Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json)
Hash identifier: yxhKti/EFNT544ncxPIJOps4/0QOB9boWjPXJDlPWhs=
Subject key identifier: 2E:BE:58:58:F5:5F:96:7B:C1:4C:99:85:AA:F1:5A:FA:DB:9E:39:DE
Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Certificate serial: 019D9962D9BF8FD0EB072C0AB7359D9895E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 03:01:25 +0000
Manifest this update: Fri 17 Apr 2026 03:01:25 +0000
Manifest next update: Sat 18 Apr 2026 03:01:25 +0000
Files and hashes: 1: L3dsNuCYesjLEdd7H6z3I5lgNfQ.roa (hash: FRWxg7BGWCOKTf1SDbrBIvnqHEUQOUcCZw9myXVs5sQ=)
2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: S//SRhtLKQRdyklCXivL/cR1K+geLbxK43X6YV3TWkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:d9:bf:8f:d0:eb:07:2c:0a:b7:35:9d:98:95:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Validity
Not Before: Apr 17 03:01:25 2026 GMT
Not After : Apr 18 03:01:25 2026 GMT
Subject: CN=2ebe5858f55f967bc14c9985aaf15afadb9e39de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:58:f8:2e:82:b2:56:88:55:ec:11:d0:ee:e4:
79:56:b6:93:dd:78:52:c0:8b:7e:22:b4:f6:e7:77:
c1:04:01:30:5b:15:17:68:70:89:52:b8:0e:64:75:
9d:d2:8c:e2:2e:e4:4f:77:7a:b4:53:cc:ee:c2:d4:
2b:21:0b:0a:4c:18:6a:94:5c:b7:ea:60:a5:11:1f:
2a:56:0b:2e:4c:9d:8c:97:ff:47:4d:e9:d3:a1:24:
70:be:ef:82:3b:ed:2a:60:d4:11:c8:29:26:f0:1e:
4d:9f:36:ad:d5:27:32:17:5b:44:20:ca:04:f4:14:
83:fc:fe:03:cc:b1:62:fc:44:28:0a:5f:c1:15:0e:
58:e5:55:bb:1c:4c:ca:df:f1:31:52:ba:53:df:f7:
cd:8a:ba:8a:fc:66:3a:70:5c:ae:ef:c7:ec:e7:1e:
22:75:0a:7b:2a:01:76:66:4e:6d:23:b0:be:f2:db:
52:df:85:04:2e:0e:04:97:54:44:14:34:4e:80:37:
e5:aa:d5:56:b5:f5:f7:b4:f1:e8:59:19:79:6b:0e:
de:4a:49:ad:1e:d6:ce:f4:71:f0:d3:42:b7:45:f3:
e9:3b:59:bb:4f:58:27:c5:b9:99:61:c3:96:8e:e7:
07:08:8d:ff:97:40:9a:e4:a7:16:65:5a:09:4b:80:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BE:58:58:F5:5F:96:7B:C1:4C:99:85:AA:F1:5A:FA:DB:9E:39:DE
X509v3 Authority Key Identifier:
keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9d:7b:82:95:94:24:23:17:3e:b9:3a:ad:64:3b:38:b7:75:
e3:90:f2:a0:46:25:31:f8:2b:9d:3e:24:b5:e0:08:15:04:0e:
f9:5c:94:ff:1b:d5:7e:16:1c:b8:ff:be:6b:fe:46:58:d9:ee:
e6:60:fe:43:13:6e:bf:a7:4f:22:af:66:f7:31:4c:d7:c5:2f:
09:fd:36:f2:ce:7e:e3:fa:cc:b2:c4:9a:d0:bb:6d:ef:58:69:
fa:20:bb:a8:b0:93:22:e3:7e:ec:23:7e:a4:ba:55:bf:72:b1:
0b:c8:ad:87:28:01:6a:45:16:14:88:e7:fa:41:4a:04:4f:e9:
a8:8b:6f:f5:aa:9e:a6:03:33:14:fe:60:7d:82:6c:a6:48:cf:
4f:8a:ec:17:b2:e2:b0:cb:69:de:ac:6a:b9:fd:b0:6a:1e:d2:
80:91:95:8a:87:c4:6e:c0:91:a1:65:ae:41:e6:f0:c1:e4:78:
55:6d:8d:80:36:c9:a1:76:a1:87:21:30:83:d6:59:86:ea:1f:
4b:d5:09:16:1b:52:ac:24:21:c5:ff:cd:5b:fa:06:26:5c:44:
e8:3f:0b:2f:1f:9a:d4:10:da:6b:81:e7:a1:58:f5:b9:5e:36:
65:13:a7:e2:c9:10:88:dc:72:fb:0f:af:66:2d:8d:fd:94:78:
19:32:a5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:55 2026 by rpki-client