Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
File: R3QefHWNSAQTtfGwBgYRKX5EA28.mft (raw, json)
Hash identifier: E9s29ci4HTs9wU7kDi6aEk2ynL/luHXNH8iIwhLGT3k=
Subject key identifier: 8E:38:C6:EE:B4:3E:23:AC:28:68:A7:27:04:59:37:52:B2:E7:11:B8
Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
Certificate issuer: /CN=47741e7c758d480413b5f1b0060611297e44036f
Certificate serial: 019D382DD73D0911EA201434C06CA309A412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:21 +0000
Manifest this update: Sun 29 Mar 2026 06:00:21 +0000
Manifest next update: Mon 30 Mar 2026 06:00:21 +0000
Files and hashes: 1: 3IZRCOACUcLiARW2HP7kjbxOWuA.roa (hash: cLVZUJw1rLqnRks0o5eNFloDi9vUVRxfI1Y00+CjpX8=)
2: R3QefHWNSAQTtfGwBgYRKX5EA28.crl (hash: Jm7cf+AFTAQwudG5lL/3OxnceK9o4UHhNaAaMgtiZG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d7:3d:09:11:ea:20:14:34:c0:6c:a3:09:a4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f
Validity
Not Before: Mar 29 06:00:21 2026 GMT
Not After : Mar 30 06:00:21 2026 GMT
Subject: CN=8e38c6eeb43e23ac2868a72704593752b2e711b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:6c:ad:c3:d2:c3:3a:09:ea:31:6a:b0:4a:
2a:d7:c8:20:9b:0f:04:a9:59:16:86:26:24:b7:04:
58:d0:13:e4:a8:97:35:2a:d9:f7:56:08:62:06:98:
99:d5:fc:74:47:31:d9:d0:78:c1:5c:88:48:fc:4c:
57:56:4c:2b:a5:a0:66:5b:41:8a:2a:98:e3:01:7a:
b7:ad:ef:ed:b4:56:ed:fc:41:65:90:11:93:22:a0:
18:16:8d:a0:cd:f3:7f:0e:1e:68:e1:9a:0b:af:2e:
27:1b:5c:a2:e1:37:f9:22:a6:74:2c:81:ba:6d:81:
58:bf:05:7c:8c:6b:5d:a1:ee:86:57:cc:06:f7:81:
4b:1a:a3:e1:a0:af:8a:1a:7e:cb:89:e5:33:f5:f1:
63:be:cd:95:e5:da:35:8a:ba:6a:55:72:83:f9:4f:
f8:8f:82:50:4d:d3:bb:69:d2:12:3c:09:35:b1:8e:
98:5c:72:54:8f:47:3b:12:38:e5:ae:42:26:cc:79:
b4:0d:32:c4:65:dd:ab:80:f8:94:04:6a:34:c0:da:
1f:0d:d8:2d:14:42:30:cb:4b:08:bf:60:9c:48:15:
30:45:af:01:bd:ae:03:ae:f5:d3:b2:aa:86:82:e5:
10:43:0c:b6:c0:03:33:e1:eb:8b:00:a4:0d:e6:40:
d2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:38:C6:EE:B4:3E:23:AC:28:68:A7:27:04:59:37:52:B2:E7:11:B8
X509v3 Authority Key Identifier:
keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:37:3d:21:e7:34:48:1c:de:56:c8:13:e0:3d:64:0e:7a:76:
a2:61:84:53:a3:34:8f:a9:0f:2e:35:ea:89:76:90:ea:95:27:
d3:94:b2:ee:37:3e:43:6d:52:2e:27:50:d7:c3:65:0b:d5:77:
36:5e:20:dc:c6:61:b9:20:29:f8:fd:83:1a:ce:cb:70:fd:69:
52:2f:d5:23:f1:80:0d:70:db:06:8e:14:1b:8f:a4:52:6c:63:
46:83:08:22:d1:6e:41:b0:89:c1:f5:65:9d:30:9d:d9:8c:83:
10:64:1b:a9:1d:27:33:2b:39:59:e7:fa:79:70:4c:7a:bb:18:
51:62:7b:2c:35:a0:78:c2:84:fd:78:c3:a2:38:65:ce:a2:be:
9e:1b:b1:ef:31:66:7e:d7:0f:55:7d:7a:bb:fd:e9:69:42:10:
03:6d:c1:6a:92:31:35:ef:e6:c3:04:76:59:f4:4a:87:5b:44:
ec:d5:53:2d:10:93:a9:08:7d:9e:32:5f:5d:8a:28:b0:aa:e8:
15:a6:a9:68:77:aa:58:19:86:e7:28:2f:ce:56:9a:96:ce:47:
2f:d2:d7:b7:aa:c4:f1:80:7e:08:8f:9e:ef:cd:e2:2f:6c:67:
c7:0e:c4:82:de:3f:d5:c8:28:2c:13:41:9a:dc:81:71:82:d3:
e1:b2:a1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:43 2026 by rpki-client