Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
File: r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json)
Hash identifier: maCifMe7LGisyvBRHlYbarReOt9iuIsTIMKJcmDFjyY=
Subject key identifier: 43:57:77:FE:EF:9D:72:AB:FF:8C:24:E0:CE:00:19:9C:1F:3E:9C:E6
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial: 019D382DDB128EE92F581B80BB0671293366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 06:00:22 +0000
Manifest this update: Sun 29 Mar 2026 06:00:22 +0000
Manifest next update: Mon 30 Mar 2026 06:00:22 +0000
Files and hashes: 1: pGuiUPTzNVEj8gsY0UXNUUTe-I8.roa (hash: 7a5tYZBHMUkgDW6nc9qBaBj8IfMsbXMdhTCvRcADwqk=)
2: p__Ljf9fbtB14fFLA3bn-BJKRV0.roa (hash: 5UgXfWB96o5m7QwdXIFEVhhiyZqKscYo5S/m82Eg2zo=)
3: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: 8E10tQ/QwX5HUPrl6CvR35l5dE/by8erPE2qAG/bxR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:db:12:8e:e9:2f:58:1b:80:bb:06:71:29:33:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Validity
Not Before: Mar 29 06:00:22 2026 GMT
Not After : Mar 30 06:00:22 2026 GMT
Subject: CN=435777feef9d72abff8c24e0ce00199c1f3e9ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:81:81:e9:22:61:67:4a:5f:0e:3d:83:22:
94:3b:0b:23:be:bf:6e:5a:00:75:95:34:64:6f:e5:
3b:6e:9a:24:0a:7f:cb:6f:d8:7b:74:a2:bd:27:38:
67:71:12:2a:ba:55:18:63:5e:aa:51:1f:2e:df:ed:
3d:b1:4d:1c:5d:1c:18:3e:e2:a6:41:26:8a:e8:2e:
dd:11:36:30:b0:75:e0:22:00:b5:da:9c:1d:b4:5d:
0b:1f:75:93:50:2f:f8:b7:6b:dc:a4:bb:0b:3b:27:
e1:09:97:89:b0:a5:9e:08:ed:94:b2:b0:7e:1c:36:
82:96:de:78:17:01:fd:a9:14:75:f6:45:a5:ec:23:
4d:f7:7d:b9:5c:78:58:29:91:e1:b8:aa:35:9a:ab:
a6:e5:49:e5:63:e0:92:a0:d8:01:79:53:97:4a:43:
05:40:d0:a1:69:53:1b:a9:1f:39:16:9e:4c:d9:2d:
2a:bf:43:b9:f4:12:2b:fa:b2:b2:f2:5a:ee:8e:56:
31:47:d2:67:37:cf:37:31:64:a9:a7:91:ab:e1:a6:
cc:5f:60:1d:49:a9:17:f8:18:73:1d:dc:32:3f:5f:
ba:93:6f:04:f1:f8:bd:24:5d:34:4f:26:a6:1d:18:
91:f7:e2:78:98:a7:84:0f:5a:13:8b:37:d2:9a:4f:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:57:77:FE:EF:9D:72:AB:FF:8C:24:E0:CE:00:19:9C:1F:3E:9C:E6
X509v3 Authority Key Identifier:
keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f7:0c:cb:5c:a9:e8:cb:ed:48:90:3c:f2:3d:13:d9:01:15:
d3:4e:7f:d8:30:d6:1d:ae:ed:a5:f1:81:e5:62:35:34:4f:89:
8c:e2:b7:67:2a:01:70:d7:49:f5:cd:4f:53:6e:a7:32:e2:31:
57:2d:c0:4f:df:51:00:a7:b1:f9:cf:f9:35:37:ae:9f:17:5e:
bd:83:0c:4e:ac:e5:09:f2:4f:49:6b:a6:dc:47:96:ff:94:b9:
90:f3:97:1e:8e:8e:dc:c6:f7:4d:e2:4c:2b:63:eb:4b:f1:75:
2a:68:ec:23:6e:b9:ca:f0:64:ac:7a:46:69:28:7d:0f:e8:eb:
dc:0a:db:fb:05:4f:e4:11:fd:c0:2b:a7:73:0b:e3:42:54:cc:
14:cb:06:2c:81:99:09:f6:d9:74:ee:b5:e9:5c:fe:8f:55:28:
86:96:b0:1a:73:04:99:3b:3b:4a:02:7f:34:2b:be:0e:c9:4b:
e6:f5:0d:9e:38:2b:a3:ff:4b:1d:86:bc:07:72:a6:20:fc:78:
cf:0d:3c:35:ad:26:72:8d:47:89:e2:23:2e:c4:3e:65:4b:ab:
88:bf:b7:a9:2c:b5:c6:23:32:39:2e:f9:b8:4b:20:d7:ff:39:
ff:41:36:68:8d:18:af:b6:a8:c1:84:89:c5:e1:a0:03:f4:41:
2b:8f:64:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:25 2026 by rpki-client