Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
File: 3Prn1OadQuT0yV2Z9IK5qUTb78g.mft (raw, json)
Hash identifier: HwrIs/0KxXJBnnweLbxI2OmL/06Uq11Xt79ApInj9sk=
Subject key identifier: B7:0D:67:9D:88:24:DC:D5:D8:30:5C:EE:29:AF:72:43:19:00:B0:69
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial: 019DCDF4B1395FBA87C22A9F7D759D0626AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
Manifest number: 15C3
Signing time: Mon 27 Apr 2026 08:00:58 +0000
Manifest this update: Mon 27 Apr 2026 08:00:58 +0000
Manifest next update: Tue 28 Apr 2026 08:00:58 +0000
Files and hashes: 1: 3Prn1OadQuT0yV2Z9IK5qUTb78g.crl (hash: QAZ1BCnB6+CbhZxwTV2UA4x22OJaguT2TDchDmgxZIQ=)
2: V7cnWr0yTia_O83ZQ8f1SQpxbe0.roa (hash: V0l2BUlDEC1rED6uk06tkHISjZ000fzVHFtSK8PSDC8=)
3: g6jJ9UyqD8gZUMIuEEYXLhGmn90.roa (hash: Vvh+6n3XDAJwELvj5IwGzupocif24c58GMylsOXJ+aM=)
4: i_ltRwYEioUiSqM_N0IGaAXBwww.roa (hash: i9BjibDTOdKVln71YPwL1G7OdUxiUoFhFjozV67L+Z0=)
5: wQFCgIWKeHWn0AoEBFccOjnC2TU.roa (hash: JB49W9zliA5p5Mlat2myJvjej3ubOs2xynZ5e8qh7Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:b1:39:5f:ba:87:c2:2a:9f:7d:75:9d:06:26:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Validity
Not Before: Apr 27 08:00:58 2026 GMT
Not After : Apr 28 08:00:58 2026 GMT
Subject: CN=b70d679d8824dcd5d8305cee29af72431900b069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:af:d1:2d:c9:3c:d2:e2:7f:a3:0d:ae:43:
fd:95:1a:98:37:4d:bd:40:97:62:50:65:72:87:ce:
8e:03:f4:3f:cb:6f:9f:f7:05:ab:2f:fd:2b:2a:89:
f0:61:1d:c4:7c:bc:2f:ac:62:db:cc:36:4e:45:2a:
72:e6:d0:5b:92:a0:75:bd:47:2d:6e:9a:29:4b:f5:
76:13:ce:54:c3:4f:a8:64:59:2c:16:64:6e:61:49:
7e:1b:5c:d5:9a:f2:15:5c:8f:70:c2:a1:c7:b9:48:
38:90:c3:1c:40:6a:b0:ff:02:e5:a2:4e:35:52:b3:
39:b8:c8:ca:89:24:b0:b7:f3:b8:49:fd:76:86:a3:
b9:4a:0f:47:a6:de:9f:cb:57:bf:de:4e:db:c8:31:
26:c4:ee:93:4c:04:14:68:26:bf:4d:ea:3d:e5:05:
26:91:9b:39:e0:60:c3:b3:78:f8:98:d3:08:52:4c:
06:c2:21:54:01:7e:25:ad:0d:4d:e8:e9:69:0f:87:
eb:91:7b:8e:fc:dc:8a:8e:9c:40:36:ba:74:b5:31:
c9:ef:1f:b3:e0:2d:63:78:14:1e:74:1a:51:bb:64:
fd:80:8f:b6:bb:db:56:1c:b6:c8:ef:21:dd:e9:1e:
44:78:7d:83:1a:22:6e:a1:25:02:76:45:5f:a0:e8:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0D:67:9D:88:24:DC:D5:D8:30:5C:EE:29:AF:72:43:19:00:B0:69
X509v3 Authority Key Identifier:
keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a5:67:0f:3a:53:93:bd:32:3d:33:e0:df:7a:67:34:e5:17:
ef:a8:70:6e:4e:12:b9:fe:d7:3b:1f:03:09:af:cd:87:c9:4a:
b3:59:21:87:d4:b6:d4:a6:4e:02:73:14:6e:7d:e6:cf:71:be:
05:ec:cf:b0:5d:aa:db:5d:c2:34:11:85:d2:9f:9b:45:17:5a:
fe:46:4b:7b:5d:aa:97:9b:70:71:0a:bf:8e:b3:92:9d:e5:07:
3f:64:39:9b:95:58:70:76:12:26:64:fd:b8:56:69:85:c4:32:
84:eb:1a:d5:78:c0:62:cb:53:2a:6a:a1:e1:40:15:86:58:a5:
1d:54:3c:5c:b0:20:9e:d3:e6:68:87:bc:5b:fd:c1:fe:67:68:
93:29:90:af:ac:41:74:b7:c0:8d:0e:6c:55:a8:ee:67:da:ce:
19:df:df:f2:7f:55:77:b0:40:66:c6:07:fd:c3:45:9d:a4:75:
36:12:16:7e:84:10:97:51:c9:bd:5e:35:b6:91:7b:6c:0b:9c:
88:8d:a5:02:b9:1d:b1:79:c9:95:d7:a0:ab:9c:70:c0:cd:48:
9c:46:34:50:6c:40:4e:3e:5e:f2:29:3d:fa:30:ed:15:dc:d4:
51:4f:43:fa:fa:40:16:64:bc:3b:c3:70:e8:44:7e:71:22:51:
58:7e:d0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:44:47 2026 by rpki-client