Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
File: sRI3DKJgErTR0BVM73IwvYmluV0.mft (raw, json)
Hash identifier: hvtVKit9TF+XDwDJmzti/lNLhCF0KPBRK1g56AxpKf0=
Subject key identifier: 87:2F:3E:E8:34:E3:32:9A:3A:61:C0:CA:35:DD:2E:DA:FD:FB:8B:F3
Authority key identifier: B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
Certificate issuer: /CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Certificate serial: 019D9AE284584C66808B53FADF22147FC5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
Manifest number: 80
Signing time: Fri 17 Apr 2026 10:00:29 +0000
Manifest this update: Fri 17 Apr 2026 10:00:29 +0000
Manifest next update: Sat 18 Apr 2026 10:00:29 +0000
Files and hashes: 1: JQHbkZiCoz_ArYL3K_jRaitcYso.roa (hash: LSS9szWjmAex/d/OuZRvWyhXy/Z+aR2BRiVKGpC62GY=)
2: sRI3DKJgErTR0BVM73IwvYmluV0.crl (hash: 0lFv8+RpR6zlKuygy5j38cibQB/lz5Oyj8CWM8kJEJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:84:58:4c:66:80:8b:53:fa:df:22:14:7f:c5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Validity
Not Before: Apr 17 10:00:29 2026 GMT
Not After : Apr 18 10:00:29 2026 GMT
Subject: CN=872f3ee834e3329a3a61c0ca35dd2edafdfb8bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:73:02:58:40:78:91:1c:cf:3b:ae:26:91:
2c:4f:2f:44:7c:3f:8d:f8:0a:2c:a0:ca:45:57:a7:
08:7f:1b:5a:b9:56:51:7c:f0:e6:c2:26:2b:b0:7c:
5a:0f:28:c9:e6:82:e2:f1:1f:a0:2b:fd:bc:a1:30:
53:80:c9:f9:2d:ad:31:50:40:f5:19:8e:f9:b1:1a:
1b:d7:c4:71:c2:93:48:08:b5:a4:10:63:73:65:3c:
7d:dd:22:56:e1:42:19:9f:f7:d8:71:e1:ef:86:d7:
dd:64:01:88:d9:ca:af:c6:ca:3f:7d:15:97:ce:36:
e2:f0:12:58:bc:21:d8:55:e9:ae:aa:45:bf:1d:af:
b1:de:d4:5b:e6:37:01:0d:ed:fd:7d:ef:b1:be:6a:
8f:e4:1e:46:bc:1c:d7:b2:96:ab:6c:79:55:04:fa:
47:bc:41:90:58:86:10:ac:36:cb:f8:59:96:c1:c1:
ae:65:9f:f3:a9:bb:b5:1d:0e:75:b6:e2:01:91:b5:
16:33:7b:72:3a:ad:83:93:c2:55:2a:e6:75:ed:b3:
db:e3:a5:df:5d:ba:af:2d:2c:fc:6d:d2:e0:ce:f5:
6c:a2:a5:e0:de:69:e6:4f:5b:32:0f:f4:b0:de:7a:
a5:d8:5d:91:1d:93:cb:ac:90:1d:00:e6:dd:6f:a8:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2F:3E:E8:34:E3:32:9A:3A:61:C0:CA:35:DD:2E:DA:FD:FB:8B:F3
X509v3 Authority Key Identifier:
keyid:B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f9:2e:16:77:14:c9:44:16:90:97:25:b6:df:6a:4b:b0:63:
e4:79:12:e4:38:77:2d:7c:fa:5b:cb:cb:74:cb:aa:6e:48:84:
69:77:9a:d1:17:fc:02:d1:9f:4e:25:2a:5a:21:b7:ab:26:d7:
d5:0b:3a:d2:dd:64:8f:dd:18:60:06:5c:6b:d7:bb:d0:85:db:
59:5a:cd:68:a3:9a:ac:07:c7:52:ce:b1:f1:4c:7e:94:61:c1:
52:a9:bf:fe:82:0b:8a:c5:ce:e6:83:af:ce:02:db:3b:60:3f:
2c:9f:d1:2d:68:76:c1:bd:1e:33:8f:66:b8:94:51:d9:9b:17:
8d:78:77:7d:c4:81:ec:aa:18:d8:c6:64:12:f1:1e:79:94:95:
b3:b3:17:87:51:5b:0b:1d:7b:2a:b1:5e:0b:b3:00:c4:88:d8:
70:d3:ec:be:78:8b:37:98:6f:3d:d0:fe:21:18:96:e5:94:f2:
e4:40:d5:dc:7e:e3:a8:a0:47:c9:ce:13:3b:65:26:ec:85:83:
cf:8d:e6:19:6d:93:1e:1f:ea:12:c7:ac:21:95:2e:51:5c:b4:
4c:39:1d:87:09:97:65:d0:bf:c1:89:74:d0:38:75:29:67:b5:
d9:d5:5b:82:59:d5:1c:2e:8a:36:76:c0:72:7e:89:d0:7d:a8:
14:cf:57:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:34:53 2026 by rpki-client