Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
File: _e3ZOtbKqmCtSfD5N32Kq_h34ts.mft (raw, json)
Hash identifier: yTVTLqnrCpHNNT7GmldCZx77LaNhWa8uOlRfonnau8M=
Subject key identifier: BF:AF:43:55:82:A3:15:5A:18:4A:EC:F3:1F:0C:E2:F0:93:3C:40:55
Authority key identifier: FD:ED:D9:3A:D6:CA:AA:60:AD:49:F0:F9:37:7D:8A:AB:F8:77:E2:DB
Certificate issuer: /CN=fdedd93ad6caaa60ad49f0f9377d8aabf877e2db
Certificate serial: 019DA29BECF656D6F2EC880B76103DE36B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
Manifest number: 0A45
Signing time: Sat 18 Apr 2026 22:00:20 +0000
Manifest this update: Sat 18 Apr 2026 22:00:20 +0000
Manifest next update: Sun 19 Apr 2026 22:00:20 +0000
Files and hashes: 1: _e3ZOtbKqmCtSfD5N32Kq_h34ts.crl (hash: rXpFcyjozcEez1ezc5ZddCczw79LJDkyC9+/493QncQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9b:ec:f6:56:d6:f2:ec:88:0b:76:10:3d:e3:6b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdedd93ad6caaa60ad49f0f9377d8aabf877e2db
Validity
Not Before: Apr 18 22:00:20 2026 GMT
Not After : Apr 19 22:00:20 2026 GMT
Subject: CN=bfaf435582a3155a184aecf31f0ce2f0933c4055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:f0:c9:d2:81:e4:78:53:48:75:66:56:af:
99:f1:f5:88:13:34:17:48:a9:36:b9:91:6f:77:5f:
21:98:a8:7b:ad:cc:ed:74:87:f2:62:52:6d:e6:fa:
ba:8a:89:c8:e6:7c:91:69:d3:4d:cd:94:79:fa:e5:
41:9a:cb:35:be:58:76:92:ff:3c:b1:9b:f7:11:86:
c7:f1:3e:a8:97:71:34:89:9c:7e:52:a4:39:ee:04:
7d:c5:54:4f:4a:61:4f:1d:66:bb:19:f5:80:34:63:
5d:ca:aa:ca:69:b1:12:f1:49:83:a0:40:67:27:aa:
cb:6c:23:65:ed:9b:5f:47:51:6d:d8:3e:25:8c:f8:
fb:3d:1b:6e:4e:ab:a4:f2:3d:d2:07:f5:63:98:3f:
58:23:b4:ed:63:90:e8:02:d7:90:7f:41:5b:8e:b6:
20:d7:a9:47:ce:fd:5b:a7:da:b6:7a:f1:8d:06:0b:
88:24:a6:56:1f:5f:79:f0:9d:22:11:2b:12:d8:9b:
ed:38:77:39:8d:37:1f:4b:fe:f2:98:5e:66:ff:55:
40:92:17:ce:e1:e0:b6:ab:06:dd:c3:bd:7e:38:83:
b8:95:41:45:1c:d8:ad:b0:76:a5:59:e7:05:37:f2:
75:1a:92:cc:cb:fc:ad:3c:3b:26:36:11:60:48:19:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AF:43:55:82:A3:15:5A:18:4A:EC:F3:1F:0C:E2:F0:93:3C:40:55
X509v3 Authority Key Identifier:
keyid:FD:ED:D9:3A:D6:CA:AA:60:AD:49:F0:F9:37:7D:8A:AB:F8:77:E2:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:60:22:fe:1f:31:da:42:4a:96:f2:23:7d:ca:d8:48:93:9c:
2d:c9:77:1b:b1:d2:76:6a:c2:86:a9:80:d5:59:97:44:1f:8f:
43:35:ce:4a:91:83:8c:ae:7a:d9:cd:e8:c0:8f:94:8c:1e:00:
53:c1:5a:41:a1:22:4b:91:7e:db:07:4f:90:82:7c:b5:ac:00:
3e:65:3a:04:e1:5f:2b:f7:18:1c:bc:e5:50:43:66:75:3b:81:
fc:9f:24:52:6c:62:ad:40:62:25:49:81:c2:5f:78:27:f0:1f:
1a:62:0d:72:19:ce:2a:71:e1:71:1c:e0:a6:8d:19:3a:24:5f:
27:0c:89:8e:e6:1c:9c:4c:dc:0d:cd:09:06:5a:36:1e:48:10:
a5:32:e4:a8:30:cf:11:56:54:de:80:51:a6:e5:45:bb:06:59:
ce:dc:94:4b:36:22:05:d2:e8:9a:f3:ab:e5:ef:90:02:a4:5f:
0d:a7:45:2d:f3:da:dd:19:10:76:df:08:4c:82:27:40:85:16:
40:67:cc:c1:9f:25:9a:83:93:ab:70:1d:4e:67:10:5e:20:e4:
c8:53:ae:d8:d1:59:d4:a1:7d:6c:4c:97:c5:4b:5c:1a:fd:10:
4c:a5:82:d4:5c:8f:ab:be:4b:35:1f:8f:3e:d1:ea:7c:52:51:
8d:6f:e9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:59 2026 by rpki-client