Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
File: _28m18gsaQh33DwsuSJrqDPXH5g.mft (raw, json)
Hash identifier: 0WkH/MRT7HDDZ8HEUp3yMm6KSvD0xyrs/Oj9CTPhvMA=
Subject key identifier: 90:8B:E1:5C:89:D0:53:7B:13:96:F4:C6:4E:00:5D:96:20:36:41:64
Authority key identifier: FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
Certificate issuer: /CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Certificate serial: 019D9C55781524AE344BC52239F5D7F2867D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
Manifest number: 03
Signing time: Fri 17 Apr 2026 16:45:40 +0000
Manifest this update: Fri 17 Apr 2026 16:45:40 +0000
Manifest next update: Sat 18 Apr 2026 16:45:40 +0000
Files and hashes: 1: _28m18gsaQh33DwsuSJrqDPXH5g.crl (hash: mUl62O9VSmPABTvmeyvBaqELUALSx0UCYdn5XKixhZM=)
2: r3PrgEIeKzFmjmt3ehPNebzdklM.roa (hash: kYXy/2MYPdosdaY9oR/2nCiXwCSlodRD/44n2jwFVoY=)
3: vEurWAAG57x9in4ZKM4WCB7WM2A.asa (hash: xoR21DEaVsvOKNxVYSHBf4kYkxZjstx31TCW4LJF+xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:55:78:15:24:ae:34:4b:c5:22:39:f5:d7:f2:86:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Validity
Not Before: Apr 17 16:45:40 2026 GMT
Not After : Apr 18 16:45:40 2026 GMT
Subject: CN=908be15c89d0537b1396f4c64e005d9620364164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:da:2a:7b:44:b7:8a:bf:be:44:f2:a9:3a:
9a:28:ab:cc:6b:73:1c:b6:ee:f8:dc:7e:33:f2:13:
3c:d7:72:62:b9:cd:47:8b:0b:59:ca:9e:dc:ab:09:
c2:1a:2f:be:40:90:e6:0f:2c:fa:35:f1:31:6a:57:
7b:aa:bd:43:94:e4:fb:86:8a:71:57:a9:ca:3d:e2:
95:87:8d:f9:b7:ff:aa:99:2b:df:56:94:69:b8:8c:
c7:fc:4e:bd:70:16:a6:8c:ad:8a:d8:c3:27:09:94:
a3:18:94:84:1e:fe:e0:ec:34:4f:6f:cb:83:72:82:
88:3e:b8:8b:53:78:30:dd:c3:8d:68:13:5f:c0:de:
fc:81:ae:b8:91:44:c3:dc:09:65:2f:7e:c0:bd:8e:
85:f5:4e:81:95:0c:21:5f:c4:38:3e:13:1a:8f:b5:
94:f6:5e:72:62:83:42:cb:6c:e6:bd:0a:fa:a7:a1:
bf:16:98:c9:e1:43:fe:e4:94:ca:41:74:e3:2f:1b:
b6:be:ed:d9:58:e6:6d:57:d2:2a:8b:a8:9c:e3:86:
f2:dd:1f:d9:79:6b:d2:4c:e7:24:b0:20:2e:6a:8e:
da:87:bd:8f:f4:b5:74:75:2b:6a:52:50:05:b0:64:
20:80:8d:36:49:95:f2:84:70:85:51:93:aa:2f:15:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8B:E1:5C:89:D0:53:7B:13:96:F4:C6:4E:00:5D:96:20:36:41:64
X509v3 Authority Key Identifier:
keyid:FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b4:4d:75:82:52:77:74:06:b0:a2:af:a8:40:f7:b1:29:39:
8a:c4:dc:34:7d:11:e5:c6:31:eb:56:00:b8:0d:f0:3f:00:ef:
07:c4:34:2a:98:68:ef:b6:1e:e3:5d:f7:08:91:12:b7:3a:2c:
cf:c9:20:83:15:b9:e5:e3:4c:94:a9:b5:08:0c:ea:f3:d5:c7:
e9:ee:ea:97:34:13:47:3b:94:7b:42:df:9f:cd:cf:24:fa:31:
6d:4f:33:12:28:44:64:e3:7f:6a:32:a7:1f:8f:fd:1f:01:09:
f4:13:b1:77:14:4f:e7:ed:c2:0f:48:1c:bc:16:a2:ab:b8:13:
1c:4b:94:d0:3e:19:a6:f5:ca:34:0a:16:ab:5d:d1:d4:e8:2e:
da:65:f7:4e:9a:7a:81:66:67:1a:aa:ae:94:62:1e:f6:1a:17:
d4:a5:69:5f:f4:bc:1c:2c:8f:92:0c:4c:36:cf:61:80:6f:81:
4d:a3:17:8e:60:b9:13:b4:5c:74:b9:9e:5e:5a:2c:7a:f8:68:
83:13:18:1c:b4:3a:e0:5b:91:02:69:48:6a:95:c0:e8:ee:93:
14:14:4d:ae:a8:59:35:33:da:a8:ae:06:59:e3:da:2e:83:c2:
b0:d8:f8:ba:a3:7f:90:17:68:1f:36:a0:12:ea:04:83:d3:e2:
34:43:b0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:48:12 2026 by rpki-client