Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
File: s-3xF3T0QHrdvfPPukweeqAkIiM.mft (raw, json)
Hash identifier: rpBbtD0QRUKaSfbaoOZ2iRAFJswxnQzuAVEaCHFd+CM=
Subject key identifier: 27:37:F3:30:A1:1F:63:C6:46:46:83:F0:78:9B:9D:BA:82:87:F5:66
Authority key identifier: B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
Certificate issuer: /CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Certificate serial: 019D9A06C6D6783DC1F6B2C1B3A056E3F226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
Manifest number: 0650
Signing time: Fri 17 Apr 2026 06:00:28 +0000
Manifest this update: Fri 17 Apr 2026 06:00:28 +0000
Manifest next update: Sat 18 Apr 2026 06:00:28 +0000
Files and hashes: 1: dTnyHu7c5lmZ5YWNquE3Gp7QhhU.roa (hash: dYbqxC2rCCWq/yRZ4yUkpOLINJDRJe/smtZyFeEbLZs=)
2: s-3xF3T0QHrdvfPPukweeqAkIiM.crl (hash: fX2vzlM0fImoC9taEJnO5CoD1R4iqS51Mf20aqREIrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:c6:d6:78:3d:c1:f6:b2:c1:b3:a0:56:e3:f2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Validity
Not Before: Apr 17 06:00:28 2026 GMT
Not After : Apr 18 06:00:28 2026 GMT
Subject: CN=2737f330a11f63c6464683f0789b9dba8287f566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:53:51:b0:c8:90:7f:6f:d0:9d:92:af:06:
92:75:5d:9c:67:b1:73:7c:d8:5e:47:eb:8d:18:da:
eb:12:2c:ba:b2:43:13:0c:36:7d:08:de:9e:7b:32:
e5:76:b7:7c:1c:c2:7f:e8:8e:a2:cd:04:3a:d1:6e:
4d:4c:8a:00:77:8e:88:82:04:ed:3b:8d:59:35:3b:
ad:13:be:e7:22:b3:2b:a1:fe:09:31:6b:4e:af:53:
8b:c4:0a:7f:89:ce:71:2a:45:f5:25:1b:79:de:ea:
bf:22:f6:99:22:11:64:72:71:65:c3:e2:c5:c0:ff:
f5:87:7b:6d:7d:eb:e8:92:45:5e:f7:30:20:07:3d:
a2:81:ac:04:2d:4d:c6:b8:1c:64:b5:1d:53:44:1b:
21:ef:ef:e7:17:43:11:4a:36:c1:7c:3c:03:24:bf:
1d:41:56:70:1a:74:eb:98:ed:41:73:4f:e8:9c:4e:
74:f0:c9:c2:fa:41:d1:ae:c1:b2:d9:99:20:f8:03:
c6:82:e8:29:e7:49:46:cb:64:2d:fc:fa:8a:fe:fa:
f8:4b:0f:a0:57:5a:87:1e:7a:b9:2f:2f:0e:3c:15:
cb:2f:df:f3:21:2e:d8:6a:d2:3b:8a:0b:22:36:b5:
b4:08:ce:88:84:d2:33:a7:cc:87:5d:dd:b6:33:0f:
77:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:37:F3:30:A1:1F:63:C6:46:46:83:F0:78:9B:9D:BA:82:87:F5:66
X509v3 Authority Key Identifier:
keyid:B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c1:0b:61:cc:3e:8f:cd:cf:55:24:2e:8e:a1:0a:48:3a:16:
5e:03:6c:f0:06:5d:bb:8a:e3:dc:b8:b7:2d:51:fb:4c:3d:23:
e7:0f:08:30:a3:ea:51:59:94:76:41:f2:d7:5b:cc:83:c2:2e:
f2:02:01:dc:38:21:7c:99:d2:17:be:4b:42:39:67:5d:17:a6:
5c:86:05:5f:34:ba:db:0b:3d:60:35:4a:0f:3e:e3:58:6d:0a:
7c:f0:0d:be:24:d5:79:a2:2e:33:2a:5c:32:5f:9c:1d:c8:cd:
38:c8:92:fe:d3:ef:d3:71:8d:cf:7f:56:d8:9d:30:05:60:b4:
51:e7:89:71:ff:4e:8b:4f:6b:9a:d9:ad:23:16:a8:9d:88:87:
4b:4b:eb:ea:e1:70:a1:9f:fa:e1:f4:46:81:b0:56:05:84:14:
d9:69:b0:20:95:33:89:48:fb:14:39:a3:82:82:39:bf:a3:b6:
36:10:b0:d9:dd:30:d4:a1:34:88:a9:42:f7:e2:05:39:c8:1c:
33:e5:f5:d5:ec:d3:bf:bb:a8:ee:24:bc:6e:d1:46:78:f6:c6:
13:c2:e6:65:b5:19:11:57:26:32:25:70:9e:6d:cd:36:0b:da:
d0:d3:f1:4c:8f:8a:2c:f8:e3:cf:5c:04:3d:4f:c4:11:5d:dd:
5c:d7:ba:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:18 2026 by rpki-client