Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
File: edQ3WEq9tIITYw3KpfAMnSw8wXk.mft (raw, json)
Hash identifier: azTvgQIUFfqyPEwvO2zhpGvqGw4nQrfBspF13aBO2LM=
Subject key identifier: D4:37:5B:7B:CE:54:E8:FB:C3:33:09:A9:46:17:81:83:70:68:F7:4C
Authority key identifier: 79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
Certificate issuer: /CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Certificate serial: 019D9850511D8C041943C67E4B50873EA23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
Manifest number: 1370
Signing time: Thu 16 Apr 2026 22:01:33 +0000
Manifest this update: Thu 16 Apr 2026 22:01:33 +0000
Manifest next update: Fri 17 Apr 2026 22:01:33 +0000
Files and hashes: 1: edQ3WEq9tIITYw3KpfAMnSw8wXk.crl (hash: 7dbfUmV9i4IssxTKt5h48aSH4FjiMn5eMTe0Gkl2R70=)
2: o2ujZ5WYldu5AZ-vxsOFgZG5-2g.roa (hash: WLtxFHhgeLjy2SQKVLToiGcZPrDlIVzRMO9KiBUqjsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:51:1d:8c:04:19:43:c6:7e:4b:50:87:3e:a2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Validity
Not Before: Apr 16 22:01:33 2026 GMT
Not After : Apr 17 22:01:33 2026 GMT
Subject: CN=d4375b7bce54e8fbc33309a9461781837068f74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2b:44:e0:32:12:24:25:57:00:a6:12:90:3b:
25:14:e3:57:83:76:00:ce:0f:37:54:87:f1:f1:fb:
51:c3:f0:4d:cb:de:df:3d:94:ca:41:13:83:a3:1a:
f1:dc:2d:0b:31:4b:26:25:dc:d3:a3:88:d3:15:d8:
04:69:13:a7:a1:f8:28:a5:4f:c0:09:54:31:69:c1:
5e:96:4d:a3:9b:47:d5:b6:f6:ed:db:dd:71:03:59:
90:5f:6e:96:53:53:4d:db:29:19:10:b2:af:bf:cb:
a1:82:01:ab:85:5c:4c:08:1b:a7:1f:0a:70:80:72:
c4:3a:da:62:cd:7e:e8:70:05:4d:fd:9e:20:16:eb:
31:d0:51:27:2f:0f:dd:29:d3:13:23:1f:2b:7e:dd:
d1:01:28:ff:10:a5:6d:ff:28:96:e1:d5:95:ed:94:
c1:ec:9b:25:69:0d:75:23:62:19:3c:48:27:d3:d1:
68:3e:68:08:cd:1d:30:57:2a:26:7c:39:31:27:1f:
a6:c8:ea:ae:77:fa:3e:6a:2b:30:a8:39:db:a5:ce:
64:4c:73:ec:dc:78:39:de:76:c9:0e:4e:4f:73:78:
89:b9:3e:3b:f7:77:0f:a7:83:16:0f:db:8a:d6:b3:
e3:f5:b6:22:d9:59:55:c1:2d:18:31:8e:e2:69:e4:
5d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:37:5B:7B:CE:54:E8:FB:C3:33:09:A9:46:17:81:83:70:68:F7:4C
X509v3 Authority Key Identifier:
keyid:79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0f:dd:10:c7:1b:09:a9:4c:a3:c0:58:c4:e8:c5:ae:5c:5f:
36:41:7c:a8:74:76:74:e6:51:77:c5:55:47:98:0b:e5:de:43:
5d:6e:64:bf:bc:d0:8b:4a:a9:8c:6d:14:48:be:4b:cb:55:ea:
98:61:4a:45:9f:3f:5e:e9:70:bd:17:22:87:42:e2:af:ec:46:
f3:5a:57:88:5c:3c:a1:30:b0:e1:a1:7b:33:69:5b:66:dd:5b:
fd:ce:72:1d:26:58:a2:40:01:fc:d3:25:a4:73:31:1b:9d:e8:
4c:b3:77:a9:41:74:f1:3f:87:ef:95:b6:cb:e2:de:35:51:44:
c5:67:6a:80:fd:e0:68:76:ee:61:88:61:43:5f:7d:5f:de:65:
5b:d6:81:33:64:37:fd:07:2f:0f:07:d3:83:91:19:40:fe:15:
f4:38:6b:e3:b1:01:55:6f:57:58:ea:0f:89:08:c1:ec:df:10:
b1:0e:97:c1:c1:b4:81:be:26:26:ff:8d:56:86:51:85:1c:70:
db:25:22:a8:6a:d4:cb:fb:57:5e:91:ea:45:38:d0:e1:65:2f:
f1:4d:e8:73:e7:0c:7a:8c:63:66:f9:fa:89:90:90:47:9d:e2:
5e:44:6d:00:83:11:c1:34:b2:60:2c:78:c0:3b:56:f6:87:0f:
92:e0:cb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:47 2026 by rpki-client