Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
File: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft (raw, json)
Hash identifier: DAfXKT4DbjFbNh3FJziixieZnQ/CBk50OHuFZKVyxVs=
Subject key identifier: 8C:7F:03:4E:7A:A3:01:55:BE:B3:06:69:65:43:9F:AF:5C:AF:3C:56
Authority key identifier: A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
Certificate issuer: /CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Certificate serial: 019D9A74ADDD9A9B13390257652B32A05E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
Manifest number: 0F7A
Signing time: Fri 17 Apr 2026 08:00:30 +0000
Manifest this update: Fri 17 Apr 2026 08:00:30 +0000
Manifest next update: Sat 18 Apr 2026 08:00:30 +0000
Files and hashes: 1: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl (hash: Fd7xBd8hzda2dJ52RumpIpyJesXbysRrUZeFwnM7gyU=)
2: vFPz2EZZAEU2N3SgGFxaDNU5jHs.roa (hash: EuLVLB/JUDTlNe7Sgb1DpN69/WpO8B+6KWA2ZGoI7bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ad:dd:9a:9b:13:39:02:57:65:2b:32:a0:5e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Validity
Not Before: Apr 17 08:00:30 2026 GMT
Not After : Apr 18 08:00:30 2026 GMT
Subject: CN=8c7f034e7aa30155beb3066965439faf5caf3c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:6c:5d:41:25:01:b6:0d:f9:46:68:cd:ec:
3d:2d:45:33:74:6f:f6:95:50:f1:e4:89:b8:f1:44:
4e:ea:3e:15:3f:dd:21:df:3c:59:90:a7:cd:72:70:
2e:e5:c4:5f:8f:40:69:2a:d2:a6:00:fa:14:19:ee:
8f:1f:f9:c2:cd:1e:68:45:23:7c:ab:7a:07:59:2e:
8f:8f:65:12:d9:17:5a:36:da:05:e8:b5:18:78:89:
e9:db:aa:8d:f0:cd:ef:ef:33:d1:12:41:27:0e:c3:
1a:1e:85:76:ae:0f:4a:a3:4c:0e:52:bb:3d:b3:69:
6c:9a:3b:7c:c6:4d:0f:e7:cc:cd:50:0d:c4:f2:c4:
fb:ea:0d:e9:31:21:74:cf:2a:5e:c1:37:cf:81:8c:
37:62:1d:af:09:9b:4d:13:9b:15:f2:ac:62:ea:3a:
c1:c9:33:8e:14:84:3f:c8:77:38:22:42:4c:ed:c8:
83:0b:d5:e8:6f:72:04:bf:9a:c1:51:6c:c2:8d:cd:
36:7a:30:cb:d8:30:a6:cf:5d:6d:25:6a:17:3c:c4:
1f:e8:cc:63:0b:f9:84:52:4b:73:65:a2:87:82:ea:
e7:a6:54:0d:4a:a0:20:fc:e5:bd:42:34:37:21:8e:
56:14:48:e5:3c:d7:1d:97:d9:4e:ff:f2:12:d8:fc:
c6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7F:03:4E:7A:A3:01:55:BE:B3:06:69:65:43:9F:AF:5C:AF:3C:56
X509v3 Authority Key Identifier:
keyid:A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d2:30:0c:51:5c:9f:fd:88:8c:df:93:6e:64:e5:09:e1:29:
44:94:39:5a:95:22:bc:fc:95:17:20:a8:85:d0:1a:0b:72:86:
bd:51:c9:c7:db:23:d6:ef:5b:6c:c9:14:b2:af:4f:b6:b6:6f:
04:f7:1f:bc:71:ce:bd:a4:7d:a5:88:fe:75:cc:a2:e5:1b:52:
9e:9b:53:e0:3f:4f:8d:7c:6e:9a:57:6d:7c:55:b3:48:5a:0d:
21:52:47:a6:5f:cc:ca:4b:28:be:6b:30:40:e3:32:c5:95:ee:
e8:4a:62:2d:99:ee:a6:5b:64:86:4e:7c:a7:60:e8:5d:69:1e:
01:22:15:ea:1f:62:f5:c6:d6:f8:ce:13:4f:7f:fe:4f:03:8c:
c3:54:13:23:86:0b:dc:ab:41:a6:e0:b8:2c:9b:11:24:05:39:
5a:af:8c:a3:b5:ea:10:39:35:56:35:53:7d:f4:40:e4:6a:b8:
ed:47:34:05:86:2e:ee:f6:69:39:09:c1:f3:d4:8a:5c:37:03:
ac:74:da:c9:03:ac:e9:b9:e5:8b:78:8e:e4:f5:39:d9:46:61:
fd:85:45:04:a7:4d:6f:53:34:ed:c3:96:4e:e7:0e:4f:f2:38:
0c:ff:66:70:25:2b:54:75:8b:b2:61:b9:02:75:9c:4a:06:8a:
ee:cc:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:20 2026 by rpki-client