Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
File: PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft (raw, json)
Hash identifier: xoAgas/fX3UG3lINuCGWWMSAX3ms/8e0bOX7ww3U7tk=
Subject key identifier: DC:AE:C4:47:37:05:F4:7A:EE:EC:B7:77:36:EF:70:AD:46:23:C8:B7
Authority key identifier: 3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
Certificate issuer: /CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Certificate serial: 019D98F542BACFBC0E826C452712D559A8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
Manifest number: 123F
Signing time: Fri 17 Apr 2026 01:01:43 +0000
Manifest this update: Fri 17 Apr 2026 01:01:43 +0000
Manifest next update: Sat 18 Apr 2026 01:01:43 +0000
Files and hashes: 1: OW3GzUlbWQENnbfu4RMR0Aal4tU.roa (hash: T8dOCgn615KaYC2W+2ZIkt7KqeRP31QpTplo42gs07s=)
2: PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl (hash: CavbhjZDpbxw+++opQnnkrg6tbPgMlz5vJg3XVTOHoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:42:ba:cf:bc:0e:82:6c:45:27:12:d5:59:a8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Validity
Not Before: Apr 17 01:01:43 2026 GMT
Not After : Apr 18 01:01:43 2026 GMT
Subject: CN=dcaec4473705f47aeeecb77736ef70ad4623c8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:73:9e:62:48:a5:b2:73:89:eb:e5:63:88:e4:
1f:13:45:2f:f4:ed:d1:fb:e7:80:86:10:2c:37:64:
c3:b0:09:e1:1c:f8:69:74:76:a9:fe:cd:21:ca:46:
93:59:f8:12:c7:b7:cd:18:79:dc:0d:82:6f:b3:58:
13:97:83:99:15:19:23:7e:05:fa:11:ac:94:f3:28:
82:92:e4:30:dd:ab:83:6f:f2:9c:6c:e4:85:2b:72:
57:bd:cf:05:92:32:46:e1:e1:60:14:db:31:a4:f7:
9e:f5:b1:5d:b7:a7:82:b9:e0:20:f7:88:97:05:1d:
7f:01:54:a7:8e:14:b4:0c:dd:53:2e:ee:9e:52:55:
36:e3:00:6e:bf:b2:98:ea:9f:31:0c:fe:6e:a4:74:
ac:33:a7:36:80:c4:d1:25:3b:dc:05:be:0a:a2:8b:
f0:db:d6:12:6e:6d:73:66:31:33:c0:06:e7:97:51:
0e:2d:ec:bb:94:cc:7c:8a:f7:27:82:c8:7e:23:2c:
89:4f:4d:23:5c:e2:01:8b:89:b3:da:ba:7d:5d:87:
e5:82:23:4a:21:e5:00:30:c7:41:6f:16:90:30:a6:
92:4c:47:4f:42:6b:38:51:0e:9b:7c:05:0b:e0:de:
f5:2e:8e:a5:e8:ea:4b:a1:eb:aa:8d:36:85:a1:3b:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AE:C4:47:37:05:F4:7A:EE:EC:B7:77:36:EF:70:AD:46:23:C8:B7
X509v3 Authority Key Identifier:
keyid:3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ed:b9:8c:a2:18:60:40:d7:26:21:b1:c2:6e:9f:f6:96:39:
50:cc:b8:cb:de:e6:a7:7a:ec:08:61:e6:ba:14:e8:79:be:89:
bf:76:76:e8:9d:e1:84:d5:a9:f5:e2:bf:37:89:ed:1c:50:c7:
40:1c:e5:5a:93:14:9b:f4:80:a0:49:d0:94:b3:78:b1:42:5e:
a1:cc:f5:86:49:e0:74:21:46:99:2b:a3:7e:4c:20:bc:d0:fb:
ed:f6:1b:fc:03:78:b3:d1:db:8f:6d:c5:b2:3f:1c:a7:2e:2e:
02:4f:ef:98:6f:c2:82:81:9c:40:b7:03:11:a7:20:2a:16:a7:
67:ce:07:1d:51:b6:b8:84:5b:72:37:a3:fa:7e:71:31:9e:d2:
44:74:ae:b2:38:17:21:48:4b:73:87:11:5d:ba:a6:0d:c6:ca:
82:91:f6:02:b5:6b:e3:3a:58:91:e7:bb:25:81:20:96:0a:6f:
50:da:f9:b5:ed:66:72:1c:ca:a3:3e:6f:6a:75:ef:1b:b0:64:
3d:4f:6a:dd:7e:52:0c:e9:13:e9:8a:7a:f3:f1:a7:70:f6:09:
6a:64:0b:62:d5:92:ca:24:16:77:f0:43:1f:a7:7b:e8:1f:a1:
b3:ff:f0:30:f8:83:1c:f0:62:36:94:95:a3:4e:e0:13:06:68:
ca:a8:a3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:40:03 2026 by rpki-client