Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File: 3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier: BSMf1HqwNDkG12hE5qDo9AIXBYHXbsOQcDgvioMkN64=
Subject key identifier: EB:CF:E4:20:7B:06:ED:A4:30:F3:0F:54:6B:6B:D0:EB:A4:D3:34:72
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial: 019DD087A5744E462CFEE86751A186D6A7EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number: 18EF
Signing time: Mon 27 Apr 2026 20:00:43 +0000
Manifest this update: Mon 27 Apr 2026 20:00:43 +0000
Manifest next update: Tue 28 Apr 2026 20:00:43 +0000
Files and hashes: 1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: /aGkuopxbkXCN0gfThlkr1DimLVqWmdatnDbMKnUg50=)
2: 9iXPkKQ54sHh9FCulI77t8C1PLY.roa (hash: /ecGydtHF8wvlQeIO0uuqqIOnlvcqPbpsJvKK5M4Szw=)
3: CnlOxC7_uwBkJ3v3U1fHQBRIdjo.roa (hash: qBL5SEn9bLiNiZ8kK6JPW1aDdUpSEsezqM0e+ePG6oI=)
4: g0mhvAZsLExNosr94fQnamWzRDY.roa (hash: /xN1qB7faHsczS8ezFck6vhb0aDhcJHPTlgHGBz6WiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:a5:74:4e:46:2c:fe:e8:67:51:a1:86:d6:a7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Validity
Not Before: Apr 27 20:00:43 2026 GMT
Not After : Apr 28 20:00:43 2026 GMT
Subject: CN=ebcfe4207b06eda430f30f546b6bd0eba4d33472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fc:46:39:73:a7:45:df:0e:f9:e1:66:c7:6d:
e3:8c:ec:63:7e:6d:cb:3a:bf:c5:04:15:27:77:fc:
d5:b3:54:3d:3e:9e:0f:dd:cf:e0:af:0b:b9:23:df:
f6:87:ce:61:cd:c1:4e:8e:63:e7:58:20:25:e5:78:
77:fd:88:00:ba:a0:fe:03:5d:f6:f4:6d:9b:0f:46:
60:9a:f1:d8:e7:e9:87:0c:e9:05:29:9d:e6:0c:5d:
da:fc:0d:70:f1:38:40:f5:76:90:21:24:b3:82:86:
36:3f:d0:56:e6:1a:cd:91:a9:f2:fd:ea:c2:71:71:
09:80:56:f0:2b:74:17:f7:04:fc:48:a7:a2:70:36:
eb:ab:8a:e9:de:ef:14:27:85:db:f7:c2:d6:cf:ae:
c9:39:48:0c:df:24:1b:a1:70:b7:e4:8e:33:e5:bf:
e6:b0:2d:0c:8c:73:10:16:5c:c3:40:53:4e:52:d1:
b6:62:88:fc:c9:90:ef:a8:d2:fa:05:25:9a:da:ae:
a5:7c:ac:9d:7c:5d:f7:01:ca:e3:98:34:34:7f:2d:
12:1b:87:63:6b:c2:bf:ac:b7:d4:4b:29:42:64:09:
f2:ea:28:dd:71:a8:c8:3b:5a:af:86:a1:fe:fa:53:
63:f3:a7:bd:d5:fd:26:02:9f:d6:28:58:d5:e4:a5:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CF:E4:20:7B:06:ED:A4:30:F3:0F:54:6B:6B:D0:EB:A4:D3:34:72
X509v3 Authority Key Identifier:
keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e9:6b:ce:11:5b:4c:ab:95:5f:cc:a7:62:46:f2:22:f5:67:
f9:66:91:03:ae:76:d3:06:5e:71:fe:77:c8:72:a2:f1:7b:61:
11:4c:c5:a6:33:70:19:57:46:cd:16:cb:46:33:dd:87:bf:5f:
7a:1f:3d:6b:8c:b4:fa:bb:11:46:c1:7f:ad:0d:1b:c8:8a:e5:
a1:7a:05:81:69:73:42:c5:fb:c4:20:ea:14:90:dd:ca:a8:a8:
11:34:75:ca:bb:fc:a4:ae:a1:80:8f:3b:f3:52:b0:2e:14:48:
97:f0:73:64:36:6b:6f:0c:f8:8b:c0:1a:2d:5f:25:f5:c6:86:
54:bd:bd:9e:c8:f6:04:3c:5f:db:d6:ca:ea:31:f5:47:2c:d6:
de:92:dc:8b:08:42:54:30:1a:99:61:b9:a5:dd:84:25:35:cf:
2a:e7:d0:90:1a:1a:96:ff:b7:3e:37:2d:97:f4:18:f6:39:6a:
3b:78:c8:e8:98:b4:f7:02:e8:19:b3:c8:29:07:1b:c9:50:02:
b2:22:15:f3:21:f2:9d:a2:a6:f1:0c:b2:8b:8e:d5:dd:a4:3f:
86:c0:d8:8c:52:e3:5d:9e:a1:b5:03:a8:22:b6:5f:e1:03:51:
1d:80:38:08:05:7b:46:6a:6c:c0:1b:d6:f1:41:fd:e1:e2:5f:
ed:32:d0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:22:26 2026 by rpki-client