Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
File: P2U3Wk029crhof4kWKOAUmz-22o.mft (raw, json)
Hash identifier: JCkha6LyEhUg7zjnOhyi4GS/4egk7BBKpWZVK5sfP6Y=
Subject key identifier: 00:70:16:0A:64:52:56:BC:69:CF:02:FE:FC:DB:E8:75:02:76:3C:C7
Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
Certificate issuer: /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Certificate serial: 019D9A74FEB743030F18F41702E21BC76517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
Manifest number: 0420
Signing time: Fri 17 Apr 2026 08:00:51 +0000
Manifest this update: Fri 17 Apr 2026 08:00:51 +0000
Manifest next update: Sat 18 Apr 2026 08:00:51 +0000
Files and hashes: 1: 8WGCMkLHivRZtBn2lCr7Peb5fB8.roa (hash: Lec00BWr1FDj5Se46w/SW9Oe5vFyDVib4D6WgGcoj3Q=)
2: P2U3Wk029crhof4kWKOAUmz-22o.crl (hash: S72qPXtuPyAgtdnHdccLZ3g8iqHLGyBZAXjWegWOlqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:fe:b7:43:03:0f:18:f4:17:02:e2:1b:c7:65:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Validity
Not Before: Apr 17 08:00:51 2026 GMT
Not After : Apr 18 08:00:51 2026 GMT
Subject: CN=0070160a645256bc69cf02fefcdbe87502763cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:32:2e:fa:06:b8:3f:1f:b8:73:8f:b0:65:fa:
b2:1e:7e:a7:f5:ae:43:f9:a9:c6:57:f6:e7:2e:8a:
1b:73:10:52:b4:66:cc:d5:22:54:c4:67:e7:6b:d1:
03:a0:c3:ab:e9:d9:b6:6a:b5:7a:f4:80:1e:dd:70:
a8:97:c5:8d:35:cd:a3:b1:9c:64:9c:8e:fe:fd:1f:
9a:e5:5a:3d:11:ef:e8:aa:cd:d6:a8:5c:2b:b1:c0:
2c:74:c8:66:88:d8:4c:82:78:8c:ed:76:13:9d:85:
14:a0:de:07:93:56:4c:19:1b:77:5d:74:eb:b4:f6:
17:d8:88:88:10:c1:60:53:71:df:39:5c:f1:f4:a2:
e6:04:06:ea:72:a3:41:ca:43:ae:79:3e:68:eb:da:
1b:07:65:5a:ce:ed:85:b3:27:57:c3:ac:06:7f:ef:
27:17:42:24:7b:ff:6f:a8:de:51:57:bd:86:fa:88:
c9:44:85:5c:27:bd:0d:97:d6:af:9c:e8:ec:6b:0a:
4c:d7:da:6c:eb:76:8b:3f:7b:07:58:1b:1c:8f:11:
83:6b:c7:db:d5:79:31:db:31:34:1f:16:a6:5f:64:
cd:61:0b:71:2d:a7:54:24:7f:14:64:93:9b:71:19:
ea:70:1b:25:45:e4:3e:3c:bf:df:59:c1:73:99:ce:
89:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:70:16:0A:64:52:56:BC:69:CF:02:FE:FC:DB:E8:75:02:76:3C:C7
X509v3 Authority Key Identifier:
keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:72:db:f7:0e:9f:0c:ac:71:e6:05:ff:a6:b6:0a:35:a3:6c:
3f:0e:e0:5c:1f:1d:3e:d5:09:bc:96:8c:9e:18:b3:81:64:39:
3f:95:09:21:d2:ed:a0:95:49:d8:7f:3c:b0:e5:fa:1d:88:08:
da:7d:3f:31:6e:87:8a:41:90:51:19:59:e2:40:39:7a:dc:67:
85:49:c1:b1:df:53:59:34:35:1f:39:79:48:49:61:0d:31:14:
eb:c4:a4:64:b3:ac:1f:77:13:97:34:75:b9:5a:66:46:82:b1:
67:11:ea:93:76:d0:6f:27:d4:8b:e1:6c:54:d8:ed:f1:d1:7c:
a5:f6:bd:e5:3d:b3:19:b8:69:b8:97:31:a9:b9:24:45:03:27:
2e:41:da:18:34:94:e7:41:58:b9:24:de:4f:fe:c7:75:01:cb:
1b:9e:50:2b:c8:90:de:a0:27:dc:6f:43:81:3b:7d:10:68:16:
34:ad:bc:9c:94:00:f9:b3:2c:54:c8:9d:9f:37:75:12:7f:74:
3d:49:b1:f9:d0:d2:b0:e5:9f:45:72:a7:4d:b8:98:d1:16:82:
ff:3d:9f:8d:de:f5:ae:d1:8d:e0:6e:d9:28:b6:62:cd:5b:71:
ef:72:7c:c5:19:a1:6b:7a:2a:78:c8:b6:b1:9f:0b:72:d7:41:
3a:b1:86:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:55:20 2026 by rpki-client