
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
File: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft (raw, json)
Hash identifier: FiZeStgbrCZKqI6QRdXKwNSBux28waMobo6uJ2qR87Y=
Subject key identifier: 0D:4F:7E:E3:65:A1:61:78:AB:9E:50:A3:5E:6A:E9:83:77:6D:2C:7C
Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
Certificate issuer: /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Certificate serial: 019DA4C1D43DA4FE03EBD05A6EF5C8725223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
Manifest number: 0C73
Signing time: Sun 19 Apr 2026 08:00:59 +0000
Manifest this update: Sun 19 Apr 2026 08:00:59 +0000
Manifest next update: Mon 20 Apr 2026 08:00:59 +0000
Files and hashes: 1: 1RQLtNwsJfIFpRzUfnhxJpXZkyM.roa (hash: wMjp06WKn3OrqdyFTd7sBWSyRC6sXJcxycCDPSTxcI0=)
2: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl (hash: QngD0ZUhC/ZgECs/l1PIL1NeWFF2o3KGy+yd5rVoB3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:d4:3d:a4:fe:03:eb:d0:5a:6e:f5:c8:72:52:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Validity
Not Before: Apr 19 08:00:59 2026 GMT
Not After : Apr 20 08:00:59 2026 GMT
Subject: CN=0d4f7ee365a16178ab9e50a35e6ae983776d2c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:09:c6:ca:b5:d3:a8:92:c7:ec:e2:9b:70:
0e:f3:67:de:e4:23:e2:ff:a9:f9:fd:e4:57:3a:55:
09:4e:76:38:71:ab:8b:c6:01:24:01:9e:0e:83:d3:
13:d5:b0:4a:c6:ca:4e:f9:0e:e7:14:3e:cb:7e:cd:
72:1b:0e:11:56:30:7d:1d:45:c4:9c:c8:8e:b4:e9:
16:38:0c:36:93:13:5d:82:f1:d2:32:9c:20:2a:a5:
1a:9c:a3:88:9d:27:06:c9:68:c0:ad:8f:c6:0e:06:
50:5d:b3:c3:5a:37:35:73:f3:08:20:89:43:3d:96:
d9:b2:07:a9:fb:e5:68:8a:74:0b:6a:2d:90:d9:21:
0c:8a:99:4a:e0:75:d2:e8:ec:11:db:e7:88:ef:f1:
80:cd:b6:15:90:5f:e0:5f:d1:96:3e:76:56:86:66:
cc:ea:e6:bb:23:0d:5d:83:e2:99:51:e2:7e:4f:f3:
77:d6:ea:65:06:9d:e8:98:c4:18:75:0e:3d:9f:31:
97:8f:ea:79:8d:c1:21:58:8f:7c:4f:90:47:f9:ed:
68:59:a2:78:ec:f9:b8:be:c0:23:c0:26:ed:e6:8d:
e3:a2:b8:5a:64:d4:c0:03:9d:91:89:84:6d:13:ae:
69:ad:e7:3c:ea:5a:21:20:01:19:f3:4c:04:71:ac:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4F:7E:E3:65:A1:61:78:AB:9E:50:A3:5E:6A:E9:83:77:6D:2C:7C
X509v3 Authority Key Identifier:
keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f2:81:6e:bd:60:02:2c:97:d4:56:b7:a2:cf:87:ff:8e:24:
4c:1e:d5:86:04:50:c9:14:09:08:f4:71:4c:d1:72:f8:0c:e9:
47:9d:df:0a:87:84:4a:43:1a:c4:56:07:b9:b2:a0:71:63:21:
96:c0:7c:d7:6a:0b:bc:3c:74:e9:8a:f0:d3:c2:f1:6f:3b:68:
2f:e4:c5:72:78:50:c8:0d:65:a2:a9:16:00:7d:25:a7:48:e9:
41:8e:57:09:fb:92:3a:dd:fd:41:dd:db:9a:14:8c:b5:7c:0f:
e6:11:57:1a:f3:38:cd:40:90:2f:a8:ee:80:4d:68:17:6a:36:
49:bd:fe:5f:e0:3a:56:9b:9f:28:58:48:24:2e:40:b6:10:99:
ee:a6:b9:fe:ce:28:b1:13:7c:21:7e:00:21:ec:10:98:c1:e9:
f5:26:56:2e:0e:b6:3a:e7:2e:88:53:8c:0a:b3:02:a0:ca:b0:
5a:74:7a:be:69:ef:be:f3:e6:5e:28:cf:cd:4a:a0:d3:c5:0f:
a8:d0:78:8b:5d:84:41:04:11:4e:92:af:90:c5:48:c5:aa:9a:
66:11:b9:c4:ac:88:a9:8d:6b:8a:4d:ad:9a:ad:c0:3a:97:89:
62:40:9a:ba:9d:82:8d:5e:89:b8:e9:84:03:74:2d:17:b5:a1:
16:a7:bd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:47 2026 by rpki-client