Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: QXPegn5B7cgnXh0uAouxRgbDbe5ean01nhox02Gnw5g=
Subject key identifier: 63:4C:F4:2D:29:75:A7:AF:DF:32:08:84:F8:5D:B7:55:E5:53:67:1D
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 019DCF07D0AD9FA51AB863942889DEE31586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 17BE
Signing time: Mon 27 Apr 2026 13:01:28 +0000
Manifest this update: Mon 27 Apr 2026 13:01:28 +0000
Manifest next update: Tue 28 Apr 2026 13:01:28 +0000
Files and hashes: 1: 2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa (hash: UnzgZZ3TVB6578Tog21CNFea50mTLp1x803U9EWHzmU=)
2: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: WiecHpoPhpVWEPhqtF0bfsprD6RWMunylPe36qRjuXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:d0:ad:9f:a5:1a:b8:63:94:28:89:de:e3:15:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Apr 27 13:01:28 2026 GMT
Not After : Apr 28 13:01:28 2026 GMT
Subject: CN=634cf42d2975a7afdf320884f85db755e553671d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:bf:41:e6:65:d1:ba:1f:51:19:b3:b1:5e:
60:38:53:ec:18:c1:84:62:da:35:9d:37:d6:d9:a6:
1d:e1:12:d8:fa:5b:cc:48:b8:e5:9e:9d:52:4f:e4:
90:1f:f4:12:ab:5d:b5:b0:a5:ac:eb:45:b0:9f:fa:
c3:6c:cf:76:3d:22:5c:ec:60:e2:e4:de:ae:b5:0d:
84:99:77:62:24:f1:c8:b6:a6:ab:a0:01:39:79:d3:
40:1f:c2:b5:e8:25:d6:d9:f4:06:87:94:fc:b4:ca:
a6:90:2b:a6:7d:d9:e4:90:57:30:69:dc:d1:d4:a7:
8f:51:8a:d4:bf:1e:41:30:12:92:31:b0:81:f5:ea:
61:33:0a:9e:08:af:bd:53:1e:17:60:e9:07:6c:f0:
0c:e4:c7:80:35:df:a1:0d:7a:12:b6:38:78:c8:58:
c9:d2:40:4a:fd:50:af:8d:03:02:bf:8e:e5:cb:8f:
91:14:ac:5e:48:5e:78:bd:cb:eb:d8:07:37:dd:0d:
c2:bc:e2:61:5e:eb:c1:b2:7c:d0:13:c2:27:73:87:
ea:ee:c2:b4:45:d0:ca:9f:51:1f:b1:e8:f4:44:35:
05:d0:28:1a:b8:6e:91:02:bf:e5:e6:96:d7:0d:d1:
09:a9:a2:d9:0c:a0:3f:2b:6d:82:6a:ca:e7:5c:04:
36:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4C:F4:2D:29:75:A7:AF:DF:32:08:84:F8:5D:B7:55:E5:53:67:1D
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ea:89:bf:b8:26:de:f8:47:d2:15:97:10:83:1e:16:1c:72:
d2:a5:e8:6b:74:ec:37:ba:c4:ef:c8:2b:32:d8:50:6b:cb:3c:
65:3f:71:fc:82:5b:f6:02:dc:b7:3d:f2:0d:8c:16:8a:96:7e:
c7:b2:3b:ef:af:b8:eb:a7:e7:04:24:aa:74:f4:a8:e9:43:e6:
47:53:0f:58:88:cc:c6:d7:97:c7:5a:da:3e:e8:74:9f:31:f8:
b1:05:c6:7e:2d:db:2e:9e:90:93:76:f7:2d:04:57:2e:f8:07:
9b:72:08:31:2e:87:7d:37:08:a5:57:0c:66:3f:b2:94:b9:9a:
56:3b:34:f9:ea:f5:54:ca:79:04:06:da:04:3f:f8:d5:51:d9:
8f:81:ca:dd:e7:f5:79:cc:50:52:72:8d:12:4d:2a:91:3d:a0:
4e:a3:71:71:07:17:7b:0a:3c:8c:24:94:28:83:df:ab:bf:86:
9c:ab:e6:84:16:65:fa:d1:eb:fb:0b:32:65:d9:15:9a:fc:00:
bd:b0:11:d5:71:28:eb:fc:b9:55:b1:c8:1b:61:3c:92:58:e3:
08:19:f3:2b:cf:d9:86:2f:99:02:40:f1:a2:63:1f:7f:ff:77:
92:16:80:4d:d7:5e:fc:5a:3d:6b:db:54:b9:3d:e1:95:df:58:
68:df:40:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:16 2026 by rpki-client