Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: s459NHSe8R4jI1pPVxb26N1QCjXhHgoTJY7lubF46U0=
Subject key identifier: 8F:63:74:9B:0C:2A:95:C6:73:A5:A0:8F:85:82:B7:16:8C:85:60:40
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 019DD0F5A89869BC189C853C2E6351905B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 18E8
Signing time: Mon 27 Apr 2026 22:00:53 +0000
Manifest this update: Mon 27 Apr 2026 22:00:53 +0000
Manifest next update: Tue 28 Apr 2026 22:00:53 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: xAqDLJ5H3+wDYqByJX++qXERtsdrj6ZB/87sM6ULR2Q=)
2: BkDRLAa3B4lViMgjpTtfQSFV14I.roa (hash: FjVWnkZKxfwmWvnmDOyzpHJdLPGSitKsvtBzxG3wncA=)
3: nFz68vxexIG1S-RusF1_qXkv1Yc.roa (hash: CL/0BWaI5R4mYNyzheF3UgRNXWDP8rh4d3WLBBru+lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:f5:a8:98:69:bc:18:9c:85:3c:2e:63:51:90:5b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Apr 27 22:00:53 2026 GMT
Not After : Apr 28 22:00:53 2026 GMT
Subject: CN=8f63749b0c2a95c673a5a08f8582b7168c856040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:5e:cf:a2:f8:5d:27:60:0a:f8:14:56:35:
d9:bb:9a:5a:74:96:f0:45:27:35:46:e7:04:1f:be:
88:ef:18:bd:37:dd:c3:5c:df:79:25:07:ec:19:d3:
78:4e:b7:be:39:a6:bf:e1:c9:96:9d:67:15:18:85:
10:ac:36:32:8f:80:ee:74:11:c1:e9:18:a1:a4:26:
04:5c:02:56:60:fc:89:f2:ae:e8:30:12:ad:ac:15:
89:12:a7:21:fd:ab:9f:6c:04:62:23:2a:78:07:e6:
a5:43:fd:d7:2d:2b:c6:7d:f4:99:8d:05:91:86:40:
6d:19:9d:58:fb:75:59:ca:22:e3:d3:32:76:c8:77:
6f:64:3b:df:6d:92:e1:b8:a2:da:2f:28:91:05:4a:
55:1b:88:a7:eb:12:0f:fb:66:ea:24:89:e1:94:90:
be:59:d6:85:8d:bb:b6:ac:70:ed:c1:ef:2b:6c:f5:
d3:11:21:99:35:1e:2a:c7:b7:da:6e:48:29:8b:5c:
f3:85:4b:7d:05:75:34:6d:ea:9c:13:3d:49:bc:e2:
de:77:2a:ba:20:b5:34:48:bd:48:2c:96:0c:e2:79:
30:2d:df:fe:ec:c1:3a:4f:18:7d:5f:5a:56:10:75:
c2:d9:3a:a2:8c:b4:07:7e:ce:b4:3f:8c:4f:52:31:
f8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:63:74:9B:0C:2A:95:C6:73:A5:A0:8F:85:82:B7:16:8C:85:60:40
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2e:3f:ec:ba:f0:92:6b:1d:af:56:98:9e:40:6c:df:c5:e0:
41:4d:1e:85:5b:19:8c:02:0e:38:2e:cb:f2:0f:a7:f8:7d:07:
8d:82:10:1b:22:28:76:f7:95:67:e7:47:8d:60:40:69:06:2c:
f3:8f:71:95:94:25:72:77:d3:bd:12:a1:0d:be:1e:0f:73:4a:
4f:50:e3:c6:bd:12:4b:ad:e7:0f:4a:46:fe:d9:ef:62:3e:96:
ca:ae:fa:93:a7:2f:98:f8:ad:d5:49:2e:79:76:24:65:b1:5c:
bf:6d:97:77:0e:9b:d6:13:9a:97:19:eb:14:ef:fd:05:9e:24:
4b:28:5a:02:54:d7:71:ec:d4:70:24:d3:9b:98:80:50:02:c6:
ef:ad:88:48:aa:a4:11:52:d0:48:81:e0:ea:17:c4:10:25:c9:
ae:4b:9c:cf:dd:e2:a3:16:ea:67:ce:49:ae:af:b6:73:10:58:
0e:71:4d:c4:c0:44:5a:48:40:60:a8:b9:ea:20:f2:b6:df:71:
1e:ba:b3:11:e0:44:6b:0b:12:f8:fe:54:f9:4f:60:16:bd:4d:
cd:49:6b:b1:c2:1f:51:2d:bc:f8:6a:02:f3:57:6d:b0:a8:e2:
b3:83:d3:84:ae:11:1e:f5:2d:7d:d7:46:47:b6:af:83:eb:bb:
46:99:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:48:12 2026 by rpki-client