Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
File: t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft (raw, json)
Hash identifier: ANYqHsrX0klAT4YUHtFYJG2wzAaZXO/SA4qNMQj5IKo=
Subject key identifier: E0:21:B0:8D:76:DB:6E:7B:FB:97:54:B1:FE:F6:FE:57:87:23:22:B3
Authority key identifier: B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
Certificate issuer: /CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Certificate serial: 019D9C9A34668FB9C5DAED3C2C1BBA1B8762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
Manifest number: 02F8
Signing time: Fri 17 Apr 2026 18:00:44 +0000
Manifest this update: Fri 17 Apr 2026 18:00:44 +0000
Manifest next update: Sat 18 Apr 2026 18:00:44 +0000
Files and hashes: 1: t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl (hash: QXVOfrCWC5jhFY6/ZMKlvfpX5R5vk5CJEMibjV4vIKc=)
2: yJEIYX1X6Vn1mczBWtPbj6ipHiI.roa (hash: hXktUhExU5cvteEHn2uL2jVPgwS68C8aR5+E6IWS5PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:34:66:8f:b9:c5:da:ed:3c:2c:1b:ba:1b:87:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Validity
Not Before: Apr 17 18:00:44 2026 GMT
Not After : Apr 18 18:00:44 2026 GMT
Subject: CN=e021b08d76db6e7bfb9754b1fef6fe57872322b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:2d:52:b9:dc:b5:69:99:dd:7e:9f:fe:18:
5c:d3:0f:32:45:f4:ad:06:43:93:0e:2e:5a:19:de:
b7:0c:c5:31:86:58:79:fa:d2:a9:f9:80:9d:7f:5e:
49:4b:bc:e8:64:8e:ee:87:0b:c4:ad:fa:6e:66:57:
76:7f:44:1b:91:29:d1:a1:f0:5c:e7:b9:c6:45:2e:
be:56:f7:ea:0c:23:c2:d2:fc:58:90:48:17:32:eb:
3b:c3:28:b1:4e:49:ba:26:ac:5e:4a:29:ff:06:4b:
f1:8a:53:75:8e:07:75:86:d5:b3:31:02:fe:4a:ae:
37:9a:9c:4a:ec:04:3f:52:e8:dc:69:78:e5:7c:67:
c4:45:11:c0:b4:a8:b6:65:25:fb:65:77:f7:0a:14:
0d:cf:a9:43:28:cc:10:ad:ef:24:07:7f:a8:58:a3:
0e:20:35:3c:65:c1:91:ae:26:01:12:f9:5e:e4:ef:
2d:15:3c:48:01:14:a0:cc:bc:e4:34:7a:d5:16:1d:
4b:be:ac:f0:1e:a4:13:e0:0f:d8:b9:17:8c:92:4c:
de:25:84:aa:8a:76:fc:13:0a:c6:b2:53:24:e5:23:
d2:99:e4:c3:dd:c4:b3:69:eb:6b:73:36:7e:57:c0:
36:ad:24:1e:26:a3:c5:b3:6b:5d:e7:fc:f8:48:29:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:21:B0:8D:76:DB:6E:7B:FB:97:54:B1:FE:F6:FE:57:87:23:22:B3
X509v3 Authority Key Identifier:
keyid:B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:7b:e5:0c:53:f4:10:7e:86:50:2b:c9:c1:93:0c:1e:cb:b2:
47:14:06:73:8e:13:75:a1:f0:6d:29:fd:f3:67:27:06:a7:d0:
22:ce:47:b4:ef:93:65:a2:13:3c:a7:54:f1:06:a9:8a:99:be:
40:91:98:6e:9a:2e:13:a4:ce:81:55:e5:e6:6c:5e:0a:ec:10:
26:3b:37:86:3c:79:4f:d3:99:0c:3d:16:fe:3d:fa:f3:cc:a5:
d8:07:11:a0:3b:cb:2d:22:14:62:4e:4f:5b:a1:12:15:5f:f1:
a8:3a:76:f0:bc:8f:ab:16:1c:bb:9b:54:23:34:6a:28:d4:23:
10:3e:c5:2b:02:42:22:7d:49:4d:01:60:b7:c6:9b:50:a2:6f:
fa:d5:51:35:0a:32:85:87:a7:4f:08:42:7c:00:64:04:10:41:
56:16:c4:c9:63:3f:d0:67:d3:3a:95:13:d3:c4:11:91:09:12:
66:ac:ac:c9:6f:b4:39:81:76:10:4e:57:a3:fe:2f:93:c1:14:
00:84:a1:b7:63:e0:10:3b:7b:b5:7a:a5:a1:fb:6a:db:4b:d8:
0c:38:ae:04:f2:23:8b:5c:ca:c0:ce:32:88:74:49:7f:4b:1a:
e4:cb:3a:e7:a7:52:7f:28:5d:79:2f:5e:16:83:46:23:2e:33:
65:2c:84:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:47:43 2026 by rpki-client