Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
File: d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft (raw, json)
Hash identifier: 4RJ8PHO12I18rTAo4PJSD+KcbsBfOVqWm7qPPCZIa4c=
Subject key identifier: EE:2A:72:45:97:A8:D5:25:EB:6D:DF:60:95:42:07:3C:E9:C8:57:CE
Authority key identifier: 77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B
Certificate issuer: /CN=77724112f0285d830c87ee3256d51968f15bb90b
Certificate serial: 019DCC3CE2530747644BD8A0ED10DFAEF866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
Manifest number: 99
Signing time: Mon 27 Apr 2026 00:00:35 +0000
Manifest this update: Mon 27 Apr 2026 00:00:35 +0000
Manifest next update: Tue 28 Apr 2026 00:00:35 +0000
Files and hashes: 1: 6p1ednwrZQ_JDbcmNlbUx0LPSFQ.roa (hash: hIJJSdmlqRlS5NfeTFhoCLt5Vs93+x5E1RzMdfdB3oA=)
2: d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl (hash: 0re2qPREHaG9IhRmsTCIVaqKZgVmM5p7N+SrWOhm9vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3c:e2:53:07:47:64:4b:d8:a0:ed:10:df:ae:f8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77724112f0285d830c87ee3256d51968f15bb90b
Validity
Not Before: Apr 27 00:00:35 2026 GMT
Not After : Apr 28 00:00:35 2026 GMT
Subject: CN=ee2a724597a8d525eb6ddf609542073ce9c857ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5b:c2:b7:84:5c:ae:b9:2d:30:87:e7:53:0f:
b9:11:1d:ac:fa:92:3a:79:97:b3:b3:a6:f7:21:11:
15:d4:5b:32:a1:fe:b8:d4:44:7a:39:b9:8c:36:18:
c9:1c:da:dc:08:40:82:0c:a0:25:50:42:3d:d8:1f:
72:6b:b6:86:4c:94:54:5a:e9:b9:2f:1a:80:ce:95:
40:76:a1:cd:c9:8a:82:f2:ea:d5:ff:01:c4:5a:7f:
76:92:ca:7d:9b:ca:4d:0d:6a:c8:ee:4f:fd:ff:aa:
40:10:7d:af:99:0c:20:8e:85:39:7c:ab:1d:4c:d0:
2b:20:c2:5b:a8:5e:eb:c5:72:02:8e:8b:cd:8f:10:
85:44:85:cc:33:c4:11:ea:ed:24:e2:b5:58:18:a4:
5f:c3:df:38:ff:8b:66:f8:e8:6a:d8:04:0d:7e:53:
3a:66:6b:59:29:b6:9e:fd:a4:79:a0:47:c9:3a:e3:
22:cc:34:e1:02:a0:2b:d3:2a:ed:ff:8a:e6:f3:73:
e4:c0:33:eb:7d:71:5b:a4:ac:9d:df:d9:be:e5:8e:
3d:ce:da:1b:ed:5c:45:4d:00:21:1a:28:5d:be:1b:
3d:bf:b1:08:e5:62:68:cd:24:67:fa:a2:85:87:03:
e0:48:6b:86:d9:e1:44:cb:c6:7a:ef:50:ed:e2:ad:
76:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2A:72:45:97:A8:D5:25:EB:6D:DF:60:95:42:07:3C:E9:C8:57:CE
X509v3 Authority Key Identifier:
keyid:77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:45:db:10:8f:67:64:ab:b4:85:4c:33:ee:1d:a4:22:e8:6d:
0a:33:55:9d:fb:37:a7:8a:7a:fd:c0:4b:c7:c7:db:c4:77:a8:
65:fd:16:0e:f4:a5:3c:b8:bb:e2:dc:3a:e1:5b:5c:15:ab:e3:
d6:f1:84:72:17:94:93:cb:d8:36:0f:ac:11:97:0c:28:f7:96:
c6:a2:dd:6d:83:8c:cc:ff:b6:0e:9c:dd:ef:2e:d7:e6:cf:62:
33:c9:07:69:a1:19:25:28:4d:95:80:a5:40:ae:14:29:2a:82:
74:21:d7:6d:7e:db:8c:6e:df:93:1c:20:21:f9:bc:35:85:b0:
e0:3a:86:52:66:9c:d1:e0:db:dc:c3:8c:49:85:3e:51:eb:42:
fe:33:8e:cc:79:f3:f1:f5:2a:e2:02:24:c8:a6:0b:7a:67:8d:
b8:c0:5e:51:8e:fb:da:94:da:00:29:5f:cd:24:b5:72:86:5b:
6a:d9:28:16:4e:c1:c8:b8:89:0c:cb:6d:f7:d4:52:bb:ca:63:
7f:bd:92:93:47:a7:68:83:65:9f:cb:f6:6b:cd:2f:d7:3d:99:
7e:96:c3:87:bc:4c:9d:72:04:9c:8d:1e:a3:1f:1e:d0:17:67:
df:7b:53:7c:64:2e:22:e7:48:d1:ae:48:2f:76:14:5e:99:79:
ba:69:63:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 07:17:25 2026 by rpki-client