Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
File: rV3Hd3t3orNHfGernSbMeqAvOIk.mft (raw, json)
Hash identifier: PD5c/sjWlWekWFMFVrETTrGUSWgIvLbIB2tp8r4DACM=
Subject key identifier: A8:58:F8:35:1E:79:EA:65:F5:4C:F1:A9:77:0D:44:17:4F:13:26:66
Authority key identifier: AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
Certificate issuer: /CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Certificate serial: 019D9B19795845159E3ABD2CDB623C8DA05F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
Manifest number: 183D
Signing time: Fri 17 Apr 2026 11:00:31 +0000
Manifest this update: Fri 17 Apr 2026 11:00:31 +0000
Manifest next update: Sat 18 Apr 2026 11:00:31 +0000
Files and hashes: 1: rV3Hd3t3orNHfGernSbMeqAvOIk.crl (hash: m6rLXcWvrFbKkD86Wu4bM1xdbQ4Op5RD9gCIaO/2s28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:79:58:45:15:9e:3a:bd:2c:db:62:3c:8d:a0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Validity
Not Before: Apr 17 11:00:31 2026 GMT
Not After : Apr 18 11:00:31 2026 GMT
Subject: CN=a858f8351e79ea65f54cf1a9770d44174f132666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:4d:2c:49:73:66:89:44:fa:5e:f9:ed:93:
53:2e:24:be:c9:fa:8e:41:29:28:ed:2b:25:5c:c1:
8f:b6:58:d0:bc:ca:8f:6c:5b:ad:3c:3b:fc:0e:f8:
01:65:a2:c3:10:cd:58:a7:6e:58:09:d3:9f:ba:31:
dc:76:83:8b:01:de:21:d1:db:b8:9b:5b:85:c2:1b:
58:95:16:71:3f:5a:47:03:b5:c4:c7:5f:56:92:17:
28:2c:91:a6:de:40:7b:90:24:01:22:4e:79:75:f9:
bd:42:11:4c:4b:4a:db:23:3d:95:24:c2:82:dc:3b:
ff:25:87:1d:e3:79:f5:46:48:02:d3:46:33:d7:34:
2e:f9:dc:91:66:41:1e:76:98:2e:82:f0:2e:b1:0c:
82:e0:5e:02:ce:85:11:80:6d:8d:23:bd:b0:1f:7c:
91:b6:37:76:ca:2e:d2:19:6b:4f:2e:7a:ca:60:56:
ae:bf:44:77:71:8b:ea:da:4e:6c:2e:01:57:54:51:
da:6e:d6:d2:10:5a:a9:85:19:1d:58:c3:54:9a:8f:
be:c1:45:55:08:a0:80:ce:5b:ee:51:1c:83:29:3e:
d3:0e:24:7d:85:3a:44:19:87:9d:fa:01:a6:52:f4:
6d:d9:7d:1b:c0:28:ef:1f:42:06:de:6c:db:00:df:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:58:F8:35:1E:79:EA:65:F5:4C:F1:A9:77:0D:44:17:4F:13:26:66
X509v3 Authority Key Identifier:
keyid:AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e0:b8:99:48:f7:16:e4:07:60:ea:e8:b4:ad:ca:96:b0:09:
c5:94:81:d0:05:07:e8:d1:a4:6c:63:ac:a7:db:bd:01:26:8d:
3a:32:6b:aa:53:75:b7:cd:a8:95:64:cc:9c:8b:e4:9a:ee:64:
fd:6d:28:5c:01:01:8d:0b:2d:d3:f7:a5:78:32:79:d2:4e:bc:
67:f3:93:7e:f1:29:71:67:8d:7f:19:b2:5a:f2:bf:46:1b:1d:
98:83:93:be:93:80:fe:79:60:35:a0:d3:9e:bb:7b:97:f3:e4:
0c:cb:97:d9:6e:19:19:f5:47:56:d3:94:44:bc:8d:95:c8:d4:
71:2c:48:3a:82:20:aa:df:7b:b8:69:29:87:c6:c5:11:c7:3c:
30:10:d6:24:d0:56:0f:91:0b:a1:97:35:1a:c2:16:a3:c0:90:
f8:2e:65:b3:fe:dc:1a:11:58:f1:7f:70:c8:34:d7:50:5c:d8:
36:6f:26:f6:b4:7f:60:23:8e:79:a6:1e:f0:e5:6c:83:0d:4f:
3b:28:25:14:ee:47:ad:a8:71:50:3c:f1:8d:6d:0b:95:4c:b2:
1b:40:e2:da:06:aa:b3:2d:bf:29:a6:e6:b0:7a:6a:97:9c:79:
f3:a5:49:15:36:af:88:be:cf:e7:48:0c:f7:42:af:16:9e:6d:
e9:3f:43:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:29 2026 by rpki-client