Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
File: r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json)
Hash identifier: qQ6K1JGjWnq5b2ttM3i21f9g5w7KN+coVf2C2UM2aKk=
Subject key identifier: 2B:8D:EF:C5:77:C9:2E:A4:44:B5:B7:DB:89:F8:ED:80:40:39:E3:EB
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial: 019DA453ED8BDE8D838EA7F447752126BB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
Manifest number: 18D0
Signing time: Sun 19 Apr 2026 06:00:56 +0000
Manifest this update: Sun 19 Apr 2026 06:00:56 +0000
Manifest next update: Mon 20 Apr 2026 06:00:56 +0000
Files and hashes: 1: pGuiUPTzNVEj8gsY0UXNUUTe-I8.roa (hash: 7a5tYZBHMUkgDW6nc9qBaBj8IfMsbXMdhTCvRcADwqk=)
2: p__Ljf9fbtB14fFLA3bn-BJKRV0.roa (hash: 5UgXfWB96o5m7QwdXIFEVhhiyZqKscYo5S/m82Eg2zo=)
3: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: OqaEiZXWJW4a232vao+oxZeB7dCZ5WGMjiularuZ01Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:ed:8b:de:8d:83:8e:a7:f4:47:75:21:26:bb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Validity
Not Before: Apr 19 06:00:56 2026 GMT
Not After : Apr 20 06:00:56 2026 GMT
Subject: CN=2b8defc577c92ea444b5b7db89f8ed804039e3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:48:e0:f6:81:d5:d1:b2:18:cc:d9:49:ca:
11:b7:78:46:0d:8c:c2:f6:32:bd:49:1a:e1:40:85:
79:aa:b3:7d:34:80:31:81:3f:62:ca:ea:c8:a2:27:
e3:9e:cf:8d:1c:02:e6:d1:b4:28:65:b0:cf:ab:49:
d7:03:35:7a:a4:a8:19:7f:3d:33:49:4d:fe:21:21:
07:d8:1e:84:61:78:16:6d:6d:dc:c2:de:29:90:06:
fe:13:28:35:84:3c:75:07:7e:e8:cb:b0:0d:e5:41:
7e:f0:b7:d0:20:87:0e:92:f2:ec:1a:61:54:1b:66:
34:f5:bf:26:a1:6a:8e:31:d2:80:82:c8:cf:cd:8b:
f1:c9:c8:b0:50:bf:fb:27:db:08:39:6c:60:1e:9f:
38:3d:70:d5:ae:50:e4:c9:a4:22:cf:be:c0:2b:da:
dc:79:aa:39:6e:96:3f:fc:c1:12:36:53:d3:11:98:
42:23:c0:e9:fb:29:45:b0:47:1f:ec:98:e1:9b:b9:
37:48:0d:25:7f:94:3f:1a:5f:cd:72:99:3a:be:c3:
65:b9:20:81:cc:dc:7c:c7:2a:c4:57:f2:7d:e2:70:
7f:cf:78:6c:8d:8a:97:76:a1:91:fe:b7:7d:ef:49:
33:8f:6a:30:d9:db:d2:1c:0c:ad:5e:a0:b2:d8:c4:
ab:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8D:EF:C5:77:C9:2E:A4:44:B5:B7:DB:89:F8:ED:80:40:39:E3:EB
X509v3 Authority Key Identifier:
keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7e:79:a3:6b:cb:97:8c:1e:82:d4:24:b6:82:bd:48:91:3f:
e2:27:a6:45:8d:81:52:74:0f:a3:cb:b2:6c:00:ea:09:0f:b7:
52:7c:80:eb:b6:aa:01:c3:2b:27:64:98:08:91:02:ba:db:73:
4a:bf:65:aa:88:4c:e0:4d:8d:ed:cb:a3:fb:db:81:a8:11:c1:
34:ad:a0:ee:24:b7:e1:ff:94:7c:03:b1:e1:a3:e8:e9:4f:64:
ca:84:79:5c:cc:ca:49:37:77:b5:b9:b3:ed:0c:4c:3d:b6:77:
38:7f:2c:6f:5f:6b:0e:be:4e:9e:89:ce:8f:fd:f5:ca:42:61:
1b:d1:bf:71:c6:30:94:34:6b:94:5d:80:38:63:03:d4:2d:0e:
7d:06:f1:a3:c7:07:ba:69:cf:4e:53:39:1e:f4:39:1d:ac:b0:
17:9d:a2:f2:0c:95:27:4b:45:d1:ee:bb:a8:9f:64:88:ef:ea:
ae:6c:2e:bc:d3:12:0d:2d:71:ba:82:f2:bf:c3:97:b3:86:9a:
83:f5:45:d9:e7:e2:dd:41:af:9a:92:04:58:60:55:e6:ce:a3:
f7:7d:ad:9e:fc:97:2c:7b:e0:12:3d:40:2b:37:2e:12:d9:d3:
3a:db:f8:3d:0f:91:3f:7d:3a:93:f7:19:f4:7d:59:af:11:e6:
e8:d9:1b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:26 2026 by rpki-client