Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier: k/XzTP8xrEOhIWfBRMbOi9gVNHnVfDJ40S4qKEKSLh4=
Subject key identifier: 3E:CE:A0:88:D6:60:44:21:13:7E:BA:C8:9B:CC:10:BE:45:86:C4:D4
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 019DDEE946A82ED1BF6F607A22F990A0765A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number: 13BF
Signing time: Thu 30 Apr 2026 15:02:02 +0000
Manifest this update: Thu 30 Apr 2026 15:02:02 +0000
Manifest next update: Fri 01 May 2026 15:02:02 +0000
Files and hashes: 1: AOYNyLogCuZgfBQZ_rhFiasTEas.roa (hash: zOItC91i7X4F3quOK9yoQD+KspwFkw26V76frNAHPSc=)
2: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: JKAiy4Ep+web9k3kQEDN7kUv7YMqo7blHdemDC7DwPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 14:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:e9:46:a8:2e:d1:bf:6f:60:7a:22:f9:90:a0:76:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: Apr 30 15:02:02 2026 GMT
Not After : May 1 15:02:02 2026 GMT
Subject: CN=3ecea088d6604421137ebac89bcc10be4586c4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6f:a5:68:f2:ac:c9:fd:e2:37:c5:f4:e4:93:
11:c6:28:93:fc:e2:6f:98:33:a5:d9:17:40:64:e0:
ee:71:1b:2b:95:de:67:3c:fb:7c:31:7a:56:29:49:
62:a2:f7:c3:92:58:9e:d2:cd:9a:fc:1c:69:9f:46:
a3:87:7f:89:f4:23:d4:eb:d7:d9:04:ae:c1:b6:f5:
c2:3a:6e:d3:ee:b1:d5:57:c4:82:d4:10:27:f8:2b:
ab:c4:37:33:c9:6e:c7:ca:a5:c2:11:61:4e:b5:57:
e5:ab:f9:df:bd:4d:d4:da:c5:04:50:1b:14:a5:f6:
12:12:45:38:dd:21:05:1b:e3:bc:de:dd:54:07:e0:
4e:a8:1c:31:19:8d:4b:8d:3c:14:85:77:15:26:4d:
4f:98:7d:80:b2:19:dc:de:2e:0b:93:56:9f:74:93:
d1:9e:da:65:a5:41:7c:78:c8:74:05:56:32:77:c1:
a9:c9:f2:99:da:d8:04:7c:71:bf:01:2a:f3:20:cd:
bc:5c:c0:d7:da:b0:5c:2f:a8:be:9b:0d:52:0b:3b:
66:0b:fd:03:a0:14:d9:ff:60:50:f0:3d:5d:f4:2d:
81:d5:22:a8:54:45:62:49:79:2a:58:55:cb:7a:8d:
18:f3:63:be:fd:92:11:1e:b7:17:7d:3b:bb:ce:11:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CE:A0:88:D6:60:44:21:13:7E:BA:C8:9B:CC:10:BE:45:86:C4:D4
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:95:ea:18:5b:0e:e7:c3:13:2a:de:e7:b4:c9:d8:a1:bf:4b:
5d:67:5c:b0:1b:99:4f:44:7f:e0:75:1d:a5:15:d1:0b:b3:d7:
d0:30:1f:a5:74:72:7b:64:03:c1:b6:76:ee:21:2d:c6:cc:f6:
62:58:01:c6:ce:51:17:c7:cf:7c:1c:d1:c0:75:aa:f5:75:fd:
51:79:19:70:16:79:e8:39:f4:da:d3:fa:38:bd:09:98:f7:7d:
b3:31:ff:be:04:6b:87:5b:33:cc:5e:50:12:18:bb:45:94:fd:
25:08:b2:79:f3:59:73:43:08:9d:f4:0f:35:9d:ae:33:f8:d5:
e5:98:03:43:5a:04:6a:ad:ed:49:a4:c3:db:db:3e:75:01:90:
93:90:b3:58:57:06:ac:67:97:17:e6:6b:bb:7b:1c:71:55:8e:
f7:cc:b2:f6:7e:a1:48:82:01:18:26:3d:7d:24:23:88:fc:11:
9c:05:f3:4a:40:34:2e:13:c9:38:3a:c1:d8:53:00:ac:93:26:
98:45:cb:42:cc:2d:f8:15:1c:4a:fd:ae:6a:1a:66:e8:12:e2:
41:a6:a5:33:bc:d0:db:6a:be:41:e9:07:a7:ed:d5:4d:80:ee:
a4:39:21:16:d5:3b:97:c8:33:f2:79:42:19:98:21:db:c5:2d:
e7:3e:da:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:48:47 2026 by rpki-client