Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: Oq3wQ25taiqv7idBx9tMAOFSTBO8Hwqzy55dnCA71MM=
Subject key identifier: 29:00:E9:C2:3E:3F:81:DC:43:E5:28:74:CF:24:C6:DF:22:9D:B2:7D
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 019D97AB1B16D636174805E0A944AB8149CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 0888
Signing time: Thu 16 Apr 2026 19:01:06 +0000
Manifest this update: Thu 16 Apr 2026 19:01:06 +0000
Manifest next update: Fri 17 Apr 2026 19:01:06 +0000
Files and hashes: 1: 2v9j4cmRBKthQd69OeXDYpcV_J4.roa (hash: JIWzi0oTuF2fjfMhf5T0o4dEjhsNJCahQ3YsDnDQF/k=)
2: hpn4nKhBKlsinaN3vVc_HD13KvY.roa (hash: bzhO685+Hi3OxhZho3Lpnq5Kf5KsQHXcp5yXWuPUGs4=)
3: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: ygQzCemYgcLvafmNpXDgAbtfBrE6UypVN2e9QxWOlbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:1b:16:d6:36:17:48:05:e0:a9:44:ab:81:49:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Apr 16 19:01:06 2026 GMT
Not After : Apr 17 19:01:06 2026 GMT
Subject: CN=2900e9c23e3f81dc43e52874cf24c6df229db27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:0b:e1:f6:3e:73:77:6e:0b:b7:c0:43:6e:
54:18:05:01:a8:93:e0:98:19:a4:fb:df:d0:bf:fc:
99:2c:3f:b0:3d:63:d7:67:ca:71:eb:4e:22:d5:88:
7d:f1:f3:5d:3c:d1:7e:c7:b3:77:38:c4:42:6a:ba:
ff:e9:fd:96:5a:bb:f8:18:90:d6:85:9b:ea:97:24:
ad:70:3a:fe:5f:3a:a5:6f:85:df:dc:2a:af:50:36:
01:cf:0d:d0:1e:bf:7c:68:05:f1:b3:6e:a2:12:de:
5b:b8:65:3c:79:2c:3e:df:ae:6e:70:b3:20:c6:86:
94:da:82:da:0a:1a:18:78:09:90:74:d2:97:6e:93:
ec:c8:51:ad:e5:0c:49:d7:4b:7c:65:ef:85:ba:9c:
3c:f1:a7:94:18:1d:20:04:a2:45:10:f7:0a:af:e6:
46:3f:fe:d4:17:73:22:5b:37:3a:ba:9a:f1:8a:17:
1c:64:5f:1e:85:ed:49:03:4c:be:d7:d4:b8:e5:81:
51:2b:27:fd:77:fc:53:82:69:eb:2c:e6:fa:d6:88:
28:29:61:d0:ad:92:ec:9a:e9:fd:48:ff:1c:c2:a1:
b5:ed:4d:08:27:2a:65:e5:3a:b6:51:79:9c:ec:dd:
16:76:8f:c6:4c:32:7a:29:5b:07:bf:24:00:ea:3c:
4f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:00:E9:C2:3E:3F:81:DC:43:E5:28:74:CF:24:C6:DF:22:9D:B2:7D
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c6:e5:09:15:49:92:2b:ed:6a:a9:cb:4b:50:f4:5b:f1:67:
a4:9e:a1:64:b3:6c:ad:9f:68:b1:03:6a:d4:55:a3:56:54:8a:
9a:c9:79:ef:b3:d3:ff:1a:e8:2c:3f:26:cf:56:67:cf:9a:47:
27:12:3e:08:88:b3:c7:78:cb:f7:04:20:ef:4a:bf:ee:b9:55:
1d:91:2a:e3:65:8b:54:0c:ff:ef:4a:e3:b7:b5:6a:ff:b5:10:
cf:2b:78:16:69:87:7d:8d:2a:57:4e:74:b3:bc:03:b6:34:8a:
2a:00:f9:e6:48:58:25:5c:60:cc:39:33:8b:11:fc:cf:ba:46:
3a:e1:37:b1:62:80:72:aa:a8:3b:47:85:56:c4:b8:f2:f3:b9:
8e:2e:76:e4:17:13:3f:ab:30:51:a1:8f:d6:0c:3d:0a:1a:6b:
1a:27:aa:98:f2:b1:b2:37:5e:0a:73:6e:bf:f1:f1:a6:ee:3e:
c4:d9:1b:58:e5:a0:83:84:3f:08:1a:61:d1:ab:02:2a:aa:d1:
e1:88:24:32:ab:fb:c6:db:90:ad:bf:de:d1:53:14:ef:b0:25:
82:68:da:b4:94:85:b3:ea:61:27:e8:02:e4:2f:a5:61:5b:37:
7c:62:42:38:ea:60:99:83:e3:02:72:bf:de:57:c6:ba:63:f4:
a9:c7:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:51:52 2026 by rpki-client