Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: vFCw4WdhnoalLMF38h+uMVqRceEJ2/42y/Cmt/JUKkk=
Subject key identifier: EA:8B:92:3C:E5:C8:18:95:26:22:4D:D0:73:F5:30:EA:EF:FC:60:56
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019D98F43A4AA01AF807395B7639AF6D4EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 1301
Signing time: Fri 17 Apr 2026 01:00:35 +0000
Manifest this update: Fri 17 Apr 2026 01:00:35 +0000
Manifest next update: Sat 18 Apr 2026 01:00:35 +0000
Files and hashes: 1: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: oLZSHWByeSXd0gxvW9fdUIfwfEHgM1YBmXcojKjscHk=)
2: _b_jh41DtvYlyJbVt2vmUxy_03c.roa (hash: Y4f7kKKKelGhsZykUm6x2Et6p6M+4yMQNJ8fkfC21Wk=)
3: ggxxocqcTwq22NipEXSDZh95C_4.roa (hash: 1HSVk52TYwL3CTNvQK16vezfpvhjf/FZgW8yY/AHmMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:3a:4a:a0:1a:f8:07:39:5b:76:39:af:6d:4e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Apr 17 01:00:35 2026 GMT
Not After : Apr 18 01:00:35 2026 GMT
Subject: CN=ea8b923ce5c8189526224dd073f530eaeffc6056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:28:19:b8:17:d0:ad:43:3d:73:54:e3:fe:23:
98:02:22:bf:a2:ec:be:32:d7:2e:7a:75:08:61:a8:
56:23:7e:1f:3f:1c:e5:1e:16:92:83:a5:21:b7:be:
ba:6d:db:98:b8:86:fa:b5:58:db:36:4c:8c:0a:d1:
75:df:ee:e6:0c:29:9e:ab:62:58:4e:1f:43:b0:c1:
77:bf:8a:09:0e:7a:54:a1:9f:29:6d:24:c0:55:55:
c9:1b:89:fc:34:5b:7e:66:8f:52:a9:f9:c6:cc:16:
21:ec:2e:4f:6f:97:10:57:69:da:36:cb:9f:e5:71:
84:cb:55:f2:63:29:dc:0f:e5:97:df:30:77:6f:4a:
e6:86:78:61:07:fd:7c:45:0f:81:c0:e7:fc:b4:da:
7b:9e:5d:bd:17:86:7b:bf:a0:63:f8:3b:2d:ac:af:
a2:c6:ad:74:00:d1:98:2d:a2:a8:24:b7:c7:14:d6:
9e:d2:0b:97:4e:93:ac:2a:44:1f:58:62:b6:32:9f:
9b:3b:8d:b3:25:0b:18:30:17:6d:1a:30:59:dc:d2:
ce:c0:b3:16:49:bf:31:78:92:38:d5:56:68:3d:04:
61:65:46:82:7a:f0:31:1e:94:0b:dc:62:56:74:0c:
3f:37:55:cd:9b:e8:be:2b:01:82:52:09:54:07:36:
9b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8B:92:3C:E5:C8:18:95:26:22:4D:D0:73:F5:30:EA:EF:FC:60:56
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5a:82:67:99:50:52:17:63:08:15:02:15:d0:fc:cf:6f:a7:
26:43:48:16:59:c6:b7:10:2b:45:bc:7c:5a:2e:18:d6:ff:d7:
5b:77:9f:f5:3b:48:f8:28:15:54:b4:cd:67:47:25:67:83:b5:
81:f1:af:83:e0:ab:a7:b3:d3:96:c5:56:22:be:ce:4a:50:99:
1f:24:f3:45:f2:54:66:e2:d3:1c:eb:44:1e:36:b3:1a:0b:c4:
cd:c3:3d:c1:39:58:a3:3b:e7:cd:cc:af:a8:a6:ca:89:39:84:
57:94:05:ea:8c:b5:3d:1f:08:0b:c5:55:f6:dc:3f:3a:97:d3:
6a:bc:42:3e:1c:ca:9d:0c:5c:8b:51:ca:fa:c0:94:0d:70:71:
ee:49:8d:3c:af:11:89:22:a6:e1:88:0b:cf:a1:9a:a9:e2:5b:
f6:c5:45:b8:d5:f0:61:81:e2:79:5d:0a:70:e7:81:46:69:c6:
a1:c4:ab:8d:8a:8c:ec:0d:96:48:ab:6e:62:53:cd:5d:b7:2b:
e0:8c:c2:87:c8:d4:ad:7d:f9:57:de:d2:7a:7d:79:f3:a7:d5:
f1:22:48:2c:75:30:f4:66:c5:10:71:24:c8:c0:1e:a1:53:2e:
a6:84:44:17:05:cd:f6:a4:ae:0d:55:e6:51:78:dc:18:65:6a:
6e:e7:46:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:11 2026 by rpki-client