Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: /kV8qBDKCg60ygKOimSVYFbyD3ctVIcPkGibEodbtHw=
Subject key identifier: BA:2E:1F:7F:61:7D:60:CA:AC:69:02:6B:40:1E:75:05:F9:08:CA:26
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 019DA56699A43921E1FE1382680DD860858E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 07E0
Signing time: Sun 19 Apr 2026 11:00:57 +0000
Manifest this update: Sun 19 Apr 2026 11:00:57 +0000
Manifest next update: Mon 20 Apr 2026 11:00:57 +0000
Files and hashes: 1: 2U3Vq1QnP8ctuHADYZl7AYfrN8Q.roa (hash: aSqIWAFTh+DEyVISsUqiiF4heoz8JVrFxkyTiK/xNAk=)
2: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: DAUaPhlEoaidOxhiaBqlp/+0A0hOE1+IPp/o3icH/KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:99:a4:39:21:e1:fe:13:82:68:0d:d8:60:85:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Apr 19 11:00:57 2026 GMT
Not After : Apr 20 11:00:57 2026 GMT
Subject: CN=ba2e1f7f617d60caac69026b401e7505f908ca26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:f1:4f:59:f9:22:02:2a:09:64:69:75:79:
07:a2:95:34:34:0b:81:0f:dc:77:d0:90:40:d8:f6:
2c:e8:bc:29:7f:11:3a:c7:fb:98:d2:1e:6d:d1:da:
e0:2d:1d:6c:db:5a:58:96:64:13:8e:75:30:ee:db:
99:3e:72:e9:ac:f6:2b:9b:2e:dd:0f:7f:be:99:38:
0a:96:0f:ae:92:64:62:29:81:6a:af:3e:11:82:8f:
de:d4:f5:4d:1b:1b:2c:d8:40:86:96:e0:d5:83:4d:
67:11:15:bd:51:18:7c:fc:84:3e:4c:81:b2:02:89:
ca:c8:b7:23:c3:2f:e6:26:b8:2d:41:ac:76:6e:4b:
b3:2c:40:71:37:13:d5:0a:67:e3:ee:b2:82:25:5b:
0b:78:13:be:4f:b2:f2:3f:76:74:8d:f4:d2:27:8f:
51:0c:b1:88:11:88:db:23:92:f1:6f:16:23:17:b1:
37:9e:09:b1:a9:fd:52:3c:92:f3:14:5b:62:0a:bf:
4e:84:10:8c:fb:c0:de:96:06:fd:38:75:0a:f8:a5:
98:ff:cc:44:60:ad:e4:71:2a:a5:29:7e:cf:41:c5:
24:ee:a4:9a:da:7c:10:65:98:8f:49:c4:b5:1f:d3:
19:e0:ef:80:92:57:fd:9a:69:a3:66:de:0e:fe:00:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2E:1F:7F:61:7D:60:CA:AC:69:02:6B:40:1E:75:05:F9:08:CA:26
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:52:a8:2d:2d:ff:10:42:26:01:44:f6:26:90:b5:16:96:f2:
1c:c9:f2:b7:d3:ce:53:b4:2f:5c:1f:1f:01:33:c9:a1:0a:25:
eb:11:c0:0a:ff:7e:65:22:cb:ad:9a:4a:e8:2c:c7:d6:1b:50:
15:e8:eb:2c:cc:40:66:b8:02:a5:28:79:71:08:d9:59:74:22:
cd:b0:47:9c:f9:45:5d:2b:4b:9e:96:64:21:51:be:ce:51:8f:
e5:e9:d7:0a:52:ac:02:04:6e:b5:6b:3c:f7:10:1a:f4:7f:e7:
23:28:b7:ed:de:7e:17:d6:39:cb:23:1d:70:fc:bf:32:64:f6:
39:ce:ea:f9:01:01:de:43:d5:46:ae:4f:23:c5:d7:e4:91:3f:
dd:ca:f4:05:be:c5:38:29:dc:b1:2c:74:15:3f:a3:b1:0e:c3:
67:7c:1d:a3:a1:61:2b:4a:a3:45:03:50:e4:10:36:e5:47:3b:
18:52:22:f2:b6:f3:bf:a5:61:e1:44:b4:42:94:79:bd:df:97:
21:e6:bc:57:18:4c:11:e5:ee:d5:1f:3a:8c:f8:9a:20:ec:50:
63:95:16:1a:98:b9:5a:65:c4:04:37:d3:fd:7f:2e:41:d8:ce:
f9:f7:db:47:d2:de:9c:b0:e4:06:ac:00:9d:c0:49:6a:ca:aa:
f4:6a:c1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:18:48 2026 by rpki-client