE2MTAwMTM1WjAzMTEwLwYDVQQD
EygyM2E4Mzg4ODAwN2NkNjJmZTViYWMwNWRhYTJmNzc2NDA3Njk2ZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mZ+3rmQQZqXO0rKVFUJMF2khXDs
shP0FnEAROCv1dP5gEgZfAzi2ziCVlI/Pd3OKF4hadx4jNJvsUZuvD4YAHN8Da0H
YpDLBVpSMAvohp9haq6Kko7O997H+bwyXIhrtPryLyGdggh4WKOxWjE8Y2m5Cc/l
p3TpO/Et0vFrP5fQd+17mVIs6EQ4FSCZuDK3VgCYnL5bmZKe6MqTyJwRmTIfdOmd
ajNiF51qVUIkSsGQE0M7APWO4/w92DmCLyt4b/rW3+HyM8sv7gjYxLjsc8bBqk7N
uit/oMvAgKt5fwL3dsONQwILDpnJhyW5yPlydrFlj9tGsP3dyGxV7ZX2TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOoOIgAfNYv5brAXaovd2QHaW8GMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDdVmTi9
5xt55VUWlsFaR4kOFTzaG4rirRtGckRiFvGZws8UMU9rLt7S7YjdGpkxjh/7GDKA
Ox6FOIfnjkbFmTpndhh4p7rRq2lQ3STGDz3yR+1lJ2bFeyZ0bKMSciBAxMqvS5ig
M5bl0SxEeUqWgeeJFhAFO086k7O2PO+hxbrlA9pvvpOWs9KV03VzhfH9NtJ1du1k
Hw4wFveSQJ0uMEjOQt3jclHJNH4gCxWwjFNRvMGgUOvqeWWlZLFN3Lbutji4xe/o
JPUZAkc+Xc4Fq6z0dLd299IWexbnwTlRuSEDnocTS18k0lwui1lvS8gHds7aTxls
6A7+4eKarTj6Xg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 16:09:23 2026 by rpki-client