Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: 80qn/IEwDW87zziIqe4d4nKYXZU946uajsksamwDIIs=
Subject key identifier: 12:94:38:7D:9B:A7:3B:2F:95:43:F9:F3:57:A6:52:22:2E:C1:E3:96
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 019DA59D2EC0F39818FCBE499EDD07F1A3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: 02C1
Signing time: Sun 19 Apr 2026 12:00:34 +0000
Manifest this update: Sun 19 Apr 2026 12:00:34 +0000
Manifest next update: Mon 20 Apr 2026 12:00:34 +0000
Files and hashes: 1: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: Cw78F5Ck+R9dgfGNpj7LCxxtANjbse5ybbUmlNEH6UY=)
2: k9k26h_wk2KwXBbexASmBckIdio.roa (hash: IkgLudWAy48LS7n3a0wG6CHVGFDidThlfHrJKCCT1wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:2e:c0:f3:98:18:fc:be:49:9e:dd:07:f1:a3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Apr 19 12:00:34 2026 GMT
Not After : Apr 20 12:00:34 2026 GMT
Subject: CN=1294387d9ba73b2f9543f9f357a652222ec1e396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3b:b6:68:dd:25:d3:8e:eb:29:80:bc:d0:6b:
b1:44:76:e0:8d:f2:b9:89:ea:07:ed:2c:ee:5a:95:
9b:20:64:f5:68:4e:27:bb:4f:50:d5:7f:9e:b8:42:
4f:ef:34:34:9a:de:1b:27:1d:cb:0e:27:4d:84:a2:
fd:b2:4d:9f:95:9f:f7:c2:d7:5d:b2:32:65:1d:b9:
aa:8d:fc:c0:76:54:bb:f3:a7:23:7b:5d:7c:71:4f:
8d:e0:80:f3:47:80:19:f9:0c:d1:34:93:76:5b:72:
30:37:c1:72:9b:10:e1:1f:79:53:f7:72:23:04:f3:
28:95:1d:8d:72:8a:2d:60:d2:6a:1b:ae:76:16:e4:
3a:78:f8:c5:3e:88:e4:a1:f4:df:b6:59:d6:31:3e:
2e:71:67:ba:a9:72:dc:3f:bf:18:84:4e:32:87:bd:
1d:88:5e:20:e6:2b:e0:c5:4e:b6:b8:f3:a8:d3:bc:
70:a3:a0:28:b6:20:f8:91:30:8a:94:b0:0c:91:8c:
ff:ae:81:e9:b1:31:ac:c3:2f:28:57:11:5e:da:9a:
fb:e7:98:af:89:b1:7c:6e:2c:5e:83:e8:54:f4:39:
32:32:29:7c:92:af:4d:a9:42:98:59:3e:1a:aa:08:
69:82:0e:ed:d9:a3:42:44:66:64:96:cd:34:c2:58:
49:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:94:38:7D:9B:A7:3B:2F:95:43:F9:F3:57:A6:52:22:2E:C1:E3:96
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ac:62:5a:06:cf:0a:bc:04:3d:7f:e8:d2:46:a3:3b:55:1c:
f8:d0:75:2c:b7:12:12:08:3c:54:83:b8:59:eb:05:c4:3d:4f:
ed:64:58:a4:d8:db:1f:13:7e:41:b5:6e:14:f8:bc:a6:8d:e4:
66:1c:30:14:38:ce:af:d9:c6:2b:bb:d1:de:cd:ab:3b:ca:46:
6a:7e:69:da:39:f1:11:ae:ac:2c:59:ab:43:7b:1a:6d:a0:8e:
e1:25:03:6b:a8:63:16:bc:3f:f0:d5:56:9f:c1:49:da:c1:f1:
bd:a1:8e:19:89:3f:a9:46:88:32:36:5d:7e:9a:dd:1c:68:91:
2e:79:26:74:42:62:12:ec:a1:4a:12:94:4a:cd:35:30:70:85:
6a:c1:3f:ba:c3:16:5e:b1:0f:9e:2a:fc:5e:d4:96:ef:24:38:
88:09:4a:21:0f:15:26:ed:60:c6:6a:e8:ec:a7:31:1b:e4:a3:
7e:bf:1f:ee:f5:ee:d9:d6:ac:72:d0:62:b5:46:f1:b9:e8:de:
0c:f4:34:7a:d8:57:df:28:44:a5:dd:28:0e:98:69:18:d1:ff:
30:27:02:df:06:62:82:6b:8d:73:93:8d:3b:73:62:a9:d1:44:
b7:09:56:00:82:1d:25:f5:47:46:31:f0:67:e9:ee:09:d5:2d:
be:91:73:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:40:52 2026 by rpki-client