
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
File: r-us3hVZeiga4rspMG3E2m3Pt14.mft (raw, json)
Hash identifier: xUGYLJ9cgVzyV+E9XLMpBMoMiOwEO4R17Kc9OXhizoY=
Subject key identifier: F3:46:A7:39:E9:93:76:35:78:E8:E2:17:01:32:39:BB:E3:3D:1A:BC
Authority key identifier: AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E
Certificate issuer: /CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
Certificate serial: 019D9E1BAA3C47AF9CFDE1EABFDA0544CC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
Manifest number: D9
Signing time: Sat 18 Apr 2026 01:01:46 +0000
Manifest this update: Sat 18 Apr 2026 01:01:46 +0000
Manifest next update: Sun 19 Apr 2026 01:01:46 +0000
Files and hashes: 1: jdSx0T-sdrzr500OOr7Atdy3Z4E.asa (hash: nbjDNb/jtcCfwpceFtypmGiC8RlKHHL0LGrtqS6ZCo8=)
2: r-us3hVZeiga4rspMG3E2m3Pt14.crl (hash: ju8GMNjFClv5+oMMr29RD2ArhsDIXfTJvjmRAZlBRjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:aa:3c:47:af:9c:fd:e1:ea:bf:da:05:44:cc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
Validity
Not Before: Apr 18 01:01:46 2026 GMT
Not After : Apr 19 01:01:46 2026 GMT
Subject: CN=f346a739e993763578e8e217013239bbe33d1abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:72:f7:c4:57:05:7c:27:f4:e8:9c:2c:82:
40:c6:1d:ed:4f:b7:70:75:ab:09:2a:c9:2c:16:4f:
00:67:9d:9d:2c:f7:45:75:73:10:06:51:0b:4f:de:
17:ad:28:f9:32:85:6d:fd:de:0d:87:d9:3d:b5:9e:
dd:e2:a1:50:f3:ac:1e:0b:dd:56:97:bf:b2:fd:c1:
f0:ff:c9:1d:d6:ee:21:bd:f3:fd:81:43:02:d7:eb:
f7:88:7a:b6:fd:6b:2d:c9:ed:ae:08:c5:f0:c2:04:
41:6b:0c:ab:94:74:99:5e:03:6e:bf:19:75:61:14:
9c:2f:fa:33:7d:36:82:63:f1:2e:03:6d:29:aa:89:
8b:12:24:46:8c:9c:1f:8b:83:67:6a:91:9a:c7:3a:
ca:19:2d:35:6c:88:47:4b:4a:a3:9c:30:f1:c8:f9:
78:63:fd:ac:82:a0:4e:15:5b:60:b7:32:97:1a:1e:
a8:cb:b2:0b:f5:d7:4b:3f:d9:7c:d7:12:72:42:32:
4e:30:0b:d4:02:d5:67:5f:db:c5:aa:f2:cc:6f:19:
73:ff:fb:d3:e1:9d:d7:2e:1b:4b:95:30:89:fe:6d:
30:80:69:c4:c1:7d:ce:8e:4e:f2:3a:5a:45:44:2d:
e6:4e:2e:d5:f0:15:bb:fe:3b:44:42:23:8d:22:03:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:46:A7:39:E9:93:76:35:78:E8:E2:17:01:32:39:BB:E3:3D:1A:BC
X509v3 Authority Key Identifier:
keyid:AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:28:cb:ab:4c:e2:7b:9d:3b:1c:6a:86:dd:a4:d8:9a:35:36:
c1:f3:ba:eb:73:95:ce:4b:8c:e5:8d:21:b7:73:59:21:bd:2b:
03:ff:a0:71:e3:0f:ca:74:46:a4:d8:2e:8c:5d:0f:30:1c:2e:
0e:1b:41:49:4d:c2:7f:7d:d1:70:ec:42:33:52:49:d8:f2:3d:
2c:ff:52:78:d1:60:06:09:13:93:9b:7b:d6:db:89:c0:1f:cc:
bf:d3:72:06:2a:f8:58:fa:d7:7d:80:66:d3:24:03:84:d6:8f:
a1:13:78:38:84:53:ec:05:2d:92:09:b1:7e:52:65:10:0a:78:
a9:87:57:0d:00:75:f1:f0:3f:27:8e:a9:93:9c:14:ef:0f:d2:
e9:33:d4:50:0f:15:a1:cb:9e:e2:8d:ce:2a:d3:c9:a5:56:53:
09:42:de:cf:2d:dd:bd:16:9d:83:53:7b:c0:62:cb:cf:23:6f:
a1:31:1a:ce:6b:f1:13:e5:86:8f:75:80:61:f1:7b:c3:60:21:
47:5d:0a:75:dc:68:09:74:4b:58:c5:7a:aa:4b:a5:90:96:fb:
fc:f3:e2:9e:aa:21:47:0d:aa:8c:5b:db:bc:28:61:34:93:07:
f8:4f:09:cb:d9:57:3a:74:a3:48:c5:7a:99:7b:06:c6:e0:bd:
f0:7e:39:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:06:22 2026 by rpki-client