Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File: PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier: mBmN1f7yqgXj54y+PLA1SPH2IQhDinptVof9shU0RfI=
Subject key identifier: BE:3D:A9:06:86:44:D8:6B:8E:06:53:D8:23:ED:21:ED:34:36:6F:71
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 019D9A3E0E676B2D49E3FC9CC9F2D659B01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:00:51 +0000
Manifest this update: Fri 17 Apr 2026 07:00:51 +0000
Manifest next update: Sat 18 Apr 2026 07:00:51 +0000
Files and hashes: 1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: jo+i+NlxrnpIsTV1HyFggEkGUoltObtNkk0BBXYbW2o=)
2: Rbj8kULps77k1vuvOD23vcXMVrk.roa (hash: e6y1bFDYJyurguxeJmMNNNjCgXXxGouget3ofm5Tn7M=)
3: RoI3MM-0KYlxwCOUfkaDOeYsU5U.roa (hash: dLJKzgwKEgf2VwAfUCSXlmN7iFsDt2XbjlyglNJp8Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:0e:67:6b:2d:49:e3:fc:9c:c9:f2:d6:59:b0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Apr 17 07:00:51 2026 GMT
Not After : Apr 18 07:00:51 2026 GMT
Subject: CN=be3da9068644d86b8e0653d823ed21ed34366f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:15:66:19:a7:77:a5:2f:54:dd:1e:fe:16:
8e:49:45:e3:5e:2d:2c:9d:59:72:06:4c:c0:00:c3:
41:32:17:95:c7:ee:3f:1e:ac:a8:8b:c6:17:7a:6b:
ba:18:9d:40:25:40:29:97:35:d6:91:68:f9:88:96:
d8:d4:c5:e5:6e:f3:1d:ee:9a:d0:19:a6:05:4b:d7:
2a:c6:f8:01:ec:c0:e7:3f:04:e3:45:88:1b:29:b5:
27:3e:53:d5:95:84:c0:07:60:d4:92:6b:b1:e4:21:
92:1f:b9:b2:4e:f8:f0:70:df:99:67:4b:36:9e:70:
5c:ad:67:1a:69:31:f6:d8:d0:46:18:d4:11:f6:51:
de:15:b4:c8:1f:a5:bc:13:5e:ef:af:1f:67:79:d0:
ef:ad:72:80:8b:14:3e:65:08:5b:7b:fa:e2:31:dd:
40:f8:27:70:40:d1:b1:f0:7c:16:8b:81:b0:0d:af:
b3:03:46:53:f2:9d:c4:f9:cd:68:12:6a:f9:e7:68:
e8:c8:aa:c4:95:e8:49:57:90:7e:2b:b4:1e:b3:9a:
a6:b7:6c:16:4f:5c:14:b3:cb:fd:86:6f:85:dc:d9:
bb:f0:3a:76:1b:85:f4:d1:70:b4:38:6b:87:8e:32:
48:ff:42:1b:df:14:bf:c9:f2:58:52:0b:d6:94:83:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3D:A9:06:86:44:D8:6B:8E:06:53:D8:23:ED:21:ED:34:36:6F:71
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:45:b5:81:20:1f:48:02:8a:59:15:03:11:91:da:b5:0a:0b:
8a:5a:f9:85:69:bf:82:48:52:fb:5d:8f:12:2d:aa:b0:ad:9a:
02:b3:95:13:c7:84:59:3b:bb:b1:c7:67:76:ae:09:de:cd:ec:
da:6f:6f:e3:fb:80:97:0e:39:e3:8f:cf:a9:19:07:60:be:54:
55:25:81:a4:6e:3a:78:50:19:df:1c:21:b8:11:6a:35:6c:f5:
d8:5b:c5:02:d2:01:89:91:41:d4:a8:43:a8:e3:14:59:8e:42:
e8:89:d4:a4:34:ad:62:ac:90:cd:22:72:c1:1d:c8:2a:42:0c:
b7:56:05:fe:ce:b3:55:cf:2d:3a:79:92:7b:a4:00:99:f0:ca:
bf:af:d7:c6:d0:78:6d:ae:f1:d3:a0:4d:ce:23:f6:4d:98:b6:
01:3e:7c:0d:cb:a1:f3:68:37:d6:fb:8a:cb:3e:10:c0:9f:ff:
69:05:b0:22:5d:a3:f7:08:98:db:25:b2:5c:fe:a2:19:fc:f1:
41:6d:a6:ee:fa:ae:57:b0:c4:e2:5f:ad:86:69:96:70:80:11:
49:59:5a:a5:77:d4:fe:8c:08:0e:0e:3c:37:0c:c3:d1:83:4a:
a6:52:f3:87:34:b6:33:c4:1f:ec:de:c4:6a:c6:04:a8:7b:f5:
f4:82:f6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:24 2026 by rpki-client