Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: KHNtl8j1W5aY/EEaWNuQWm1t6hyN+3Pn98iko6KsYEo=
Subject key identifier: 5E:20:D0:83:C3:F2:0A:1B:3C:E6:A3:65:57:AD:54:B1:5D:C4:23:20
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01A13D133BE738AA36D1FBB801B52073E866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 166D
Signing time: Thu 15 Oct 2026 01:00:33 +0000
Manifest this update: Thu 15 Oct 2026 01:00:33 +0000
Manifest next update: Fri 16 Oct 2026 01:00:33 +0000
Files and hashes: 1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: /XaJpOQca/QQayzxV+ZUOTw2FQHL3fOn/cXYogm2Lro=)
3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:3b:e7:38:aa:36:d1:fb:b8:01:b5:20:73:e8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 15 01:00:33 2026 GMT
Not After : Oct 16 01:00:33 2026 GMT
Subject: CN=5e20d083c3f20a1b3ce6a36557ad54b15dc42320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:b3:d2:32:b8:b4:ca:8e:fd:e3:b1:6a:c6:
b2:0f:37:a1:a6:61:2f:8a:f2:9e:fb:eb:53:44:ed:
20:cd:e3:5c:1f:05:25:44:35:25:46:b5:72:77:f0:
ba:5b:b6:b4:09:79:32:ac:57:db:a9:38:37:f9:84:
af:c1:13:1e:fb:07:64:19:03:9f:33:b0:eb:a1:9f:
04:28:41:c8:31:5f:74:cd:c0:89:61:95:60:5a:e2:
fb:5f:7b:5c:5a:63:bf:b6:2e:f4:0a:5a:7e:4c:09:
0b:02:51:88:63:ff:a7:bb:58:75:74:fb:43:d3:08:
72:2b:1d:40:36:7e:f6:e2:61:0d:0f:64:11:52:5c:
6c:30:06:6b:02:3b:a1:8d:79:cc:76:75:eb:ce:3a:
17:43:e3:06:2f:1e:2a:d1:fa:4a:74:e6:d3:47:29:
f7:83:6c:ce:68:da:35:ae:5f:1c:83:fa:33:6b:14:
7a:2e:b8:70:27:91:ee:6b:46:81:ea:1f:57:8c:ce:
10:15:35:2b:6c:b5:74:57:6d:af:cd:a0:87:71:7e:
fc:a3:74:d0:6c:2b:ba:70:1b:b0:cc:46:d9:b3:14:
f1:d0:0c:b5:94:f9:5c:ee:c9:5a:66:28:75:81:8e:
19:73:e1:30:3a:18:a6:12:a3:d6:3b:e7:d3:47:d9:
38:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:20:D0:83:C3:F2:0A:1B:3C:E6:A3:65:57:AD:54:B1:5D:C4:23:20
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:55:83:f0:57:e6:d2:29:ee:6e:45:74:70:fc:3f:43:49:ec:
56:ee:bc:c4:c7:3e:dd:0f:d2:b6:e3:fd:f3:ac:d7:10:7f:38:
4c:3e:a5:69:4f:fc:27:b2:e0:a0:10:af:8f:b3:b2:e3:8f:1c:
a1:d4:76:ff:00:d9:38:88:a8:31:e3:8d:76:68:b1:e2:87:53:
94:fa:a4:08:f9:15:6d:e1:6a:3e:1d:9e:77:1d:11:ac:4a:55:
2a:e0:08:cd:cf:ac:1b:1c:d5:f0:cb:de:19:50:d5:2c:0b:16:
d2:7c:55:91:0b:ee:e4:c0:39:48:4d:d4:d8:56:83:d9:53:47:
86:29:ef:9c:9c:89:4d:9c:24:01:7d:c8:99:13:34:c5:3b:ec:
be:74:38:28:1a:0e:27:e6:b0:a0:8b:38:e8:b4:a1:28:87:dc:
8d:b1:f9:cf:b9:25:ef:c1:64:43:ad:fc:e8:83:34:e8:4e:66:
01:83:9c:6d:38:18:5b:56:19:d5:4f:92:bb:ba:02:e4:5f:b1:
1c:e7:4f:5b:a8:5c:3d:6a:08:bd:46:fd:55:b5:ff:e9:97:26:
c4:df:2f:de:12:46:cc:fe:7a:e6:8d:ef:da:3c:fd:fd:17:27:
11:c7:d6:d3:94:4f:73:81:94:a0:27:b8:bc:1c:35:6a:62:09:
f9:3f:10:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:24:32 2026 by rpki-client