Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/unmqGjeYycrvsvZ2ozi0Elv62f8.mft
File: unmqGjeYycrvsvZ2ozi0Elv62f8.mft (raw, json)
Hash identifier: IRewlSKGvi1bbeAygviru70RqXQ/V8iwHEkFy3oMKos=
Subject key identifier: E3:D6:14:42:C0:25:B2:2A:60:67:59:88:E6:22:EE:96:AE:DA:C5:43
Authority key identifier: BA:79:AA:1A:37:98:C9:CA:EF:B2:F6:76:A3:38:B4:12:5B:FA:D9:FF
Certificate issuer: /CN=ba79aa1a3798c9caefb2f676a338b4125bfad9ff
Certificate serial: 019D9C2CC1B3E8C0B00EB07C1DED23290E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unmqGjeYycrvsvZ2ozi0Elv62f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/unmqGjeYycrvsvZ2ozi0Elv62f8.mft
Manifest number: 3B
Signing time: Fri 17 Apr 2026 16:01:11 +0000
Manifest this update: Fri 17 Apr 2026 16:01:11 +0000
Manifest next update: Sat 18 Apr 2026 16:01:11 +0000
Files and hashes: 1: ZP8E-oU1X82ERQFhp2szDKgGh6s.roa (hash: vgE55UCmHiD6QoDqh4vXEPoiWkg6dPFnrVeHMaTduW8=)
2: unmqGjeYycrvsvZ2ozi0Elv62f8.crl (hash: fQfMnSyeVyfrhEcj1tFpJ3d8bNve6/vQxRXs+uj7TvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/unmqGjeYycrvsvZ2ozi0Elv62f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/unmqGjeYycrvsvZ2ozi0Elv62f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/unmqGjeYycrvsvZ2ozi0Elv62f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:c1:b3:e8:c0:b0:0e:b0:7c:1d:ed:23:29:0e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba79aa1a3798c9caefb2f676a338b4125bfad9ff
Validity
Not Before: Apr 17 16:01:11 2026 GMT
Not After : Apr 18 16:01:11 2026 GMT
Subject: CN=e3d61442c025b22a60675988e622ee96aedac543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:be:0c:b9:3e:46:fa:f3:a6:d8:6f:4d:d9:
31:26:7c:2b:40:a8:66:45:f3:3c:28:b0:6f:b2:cc:
1d:c5:24:ab:15:51:86:3a:82:63:ac:80:cf:0a:97:
d1:f4:6f:00:8e:43:5c:1b:ec:16:1e:9d:40:18:3e:
42:6c:6e:e2:7a:14:ed:2d:6b:f1:fd:ff:c9:59:9f:
10:5e:a3:79:c1:a1:a7:2b:28:f0:6c:be:04:90:73:
40:d4:5c:f4:72:7f:a2:d4:8e:b4:b5:0c:70:8f:97:
fe:1b:00:ae:5c:07:8d:e5:b3:b3:36:be:72:1e:30:
23:b8:54:be:6b:74:9c:0c:9a:79:74:07:8d:09:9d:
f3:c2:8d:fc:10:0d:51:c3:3f:60:71:6e:80:91:1b:
26:4c:e8:5e:89:2c:5e:75:c1:b8:c0:b6:5a:3a:9e:
d8:0f:b9:1f:3e:9b:c1:b5:00:4f:3d:3b:80:e7:6d:
96:24:69:24:57:ce:80:69:b8:98:3b:b0:08:0c:89:
81:81:34:c0:e7:21:a2:7b:d6:9a:cf:9c:78:16:06:
93:06:4f:82:39:dd:5b:8c:fb:a0:df:76:0a:6b:16:
7a:7e:c5:b0:2d:8f:fe:64:4d:6b:58:32:58:8f:5d:
51:48:79:ab:5e:cc:7f:68:f1:f1:a6:90:8f:86:e2:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D6:14:42:C0:25:B2:2A:60:67:59:88:E6:22:EE:96:AE:DA:C5:43
X509v3 Authority Key Identifier:
keyid:BA:79:AA:1A:37:98:C9:CA:EF:B2:F6:76:A3:38:B4:12:5B:FA:D9:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unmqGjeYycrvsvZ2ozi0Elv62f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/unmqGjeYycrvsvZ2ozi0Elv62f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/unmqGjeYycrvsvZ2ozi0Elv62f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:87:fe:32:54:2c:c7:e3:36:8d:cf:9d:b5:de:66:e9:64:22:
42:16:4e:09:64:67:60:cb:fd:07:b1:12:93:bc:2f:f5:50:69:
77:9b:12:9f:4a:b8:cd:9a:26:df:24:08:d7:f6:56:0e:fb:80:
10:32:68:0d:f2:1d:03:2b:30:36:aa:87:04:e8:94:83:f3:b2:
a8:1c:da:a6:da:69:a5:dd:52:70:a2:99:1d:d3:9a:91:ca:65:
20:6c:9b:7b:ee:5a:4d:6f:7c:75:ba:d8:36:15:3d:88:bf:41:
d3:09:6f:28:cc:e1:f1:a7:ca:74:c8:10:ea:a1:31:18:dd:b8:
95:da:9c:f2:d0:3e:65:e9:f8:11:9b:99:be:80:f2:1a:ad:85:
8d:3a:70:d4:3b:0a:57:c1:cb:20:62:15:c2:a4:3e:25:84:97:
29:9b:e6:e9:40:41:c9:8c:c4:fd:9d:c8:2d:c3:2c:b8:82:41:
77:88:08:c2:04:82:f7:77:82:1e:96:5e:37:e7:ba:5d:03:08:
cb:ec:e1:95:15:88:4d:b1:07:d4:59:d4:74:e4:c6:c0:45:77:
41:45:5f:d5:25:92:4d:75:97:72:32:90:65:85:bc:4f:e3:a7:
40:c3:38:54:94:af:77:5c:33:12:f8:f2:ce:b0:b6:9b:f1:01:
a1:d3:d7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:00:51 2026 by rpki-client