Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
File: R3QefHWNSAQTtfGwBgYRKX5EA28.mft (raw, json)
Hash identifier: vj8XZh2PKG6j1pGVa6GbwCa4saExcd6Hikq7bWwHri4=
Subject key identifier: 00:AB:F4:D0:0A:AE:EA:25:C9:F4:EC:77:71:30:76:0A:61:BE:DC:59
Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
Certificate issuer: /CN=47741e7c758d480413b5f1b0060611297e44036f
Certificate serial: 019D9AAB848B154539CD5CF564E6E932C098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:00:24 +0000
Manifest this update: Fri 17 Apr 2026 09:00:24 +0000
Manifest next update: Sat 18 Apr 2026 09:00:24 +0000
Files and hashes: 1: 3IZRCOACUcLiARW2HP7kjbxOWuA.roa (hash: cLVZUJw1rLqnRks0o5eNFloDi9vUVRxfI1Y00+CjpX8=)
2: R3QefHWNSAQTtfGwBgYRKX5EA28.crl (hash: 9YZ1lPmVZvWQgr1/9DO3yCmR0e62qxPG6DmOuXd+7no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:84:8b:15:45:39:cd:5c:f5:64:e6:e9:32:c0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f
Validity
Not Before: Apr 17 09:00:24 2026 GMT
Not After : Apr 18 09:00:24 2026 GMT
Subject: CN=00abf4d00aaeea25c9f4ec777130760a61bedc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:86:22:27:7c:09:f3:34:02:5c:ab:a1:22:
d0:1c:b2:30:b4:d2:36:0f:88:ae:a3:ec:07:2b:37:
81:ec:a4:e2:8b:5b:49:b5:57:df:94:c2:ff:00:a1:
b2:5a:4d:e0:4a:bb:3b:d9:27:74:ce:b4:84:95:e0:
ec:7b:8f:98:2a:75:0d:92:80:c4:19:e0:b5:65:4a:
93:6e:d2:d1:90:69:41:a1:aa:25:aa:e4:2e:4c:48:
d0:68:d9:e8:bb:d0:54:39:15:3a:b2:1b:29:7c:71:
de:25:82:1c:43:fd:bd:d0:3f:76:34:ad:63:70:d2:
a6:d6:d5:a8:79:70:ec:46:26:c5:79:1f:2d:85:6a:
f4:3d:d2:1e:9a:e3:6f:2d:b1:c0:9c:db:54:c3:7b:
d6:3e:ff:57:c8:6a:9e:82:6f:41:cc:21:a8:9f:4d:
8d:7e:6f:1b:8e:6b:da:41:4d:2d:04:e3:71:1e:2e:
db:de:f9:a4:75:13:55:b1:31:82:69:1f:92:f7:2f:
a0:ca:2c:fe:75:98:d7:80:bd:91:d5:e6:4b:3d:ae:
b5:37:6c:8f:d9:ce:d8:5f:08:5d:f5:e6:1c:47:8e:
9a:ea:ca:81:f4:aa:2b:a9:ed:7b:ad:d2:19:68:8f:
9b:c3:e3:6f:3a:bd:1b:09:82:24:4d:55:b2:bd:5a:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AB:F4:D0:0A:AE:EA:25:C9:F4:EC:77:71:30:76:0A:61:BE:DC:59
X509v3 Authority Key Identifier:
keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:09:1a:3b:3b:ce:56:9e:97:d2:66:66:fd:93:ca:1a:18:ae:
55:b6:72:b5:ea:97:b9:37:01:52:6f:83:9d:25:f8:29:68:a4:
56:72:84:99:63:c3:1b:c3:3b:5c:cb:51:77:a1:99:06:9b:88:
0f:f5:dd:c3:83:a5:b6:8b:53:c8:39:b5:50:a3:a6:b8:8a:28:
7a:c8:82:c5:b1:8f:4e:96:7d:8d:89:f0:75:bf:6e:70:11:c3:
17:75:43:d8:d0:0e:17:b5:eb:fd:e4:cd:0c:9c:9f:18:8a:73:
22:e4:e3:01:d4:b1:38:88:0b:89:32:e9:ae:3a:88:5a:67:b2:
e8:6e:ee:d5:31:5f:67:bd:3b:6a:ee:aa:e6:40:5f:20:8f:ac:
69:ea:ad:de:d1:69:93:4c:16:8f:3d:3a:a9:eb:34:13:43:e3:
c3:16:15:f2:ab:fe:72:2b:15:7b:41:08:86:61:e9:84:10:ff:
c5:84:36:27:3a:c7:a6:63:a6:5a:83:68:b8:ab:2b:b3:81:50:
57:9f:53:ae:88:64:0a:0f:c9:68:69:59:a9:66:b1:c8:e2:c8:
fb:4d:4b:66:46:e0:e0:94:e9:55:12:d6:db:f8:66:f8:f1:69:
39:eb:53:ae:90:90:40:1b:80:04:ed:6a:98:2a:b0:47:fc:9a:
85:e4:85:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:31 2026 by rpki-client