Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
File: r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json)
Hash identifier: DrSPwtysD77MlU2yW0n0YVfZ3z7g8WixALEvJy8sXFI=
Subject key identifier: 98:32:45:A2:B0:9E:2D:94:10:DB:BD:29:C9:D1:E5:35:B4:A9:3F:92
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial: 019CAB349D808257512F2BDBD67E572846EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
Manifest number: 184F
Signing time: Sun 01 Mar 2026 21:01:17 +0000
Manifest this update: Sun 01 Mar 2026 21:01:17 +0000
Manifest next update: Mon 02 Mar 2026 21:01:17 +0000
Files and hashes: 1: pGuiUPTzNVEj8gsY0UXNUUTe-I8.roa (hash: 7a5tYZBHMUkgDW6nc9qBaBj8IfMsbXMdhTCvRcADwqk=)
2: p__Ljf9fbtB14fFLA3bn-BJKRV0.roa (hash: 5UgXfWB96o5m7QwdXIFEVhhiyZqKscYo5S/m82Eg2zo=)
3: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: wFJvXDYj/Y0eiK9l2LNS4UAgP8FKUlkZXPjjqGwp8XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:9d:80:82:57:51:2f:2b:db:d6:7e:57:28:46:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Validity
Not Before: Mar 1 21:01:17 2026 GMT
Not After : Mar 2 21:01:17 2026 GMT
Subject: CN=983245a2b09e2d9410dbbd29c9d1e535b4a93f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:15:4e:8a:db:d3:67:f2:fe:8a:d9:ca:9c:
fb:11:75:40:19:2d:b6:fd:49:f1:3a:45:d3:f4:e9:
76:1d:b1:85:d5:5b:94:38:63:e7:eb:45:70:9f:46:
41:70:bb:41:c3:3c:06:90:35:57:31:53:54:25:81:
c7:16:c8:1f:14:83:2d:4f:77:b2:05:f7:9e:80:0a:
b5:4b:a7:f4:94:87:19:69:d4:c3:6b:6c:dd:70:c2:
75:f5:48:99:72:a2:31:19:47:b6:93:36:d8:63:20:
62:99:c3:47:bc:9a:88:a7:e7:e0:0b:ad:91:a9:e7:
b1:38:25:7c:d9:89:b4:ec:6f:03:2a:63:a3:3e:7c:
59:04:9d:ba:00:8c:8f:5b:58:7f:d1:f5:86:73:c1:
19:45:21:e3:a3:bf:bd:1e:40:21:b1:40:58:d5:0c:
23:16:56:e5:1f:1c:79:61:dd:0d:a8:a9:9b:12:8f:
2f:ba:76:1d:3a:2f:25:cf:fa:93:02:59:31:cf:17:
d8:ef:85:c6:68:db:4c:7c:74:44:5b:bc:b6:4b:40:
e9:3b:02:84:13:18:35:99:85:fb:26:c3:c6:f4:c8:
ed:8e:e4:a4:ad:cf:e6:8e:7b:87:9b:a8:99:dc:50:
f0:7e:56:ed:5a:62:cb:7f:f9:d2:32:4f:e4:20:16:
bc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:32:45:A2:B0:9E:2D:94:10:DB:BD:29:C9:D1:E5:35:B4:A9:3F:92
X509v3 Authority Key Identifier:
keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a8:bc:f6:57:af:c4:6c:6f:f4:10:e6:44:9d:63:30:06:c3:
55:90:3b:7e:0f:59:c5:44:b0:93:44:bf:0e:89:27:b5:79:ef:
cd:02:7a:9e:2a:a5:f3:e3:56:63:49:96:52:eb:16:e8:97:e5:
83:53:4e:16:72:b3:11:0f:e0:93:4a:b6:79:f1:f8:35:55:fd:
39:c5:30:d9:05:77:2e:97:dc:8e:40:a2:ff:af:20:96:e6:e6:
75:26:e1:f7:51:dc:9d:38:fb:6e:5c:8c:58:0b:9f:39:95:14:
5d:6c:0b:53:ab:3f:ea:d2:6d:8b:87:3b:75:07:4c:c5:fa:6e:
6e:87:9d:3a:29:1c:53:47:d2:84:fd:49:b1:01:8e:29:64:eb:
a3:90:1e:fc:6e:c3:97:a6:ed:ca:c1:25:94:5b:6a:42:65:ca:
55:9d:81:70:28:9c:04:38:f9:d6:9a:9a:47:51:a8:f4:2e:b7:
e9:25:32:b6:51:e8:57:62:51:f1:34:2d:87:a2:57:65:42:39:
9f:4e:fc:30:55:8e:11:f7:c8:77:4c:be:af:d5:40:e5:7f:77:
5c:73:65:c7:fc:63:1e:40:8c:1d:c6:c0:8e:25:61:e6:04:59:
6c:7e:9b:38:fb:35:90:6d:3d:53:1f:c0:d7:3b:fb:9a:3b:01:
14:0e:ca:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:53 2026 by rpki-client