Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier: Y516yHrYRBpH18jD1VwaTl2Oaqh99MUdaKwUN4H/wq4=
Subject key identifier: 79:D8:E4:2B:A7:55:23:33:FC:4C:FD:0A:A0:EA:D7:53:D4:6F:99:21
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 019D984FD3BBF363CF9D5A2687DA9537C949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number: 0FA8
Signing time: Thu 16 Apr 2026 22:01:01 +0000
Manifest this update: Thu 16 Apr 2026 22:01:01 +0000
Manifest next update: Fri 17 Apr 2026 22:01:01 +0000
Files and hashes: 1: 2XECgtpjsen86VkC8yydIYPOl1c.roa (hash: BPZBQJjMYkB0nrNJVAIozX1sKQI4gxMXxsPOFyAaAE0=)
2: _2RVkv-dG4-YIAymCk1yOs7NK58.roa (hash: o6HUJs0cl57DuL7YAIkgRklqKfSqkx4WuloF1lwdZUE=)
3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: qNYkrBHZsEwgghZQXgEHjnOSi+Ncui5qA9dPAb8Ow44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:d3:bb:f3:63:cf:9d:5a:26:87:da:95:37:c9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Apr 16 22:01:01 2026 GMT
Not After : Apr 17 22:01:01 2026 GMT
Subject: CN=79d8e42ba7552333fc4cfd0aa0ead753d46f9921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:48:d1:5a:64:90:42:c1:e4:62:15:44:9a:
40:7b:13:c1:a5:ba:44:f4:0d:9f:4b:c5:2c:18:25:
30:8a:c1:ce:a8:0e:2a:f5:7b:8c:71:70:06:0f:f9:
b6:89:b3:e2:77:3c:f2:fc:d7:34:b6:a9:21:d1:a8:
e7:84:aa:7e:37:68:f7:23:02:a6:d5:be:a7:c2:1c:
a1:de:2b:59:b3:08:e7:8e:da:f4:50:2b:85:e3:13:
a9:d5:8d:d5:32:75:42:36:e0:96:78:a8:49:78:3d:
a3:2f:e5:b8:6b:61:1a:1e:68:0e:6e:49:28:85:78:
52:4a:27:e1:ab:4f:0b:6f:f8:b3:78:38:86:21:5b:
1e:55:ef:57:ee:0c:ae:12:86:85:6a:a5:e9:7f:21:
8f:99:c1:80:21:7a:85:12:26:b7:b2:6e:b8:b7:52:
60:67:80:a5:84:b1:93:ca:d2:7e:e4:d9:59:d7:65:
64:65:d7:8c:11:cd:e0:e9:8e:42:19:20:36:a7:68:
35:31:53:02:36:be:06:2e:d6:43:55:d6:b8:30:62:
eb:c9:53:7e:54:f0:cb:b9:75:4e:9a:52:a5:91:f0:
3e:cf:02:ec:4b:9f:d9:f2:99:58:85:f3:1d:ff:b5:
a4:97:4b:3e:31:bf:66:06:d3:53:80:47:51:b5:68:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D8:E4:2B:A7:55:23:33:FC:4C:FD:0A:A0:EA:D7:53:D4:6F:99:21
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d5:18:43:55:16:f1:61:5e:f2:eb:44:82:52:9e:01:64:b4:
49:0f:ae:f4:77:18:fe:0e:0d:26:87:a4:bb:e7:c4:9f:2b:34:
3c:df:69:09:3e:32:3f:85:aa:b1:d3:11:84:d8:6d:ea:ca:27:
c4:29:d2:61:d0:8b:72:05:e3:53:19:14:1b:db:58:76:f4:0e:
19:ae:9b:99:43:ce:46:e1:b4:b6:f5:4c:a5:48:7e:24:af:4c:
56:79:16:52:e0:bd:b7:27:7c:0b:6b:6c:16:da:67:7c:02:1b:
62:83:51:63:40:5b:a3:49:d2:d6:d2:5a:09:a1:e9:82:e5:10:
e7:7e:9a:bd:24:87:10:57:7e:46:7a:bf:65:b9:06:c4:99:0b:
33:cf:5b:66:f7:60:5e:c8:a3:d3:8a:51:07:65:80:24:39:cc:
84:3c:41:04:e0:9b:a1:e5:a7:58:f8:41:de:6f:e6:59:2a:40:
8d:0a:1c:f6:f7:91:ec:cb:9d:62:4e:c2:78:3c:05:6b:08:96:
90:75:56:5c:c8:ac:1b:00:2b:a8:40:c1:c7:91:05:45:fb:24:
39:49:99:31:96:88:d8:22:26:25:4f:f8:ca:61:b6:e4:a7:21:
b7:cb:23:11:fb:65:6d:ae:b3:74:3f:d4:17:6b:71:88:26:e1:
55:28:8d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:27:51 2026 by rpki-client