Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
File: R3BGWvTHI2RwAFnnll08iepGPNc.mft (raw, json)
Hash identifier: Nnx0rboCRG1XQP9XuPdejw89O45vBbBHFBKC6xnefSY=
Subject key identifier: C6:D3:EF:E2:94:2A:5A:0A:F7:57:72:B6:3C:98:D7:E5:ED:D3:B6:1C
Authority key identifier: 47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7
Certificate issuer: /CN=4770465af4c72364700059e7965d3c89ea463cd7
Certificate serial: 019DA48B7F383AA97ACD00D276215D192F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
Manifest number: 127D
Signing time: Sun 19 Apr 2026 07:01:38 +0000
Manifest this update: Sun 19 Apr 2026 07:01:38 +0000
Manifest next update: Mon 20 Apr 2026 07:01:38 +0000
Files and hashes: 1: R3BGWvTHI2RwAFnnll08iepGPNc.crl (hash: 7X8BtU604bZoBX3ssLzPifTeCXStnS0dwKHcOOnomvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:7f:38:3a:a9:7a:cd:00:d2:76:21:5d:19:2f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4770465af4c72364700059e7965d3c89ea463cd7
Validity
Not Before: Apr 19 07:01:38 2026 GMT
Not After : Apr 20 07:01:38 2026 GMT
Subject: CN=c6d3efe2942a5a0af75772b63c98d7e5edd3b61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:78:c5:1f:ae:b0:86:51:34:d0:81:d5:ba:
34:0a:f2:4b:7c:1d:4a:a4:85:7a:4b:ab:08:93:81:
b6:b4:d4:1b:ef:80:92:24:fc:01:74:81:64:c0:8a:
dd:8e:a0:3e:c8:d7:90:fa:5a:fb:07:9c:da:b8:97:
d2:3f:67:7b:e2:35:65:97:8a:7b:14:56:00:1b:30:
b7:c9:bf:57:dc:36:2e:83:3f:a0:12:05:24:b0:4b:
61:93:8d:a9:ee:fc:05:76:89:28:9f:5e:68:9b:c5:
ba:b7:3f:5c:77:f8:77:09:b6:35:a7:7b:c4:1d:03:
ca:77:29:37:23:c1:53:f5:e8:96:ab:27:d0:7a:0f:
22:3a:e8:7c:8b:91:e9:21:45:6b:ba:22:3f:ce:25:
95:cf:7e:15:63:7f:99:88:4b:02:47:f3:bd:cd:c1:
2d:75:91:57:69:99:5e:09:1d:05:ca:27:ab:93:a7:
37:26:8c:e7:af:62:4e:89:b5:5a:0e:8b:fd:ad:90:
9d:07:cf:61:3c:ef:c5:0a:f9:23:bf:8a:d1:14:7d:
df:49:7c:60:fe:2d:9b:34:e9:81:84:33:ab:09:1b:
76:d8:b6:ab:5f:85:c4:ec:1e:e2:c2:ad:e4:60:31:
02:2f:a6:1f:8f:83:e6:b0:46:39:2d:55:ee:9d:79:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D3:EF:E2:94:2A:5A:0A:F7:57:72:B6:3C:98:D7:E5:ED:D3:B6:1C
X509v3 Authority Key Identifier:
keyid:47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:83:38:d1:03:ae:7c:db:a0:bf:77:69:dd:21:b9:cd:c9:2d:
c2:33:75:1a:f5:93:41:c5:a8:e6:32:72:0a:91:67:6f:3d:af:
7f:6a:78:d9:a0:96:8a:fa:98:4c:c7:e8:c4:f4:0a:6b:fe:39:
16:b8:fd:e1:6f:ff:49:dd:22:a2:c9:8b:bd:c8:7d:05:98:f6:
c0:4b:14:35:55:54:e9:e7:21:83:e0:37:71:1e:26:53:0f:f8:
26:b0:60:be:85:d1:33:a7:2f:19:b2:d4:23:28:31:30:1c:98:
d5:1a:c1:97:15:b1:dc:1a:ed:c3:05:2f:e8:aa:10:6f:0c:ac:
26:18:95:ce:34:8c:ac:bb:22:1e:24:c9:59:d7:82:6e:79:d6:
42:b2:10:52:03:d1:22:21:84:32:0e:29:d9:f3:80:83:74:75:
61:7c:c5:98:84:07:ff:c7:cd:6a:e1:56:54:15:e1:b0:21:fc:
90:a8:68:93:7b:0c:1b:48:7c:9b:b7:2d:ac:ae:19:df:13:21:
1c:fc:d6:79:6e:34:c4:10:5a:15:70:14:a1:c9:2c:b1:1e:76:
fa:44:80:09:9f:fc:44:74:0f:d1:44:07:36:c2:16:d5:08:e6:
6b:99:02:48:19:06:12:51:44:52:dd:45:cf:f4:a0:d2:32:8b:
9c:fc:53:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:04 2026 by rpki-client