Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier: RQq+NqfC0VNKJVO8ohvsc0IlfNw2srgbzI8cOgnbuh4=
Subject key identifier: 23:E9:8A:C9:C3:2F:64:16:78:65:48:41:19:F8:8B:2A:ED:AF:B3:70
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 019E9B177295D852AF23BD3E51131D5743A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number: 102E
Signing time: Sat 06 Jun 2026 04:01:05 +0000
Manifest this update: Sat 06 Jun 2026 04:01:05 +0000
Manifest next update: Sun 07 Jun 2026 04:01:05 +0000
Files and hashes: 1: 2XECgtpjsen86VkC8yydIYPOl1c.roa (hash: BPZBQJjMYkB0nrNJVAIozX1sKQI4gxMXxsPOFyAaAE0=)
2: _2RVkv-dG4-YIAymCk1yOs7NK58.roa (hash: o6HUJs0cl57DuL7YAIkgRklqKfSqkx4WuloF1lwdZUE=)
3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: 6mBPRAledqBjbzHah9JXpulabK0AWrz5nFWmJpI155M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:17:72:95:d8:52:af:23:bd:3e:51:13:1d:57:43:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Jun 6 04:01:05 2026 GMT
Not After : Jun 7 04:01:05 2026 GMT
Subject: CN=23e98ac9c32f64167865484119f88b2aedafb370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:33:94:88:27:14:0c:59:80:3f:30:dd:99:
78:d9:fe:09:02:46:8b:f6:d7:6f:4d:e7:41:fa:22:
b0:f0:8a:8d:c6:1b:5c:54:35:d2:06:29:35:99:c4:
4f:86:04:58:e6:e6:bb:fb:0c:c8:be:e7:c3:1f:70:
a7:03:14:63:58:03:9c:b0:6c:05:4d:b2:48:f3:cb:
61:ef:46:d5:a3:56:b3:f1:14:e3:bb:8a:dc:fd:3b:
14:b6:dd:3b:dc:ac:e2:14:db:29:60:ad:68:ff:83:
4b:73:ec:d0:84:59:86:1b:5f:6e:16:fa:94:59:eb:
13:3b:96:f5:4d:23:7e:a6:f5:a0:cf:c2:b0:7f:eb:
fd:23:e4:c8:58:f2:7b:e8:15:cb:35:8a:41:87:6e:
9f:92:5f:93:81:ca:7c:5d:14:6f:91:10:d4:f8:28:
f9:ef:5e:88:b0:de:ce:2b:c1:9e:de:22:47:eb:cc:
1d:84:93:22:b9:bb:28:8b:9b:68:8e:1d:57:f8:54:
96:3e:ff:fe:16:61:8f:96:b5:e3:c1:48:3a:4d:4b:
b2:73:7a:a9:ed:72:9b:71:24:11:bc:1b:df:16:09:
fa:f4:ea:ca:d9:d1:53:0b:34:94:f4:0b:53:59:42:
07:70:25:c7:e1:60:94:0d:86:78:80:c0:4f:8a:08:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E9:8A:C9:C3:2F:64:16:78:65:48:41:19:F8:8B:2A:ED:AF:B3:70
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:40:81:26:a8:84:c2:eb:95:e2:9a:aa:42:5f:78:f4:00:99:
0c:82:90:1d:f8:75:26:ff:da:29:8b:9f:15:99:2a:0c:ae:0a:
d4:4a:d6:52:35:c4:f6:bb:9e:4c:e6:eb:6d:b8:25:f8:58:a4:
f9:92:15:b8:51:80:d1:2e:3b:61:7e:b9:a9:ad:6a:90:e7:7e:
de:5a:b3:37:15:6a:d1:57:3a:05:a2:e2:db:4f:fa:bb:9d:9a:
39:a6:f5:4f:5d:0e:10:1d:db:44:a1:b6:53:a1:07:0d:93:db:
c1:09:d4:28:c4:81:89:93:df:48:8b:6f:06:24:86:0a:56:9a:
de:52:71:b6:73:21:f8:f0:e1:5b:14:4e:76:91:06:db:1b:c9:
96:ba:89:8e:9f:3b:a3:3a:22:bc:4e:8c:3e:dd:25:2b:f3:21:
cf:27:06:c3:ed:7d:9b:c3:2a:61:1d:b1:c5:2a:3e:b4:4b:53:
ba:9e:51:c2:e5:87:80:d6:97:64:4f:b1:5f:63:0e:97:13:ea:
30:cf:0d:f0:cb:f4:f1:78:49:24:99:d9:68:cf:f0:c1:5f:dc:
ec:c7:fa:be:be:91:ee:be:58:4d:32:61:2d:e1:ca:4b:77:d6:
e7:a0:0e:05:2e:fd:1d:0c:9c:26:bd:ef:24:6e:0a:bd:25:f2:
01:de:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:19:19 2026 by rpki-client