Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier: aswhwZhhNZ4VErmSH6FyA+/Nyt66nlYITb/pygwtSRc=
Subject key identifier: A1:EA:23:FE:F3:FF:A8:C1:CF:4D:28:EC:37:61:68:3C:D7:F0:F8:AB
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial: 019DA453A7ACA58C52149A80AA32437D086E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 06:00:38 +0000
Manifest this update: Sun 19 Apr 2026 06:00:38 +0000
Manifest next update: Mon 20 Apr 2026 06:00:38 +0000
Files and hashes: 1: P7j9IEWadDPaQ_nsO00HdXrOIT4.roa (hash: czQbKrK6LqGgUhK9pjsed0KgnTQUiTmpJ6IrbxHUhzM=)
2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: o/JaU0Seud+4+f/4LeSn6TlPR8aF4fOrawKMCCk/7/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:a7:ac:a5:8c:52:14:9a:80:aa:32:43:7d:08:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Validity
Not Before: Apr 19 06:00:38 2026 GMT
Not After : Apr 20 06:00:38 2026 GMT
Subject: CN=a1ea23fef3ffa8c1cf4d28ec3761683cd7f0f8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:93:06:b2:2b:11:8f:1e:c9:df:75:f0:56:
82:cd:96:d6:3d:c0:98:e4:7d:76:35:2e:7f:99:56:
cb:31:0d:77:dd:48:04:d5:38:06:89:bb:a8:b9:a3:
42:e6:5c:95:cc:9a:da:b0:d4:98:a1:8c:cc:30:f9:
a4:96:ac:f4:fd:9d:d7:77:cd:83:54:6d:a2:74:9d:
0c:21:ec:11:a6:60:ba:50:24:1e:7a:90:1f:aa:7f:
83:45:13:45:5e:bc:61:27:9d:88:3b:1c:31:83:b3:
b4:f3:d0:80:68:c3:6c:c4:c7:58:cd:fe:c9:a5:18:
59:f3:98:d3:3b:ec:b2:99:51:43:ca:86:43:45:27:
d0:9c:1a:1a:f1:f3:9a:8f:1b:d0:90:27:01:67:5d:
ab:02:1b:03:0f:b8:84:0a:23:77:71:52:55:1c:40:
96:44:93:00:68:5f:27:c2:44:d6:55:ce:eb:fa:69:
35:37:5b:66:11:d0:8c:05:3b:98:6b:48:d3:af:c1:
5f:31:fe:f0:b3:ae:85:4c:5b:12:b3:ed:f6:a0:48:
e5:56:35:81:a8:64:df:e4:24:32:80:cb:c9:41:8a:
31:be:97:08:65:cd:73:35:1a:f8:30:b2:49:47:cd:
5e:77:58:d3:a9:ff:b8:6e:54:27:65:e4:50:2c:ea:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EA:23:FE:F3:FF:A8:C1:CF:4D:28:EC:37:61:68:3C:D7:F0:F8:AB
X509v3 Authority Key Identifier:
keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d1:ac:0b:a7:93:e9:5b:c3:7d:d3:8e:7a:76:bc:77:84:71:
66:8a:e1:21:5d:d3:d4:ff:3b:85:9e:6d:36:92:69:0d:28:ef:
a0:4f:ca:56:0d:0b:48:51:d5:0e:0d:a3:e8:bd:0f:7d:47:4c:
fe:76:21:aa:d6:bf:86:b2:0b:95:d2:75:d6:36:4f:71:b1:df:
d1:b2:94:cb:17:c3:c8:37:62:0f:11:3c:6a:bd:1a:74:a9:db:
4a:02:b5:e7:07:d7:d6:be:93:55:33:30:57:82:6a:f3:e6:b5:
d0:67:77:e1:a3:0a:f5:36:96:59:c1:8f:ce:13:71:d8:34:96:
03:c1:43:37:3d:67:3f:75:4a:c5:57:7d:b1:9d:50:f3:78:2c:
08:f2:f6:1f:ec:27:ea:2e:0c:25:87:1a:25:90:34:0b:c5:cc:
60:2f:0f:8f:e3:2b:7f:7b:a1:29:72:b8:64:df:1b:aa:8b:60:
f9:93:7d:50:3c:6b:c8:ab:de:75:2d:c6:1e:78:52:e4:30:3a:
b1:74:b4:ae:3d:61:ba:7d:a5:4b:40:27:41:e6:16:3d:1c:58:
ce:03:32:dc:9f:8d:f6:35:af:ec:34:85:ad:af:9c:55:90:cc:
86:f8:91:69:d8:04:52:bf:c0:a9:c0:72:8f:81:ba:bf:8f:a8:
44:34:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:18:45 2026 by rpki-client