Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File: RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier: 5dRuHovnaFrw/Q4ZD0Qt1H0/8qWGBC4outKWzd6LBuU=
Subject key identifier: 66:CC:AE:70:47:A9:54:5E:AE:61:FB:BF:03:93:05:08:AF:C7:6F:00
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer: /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial: 019D3941830C215BB2474570929F60C6FDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:01:27 +0000
Manifest this update: Sun 29 Mar 2026 11:01:27 +0000
Manifest next update: Mon 30 Mar 2026 11:01:27 +0000
Files and hashes: 1: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: T5gghdCg84aVdOSYriMCjVCICkN55IXrWCG1iErn5rM=)
2: cQbewkFEZ4acO97jlQJ5WKuKd7A.roa (hash: nw0VsiavZiymn/xF8CuU14khn+rz47RFDCWUotkUcgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:83:0c:21:5b:b2:47:45:70:92:9f:60:c6:fd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Validity
Not Before: Mar 29 11:01:27 2026 GMT
Not After : Mar 30 11:01:27 2026 GMT
Subject: CN=66ccae7047a9545eae61fbbf03930508afc76f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:af:93:24:dc:0d:ad:74:15:77:45:f9:bc:
78:90:1c:3f:84:42:3c:0d:20:c9:a0:32:db:a3:a5:
08:43:78:de:bb:39:5d:d7:cf:2f:0c:60:aa:8c:da:
7e:f4:a1:3b:f5:54:56:41:a0:8b:68:87:09:9a:fa:
e1:1a:80:62:45:c6:99:1d:21:7e:ee:91:24:8e:35:
20:84:3c:c6:0b:9c:82:32:1c:bb:0a:8a:25:da:f1:
f0:de:f5:e8:0b:f6:6f:51:cb:24:a5:c0:63:14:49:
3c:54:66:e2:3b:8b:5c:e5:5a:3b:4a:43:f4:a2:b1:
45:f4:71:b8:32:a8:9b:c6:21:93:ea:46:89:b4:d2:
5b:c7:b9:93:87:8e:ec:e9:b1:38:60:ef:d2:04:58:
65:6e:e8:c8:85:08:17:47:8f:ea:02:c3:99:c1:93:
e8:37:13:1b:9d:e0:9d:9d:d6:42:1a:96:0f:77:ed:
bb:42:4e:7b:ba:23:b9:d8:10:ce:1c:4d:93:30:ba:
50:f0:a8:22:1e:f8:7c:43:8d:06:e1:7b:9a:d9:ac:
1c:36:1a:24:1e:d4:a6:30:74:43:60:05:6d:d7:d6:
14:0b:ea:93:83:a2:c2:64:68:b4:2c:87:72:f3:be:
85:83:29:fd:c7:e6:87:bf:52:86:fa:a7:8a:d9:c5:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CC:AE:70:47:A9:54:5E:AE:61:FB:BF:03:93:05:08:AF:C7:6F:00
X509v3 Authority Key Identifier:
keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:17:7d:9f:28:e2:5c:13:b5:48:02:b8:84:90:8e:28:d1:ff:
f0:05:47:9f:f0:0c:f9:94:b9:4c:f6:84:53:ca:dd:70:c8:4d:
71:7c:28:3c:d6:4d:94:2f:51:d7:be:11:2d:a9:60:c4:90:c0:
c1:a4:62:8f:a0:55:9b:de:d2:6b:e2:41:d8:e3:13:b9:23:6d:
fd:73:dd:de:fc:7f:9f:0d:08:4f:bb:84:d3:f7:9a:2f:d1:88:
7f:66:bf:53:17:a0:3f:f1:8a:0c:9e:51:3e:c8:56:59:c7:eb:
2e:30:6d:60:3f:bf:48:6b:fa:6b:3b:87:58:15:7b:8d:34:a3:
01:dc:07:af:af:b4:07:00:29:b3:2d:ef:68:5a:fd:55:66:d6:
23:30:c9:29:18:14:d2:d8:48:6c:32:18:a5:37:24:af:1e:cd:
95:53:eb:af:24:b4:25:7a:b2:6f:a5:f4:18:26:91:1c:ab:b4:
f6:5a:67:87:d9:11:10:1b:bc:44:45:7d:41:9e:cd:05:3d:70:
1e:b7:3c:6c:1d:8b:f2:d5:8b:52:cc:7c:0d:19:e3:89:13:76:
4c:2b:b5:bd:bb:b4:b4:96:ca:ff:6a:d4:85:57:1c:bd:67:ce:
66:f4:94:5d:d5:f0:2a:b7:47:0d:21:1e:49:4d:b9:43:43:c0:
4e:63:65:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:06 2026 by rpki-client