Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
File: Pr6uqg8H3D1UvBFcziAq2pggsdU.mft (raw, json)
Hash identifier: mYjjq8nut/gs4E8zonHboscb31x3qL6JUE6q3PuOJp8=
Subject key identifier: D0:28:AA:59:56:D6:35:EB:4C:8C:82:C4:9D:BD:A2:BB:18:CA:F0:2A
Authority key identifier: 3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5
Certificate issuer: /CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5
Certificate serial: 019D98BD47CA645FFA7D418D42D1C1C78B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
Manifest number: 0A54
Signing time: Fri 17 Apr 2026 00:00:34 +0000
Manifest this update: Fri 17 Apr 2026 00:00:34 +0000
Manifest next update: Sat 18 Apr 2026 00:00:34 +0000
Files and hashes: 1: Pr6uqg8H3D1UvBFcziAq2pggsdU.crl (hash: +/RtHEMQAoj8D9Xj1WaPBkG8jZoCS5Yzd0n6LOFNnPM=)
2: ralErmH8EJ-9ydnhnrCvDlZV9ys.roa (hash: sDfjqe7LCY2kx4pVv1vmwGHXaRFhYudsoSBTeUiDShY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:47:ca:64:5f:fa:7d:41:8d:42:d1:c1:c7:8b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5
Validity
Not Before: Apr 17 00:00:34 2026 GMT
Not After : Apr 18 00:00:34 2026 GMT
Subject: CN=d028aa5956d635eb4c8c82c49dbda2bb18caf02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:d3:8c:d0:c6:0a:3f:af:9b:ca:18:40:c2:
33:41:e4:3c:41:99:49:f5:dd:1c:df:54:de:bf:76:
11:27:18:22:14:ac:44:f0:d4:8f:20:fb:06:db:3d:
3b:f3:bf:73:da:c3:0e:20:97:dd:b7:8d:93:f1:c1:
a1:c5:05:c3:ef:a2:29:8a:82:ee:0d:57:0d:e0:3e:
ad:65:40:66:9c:34:75:18:c4:de:64:71:a7:16:d6:
ac:26:76:f6:89:b4:fa:00:65:17:3b:ce:db:03:76:
33:92:9a:be:82:d7:65:fc:7d:59:3c:9b:97:ba:95:
7e:ca:de:e7:c7:04:4f:30:98:2f:48:9c:83:d5:79:
70:b3:a6:35:d5:ec:45:49:c5:47:b8:3f:3d:8d:9e:
ad:fb:17:5a:4d:79:76:8c:9b:35:fb:ea:7a:74:3d:
7d:1c:3a:8e:e1:d9:e3:27:45:cf:96:33:a0:9b:3b:
d1:1d:76:f8:26:6e:40:5f:f3:b1:68:93:11:e2:14:
5d:5d:92:11:cd:d2:93:63:3a:64:2e:a9:fe:12:13:
05:3b:50:56:97:a3:28:c1:04:68:68:b8:ee:fe:cc:
cf:0e:96:77:e9:0e:6d:66:06:ac:dc:c9:a9:ad:8e:
bd:fb:97:94:a6:1e:bf:3d:33:94:5f:37:f9:48:53:
a5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:28:AA:59:56:D6:35:EB:4C:8C:82:C4:9D:BD:A2:BB:18:CA:F0:2A
X509v3 Authority Key Identifier:
keyid:3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ef:96:66:21:1e:98:4a:6a:c0:24:27:8c:cd:d3:41:7d:1f:
cf:41:35:13:c3:d4:e1:5f:67:d5:5b:da:af:59:ec:ed:ff:71:
ab:75:aa:da:7b:45:68:9b:29:89:46:c0:7a:a3:1d:36:65:0d:
3a:a3:92:29:8f:36:44:da:b7:5a:94:a2:3a:91:cf:c3:1a:ee:
6a:09:ab:ae:92:e2:5a:26:c2:08:7e:c5:e6:ff:d0:75:4c:e2:
75:8e:42:be:8b:66:1e:83:d6:0d:f1:73:9b:45:43:cc:80:b4:
c8:13:97:6f:10:e2:5c:ff:7e:8a:a0:32:62:89:c2:08:c9:77:
0f:42:4e:f3:19:30:d0:3b:da:a2:25:b1:c8:16:47:04:3f:6e:
98:e6:e4:ba:8a:20:cb:21:8b:df:49:f9:0a:04:a1:10:23:df:
60:24:cf:b6:f9:5d:8d:d5:a5:fd:6a:56:18:13:35:03:25:e3:
76:a7:6a:9e:f5:79:c3:ac:6e:45:90:bf:bc:55:bd:eb:33:78:
79:6b:67:fd:b9:94:b9:29:6e:2f:4b:97:dc:4a:6c:03:04:4a:
a8:e0:8e:a9:c4:4c:de:1b:99:18:26:1d:26:73:fb:ca:d4:67:
97:28:e0:45:66:80:66:94:ed:18:32:42:fa:26:ba:5e:5e:80:
99:74:46:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:34:37 2026 by rpki-client