Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json)
Hash identifier: oPJierKoh2Za5Nuv7da08b5rlrWR/X/Xvs+bXYwNYiY=
Subject key identifier: 8E:D9:1A:F9:FA:2C:D9:9E:2B:C3:97:64:63:58:A5:5B:EE:94:14:A4
Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Certificate serial: 019D98F521772389F07C2FC5C18A03E1A91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
Manifest number: 0AD3
Signing time: Fri 17 Apr 2026 01:01:34 +0000
Manifest this update: Fri 17 Apr 2026 01:01:34 +0000
Manifest next update: Sat 18 Apr 2026 01:01:34 +0000
Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: Mt70ADwrXgXnKXPK/vhQKEkeLcUikBeky0+WBsbz2UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:21:77:23:89:f0:7c:2f:c5:c1:8a:03:e1:a9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Validity
Not Before: Apr 17 01:01:34 2026 GMT
Not After : Apr 18 01:01:34 2026 GMT
Subject: CN=8ed91af9fa2cd99e2bc397646358a55bee9414a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:89:27:4a:03:e6:93:ac:91:73:22:0e:17:
f8:d3:3d:e9:83:b2:23:2c:df:fd:35:80:b2:fd:37:
9a:a1:41:0c:cd:f2:02:a9:7f:1b:b9:bc:18:c8:fd:
62:c4:d1:63:bd:4b:b9:d8:bc:76:eb:1d:af:4a:b9:
d0:d0:9e:ed:9f:34:0e:f3:c2:92:24:1a:6a:ea:9e:
1a:2c:59:66:18:43:96:e0:2b:5b:da:86:1d:7a:2d:
72:83:b3:d7:36:e2:cf:2d:50:9b:15:73:5e:87:b7:
9b:4a:df:9e:61:05:7b:70:f9:4f:85:cc:bf:5c:26:
a2:a9:7b:54:0d:ae:77:57:8d:16:13:15:e1:78:2f:
a6:28:4e:e1:38:52:80:e8:a3:e7:0c:3a:58:d9:de:
a5:54:79:16:cb:da:c9:17:7f:7e:50:ed:0c:73:b9:
20:0c:80:cb:a6:3b:b5:ed:90:56:26:40:59:e0:c8:
19:8d:6d:d2:41:fe:a7:14:d6:05:0b:da:d2:62:88:
b4:d6:4f:c4:3f:91:3b:11:d1:ef:7e:b4:09:bf:79:
f9:32:a4:49:78:ca:6d:f8:e1:e5:60:bd:c8:1b:3d:
80:88:3d:d3:d5:63:e7:67:b2:6d:48:a7:eb:75:0a:
2e:6f:32:89:3a:61:f6:c5:95:34:97:f1:f0:da:ce:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D9:1A:F9:FA:2C:D9:9E:2B:C3:97:64:63:58:A5:5B:EE:94:14:A4
X509v3 Authority Key Identifier:
keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:41:d4:2c:c5:4c:3a:39:56:1d:c3:1e:70:01:42:f6:b7:4c:
d8:7f:45:ad:9b:b4:25:82:1e:b4:20:d2:7d:15:82:a0:19:7a:
39:3e:96:b5:46:07:91:f8:e0:c3:40:0f:36:a1:05:c8:ef:ec:
4b:c8:bc:25:92:aa:2c:45:d8:7d:e9:69:a5:6e:ac:61:cc:9d:
9c:20:67:10:8e:4d:5b:39:3b:f3:c8:dd:c3:aa:ef:7f:43:7c:
60:80:d2:60:f1:6a:22:11:aa:44:fb:e5:33:2e:36:3e:1a:db:
2b:d0:05:a5:ae:9f:a3:cd:e6:e2:22:d6:8b:d8:05:c1:a4:7e:
63:46:7b:a9:a0:a6:8c:03:d1:97:45:49:b0:c7:88:6c:39:06:
62:ac:79:64:9d:a3:93:7f:a9:a6:63:1e:73:51:62:8e:64:3e:
80:ba:0c:f6:66:ce:bc:23:a8:89:4b:23:db:fd:82:70:94:a9:
d0:fc:85:41:bb:8b:78:46:35:b6:21:25:4f:a6:81:0b:8c:3a:
5d:e6:91:28:80:84:36:8f:3f:a4:b3:e8:ea:a7:68:91:f5:29:
89:ae:ca:16:92:3d:46:dc:6c:4b:c7:7c:be:46:6e:a4:a2:cb:
cd:de:cc:ad:c5:b8:0d:5c:de:91:ff:0e:ba:c1:5a:0e:e8:8c:
c3:07:ef:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9SF3I4nwfC/FwYoD4akeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MmRmZWNiYjQzMTcwMjk3OTYxYTIxYjdlNWI0YTNjNDdk
ZTA5NWIwHhcNMjYwNDE3MDEwMTM0WhcNMjYwNDE4MDEwMTM0WjAzMTEwLwYDVQQD
Eyg4ZWQ5MWFmOWZhMmNkOTllMmJjMzk3NjQ2MzU4YTU1YmVlOTQxNGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSeJJ0oD5pOskXMiDhf40z3pg7Ij
LN/9NYCy/TeaoUEMzfICqX8bubwYyP1ixNFjvUu52Lx26x2vSrnQ0J7tnzQO88KS
JBpq6p4aLFlmGEOW4Ctb2oYdei1yg7PXNuLPLVCbFXNeh7ebSt+eYQV7cPlPhcy/
XCaiqXtUDa53V40WExXheC+mKE7hOFKA6KPnDDpY2d6lVHkWy9rJF39+UO0Mc7kg
DIDLpju17ZBWJkBZ4MgZjW3SQf6nFNYFC9rSYoi01k/EP5E7EdHvfrQJv3n5MqRJ
eMpt+OHlYL3IGz2AiD3T1WPnZ7JtSKfrdQoubzKJOmH2xZU0l/Hw2s66hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7ZGvn6LNmeK8OXZGNYpVvulBSkMB8GA1UdIwQY
MBaAFKUt/su0MXApeWGiG35bSjxH3glbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUt
YmQ1NzkwYTJiYTUwLzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUtYmQ1NzkwYTJiYTUw
LzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUHULMVM
OjlWHcMecAFC9rdM2H9FrZu0JYIetCDSfRWCoBl6OT6WtUYHkfjgw0APNqEFyO/s
S8i8JZKqLEXYfelppW6sYcydnCBnEI5NWzk788jdw6rvf0N8YIDSYPFqIhGqRPvl
My42PhrbK9AFpa6fo83m4iLWi9gFwaR+Y0Z7qaCmjAPRl0VJsMeIbDkGYqx5ZJ2j
k3+ppmMec1FijmQ+gLoM9mbOvCOoiUsj2/2CcJSp0PyFQbuLeEY1tiElT6aBC4w6
XeaRKICENo8/pLPo6qdokfUpia7KFpI9RtxsS8d8vkZupKLLzd7MrcW4DVzekf8O
usFaDuiMwwfvWA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:21 2026 by rpki-client