Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
File: P2U3Wk029crhof4kWKOAUmz-22o.mft (raw, json)
Hash identifier: yJBACoFLR1QQgBbr51oua34SfRhGQDyeYoQwnJm5s1Y=
Subject key identifier: 03:80:F1:0D:E2:EE:65:64:2C:A1:5E:14:2E:73:6F:6D:FC:33:98:9E
Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
Certificate issuer: /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Certificate serial: 019D9C62EFCD2884ED85A904BF04D274B57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
Manifest number: 0421
Signing time: Fri 17 Apr 2026 17:00:22 +0000
Manifest this update: Fri 17 Apr 2026 17:00:22 +0000
Manifest next update: Sat 18 Apr 2026 17:00:22 +0000
Files and hashes: 1: 8WGCMkLHivRZtBn2lCr7Peb5fB8.roa (hash: Lec00BWr1FDj5Se46w/SW9Oe5vFyDVib4D6WgGcoj3Q=)
2: P2U3Wk029crhof4kWKOAUmz-22o.crl (hash: BU/+NZGZRd4scVmL9qKjZ6a9R9CNcRGF2T4N+UJAYz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:62:ef:cd:28:84:ed:85:a9:04:bf:04:d2:74:b5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Validity
Not Before: Apr 17 17:00:22 2026 GMT
Not After : Apr 18 17:00:22 2026 GMT
Subject: CN=0380f10de2ee65642ca15e142e736f6dfc33989e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c1:20:1a:2f:fc:34:a1:32:f7:a7:b1:ec:1f:
1e:d5:ff:8b:b7:69:e6:5f:a7:4c:04:a8:98:f3:1b:
67:96:c0:fd:64:16:2e:33:bf:99:cc:eb:ad:d2:03:
7d:56:0c:33:a0:46:1c:c6:f2:13:58:89:6b:e2:c7:
5e:8f:3d:21:c6:20:cf:da:63:3a:e4:38:b0:56:af:
ae:43:26:12:5d:33:58:4c:96:77:05:7e:d0:b5:7c:
c2:ac:80:a7:56:58:ea:2b:3f:f5:cd:fe:a4:6b:84:
00:62:5b:cf:0a:75:41:30:e4:70:12:eb:70:2b:b3:
7f:56:c9:34:66:04:b1:4a:f0:4a:19:f5:d7:90:25:
37:1f:ef:37:3c:ca:3d:12:a4:f6:1b:00:57:c9:ee:
95:b3:d3:45:d6:53:55:a4:f7:d3:a2:c4:c7:5c:75:
5b:d0:66:95:1d:e7:d8:45:4d:b6:d9:81:16:1d:18:
89:27:e5:94:b3:4e:27:c6:dc:17:05:32:11:17:a3:
7d:ae:d3:f5:91:f3:2f:99:76:e9:c6:bc:fb:b0:03:
c4:65:92:e0:e8:ad:55:89:8d:34:c4:de:64:00:6f:
31:a5:42:58:85:6b:c9:c3:57:7a:91:e8:eb:e0:3f:
0a:fb:63:53:c1:c6:2f:ad:b3:6e:5a:77:ee:84:c8:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:80:F1:0D:E2:EE:65:64:2C:A1:5E:14:2E:73:6F:6D:FC:33:98:9E
X509v3 Authority Key Identifier:
keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1a:fe:93:b9:3c:2c:f0:7d:30:8d:f9:32:7a:0a:82:48:48:
76:90:6d:09:7c:fa:d6:8c:d0:58:e2:e4:2a:43:76:b6:16:5e:
70:62:7e:c0:1d:f0:b5:9f:18:e5:fa:ce:44:b1:16:b1:55:5c:
e1:c4:f0:ea:b7:9e:ff:16:68:d8:3c:9b:8f:49:6a:dd:f7:d3:
7d:7d:60:f3:7f:51:f1:bf:09:d3:4c:78:d2:ef:f5:ed:5e:98:
61:69:c2:5b:1c:7c:c5:cb:29:a5:6b:d3:39:5d:c8:c7:c4:0b:
dc:f0:6e:06:65:7a:98:19:0b:2f:73:ab:96:a5:85:03:76:d0:
bf:f2:3a:4f:a6:d1:3a:7a:53:f7:b7:cd:6d:09:cb:e3:02:e7:
98:86:79:e2:d3:2b:e9:cc:96:e5:3e:a6:60:86:d3:5b:0d:ea:
ea:ae:d2:f3:dd:e0:20:a2:88:52:76:29:05:2d:ad:7f:2e:36:
e8:77:6b:0b:2e:70:6d:24:c0:83:d4:97:e1:f7:a0:e4:07:fd:
ce:47:d7:2d:ec:c7:13:c3:72:c9:cc:e5:59:71:56:ea:c8:f3:
e9:a7:c2:db:5e:46:67:b2:8b:4f:9e:62:20:72:33:0b:a4:83:
7a:ce:76:97:01:4a:58:91:0c:3e:40:e5:e1:c8:6e:63:2c:f1:
31:2c:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:36:53 2026 by rpki-client