Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
File: edQ3WEq9tIITYw3KpfAMnSw8wXk.mft (raw, json)
Hash identifier: vROtBNBz9A2Gz+f1f6zPVwkN2NJEWG3/r/ioE3qIvFk=
Subject key identifier: 46:4B:E6:37:96:C1:B3:4F:5E:1D:57:7F:3E:18:4C:7B:1E:AE:75:56
Authority key identifier: 79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
Certificate issuer: /CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Certificate serial: 019D39AF21ACC18B32327106E8837A5384A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
Manifest number: 133F
Signing time: Sun 29 Mar 2026 13:01:11 +0000
Manifest this update: Sun 29 Mar 2026 13:01:11 +0000
Manifest next update: Mon 30 Mar 2026 13:01:11 +0000
Files and hashes: 1: edQ3WEq9tIITYw3KpfAMnSw8wXk.crl (hash: Dmm+3ng3F6/7vIFOgvgm1TLse+71O7W/2EjB45meTFM=)
2: o2ujZ5WYldu5AZ-vxsOFgZG5-2g.roa (hash: WLtxFHhgeLjy2SQKVLToiGcZPrDlIVzRMO9KiBUqjsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:21:ac:c1:8b:32:32:71:06:e8:83:7a:53:84:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Validity
Not Before: Mar 29 13:01:11 2026 GMT
Not After : Mar 30 13:01:11 2026 GMT
Subject: CN=464be63796c1b34f5e1d577f3e184c7b1eae7556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:39:7f:36:99:96:70:b1:88:41:50:9c:42:
bd:a8:c5:f3:22:87:5a:39:bf:8a:c7:8a:51:4c:86:
b5:29:90:51:dc:91:34:74:10:b4:1f:41:f4:67:da:
57:b7:3d:89:3a:86:f3:ad:a7:4b:b6:c4:60:ec:13:
07:98:01:10:50:62:81:d1:4a:72:52:16:3f:32:88:
9f:85:3f:1a:ee:3b:27:49:32:a0:8a:b3:11:63:33:
7a:88:49:41:b8:c5:9f:76:de:7d:12:02:fa:1d:50:
fd:55:c2:98:f7:34:fc:e5:9d:6d:5c:b0:36:89:91:
1b:b1:92:83:62:fc:05:d6:84:f2:ed:ae:fd:fe:9f:
ba:c1:5b:db:c8:bc:3b:86:60:a2:d5:57:a5:4f:47:
fc:cf:e3:74:23:51:8d:d8:29:e2:37:f7:da:15:63:
cc:ed:cb:cd:bb:77:bf:47:5d:d2:4e:ae:f8:67:d7:
43:75:3d:47:c5:f7:59:9c:f1:cb:0e:4f:88:ca:71:
18:95:e6:19:5a:47:d3:ef:7e:41:10:4a:f9:87:39:
fa:9b:53:6b:c8:21:10:2a:29:75:00:21:7c:7c:75:
6f:c9:2b:06:7c:c6:af:57:c8:60:f1:dc:fe:72:53:
1c:e2:50:7e:28:0f:52:17:1e:ad:ad:15:ca:1e:85:
9a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4B:E6:37:96:C1:B3:4F:5E:1D:57:7F:3E:18:4C:7B:1E:AE:75:56
X509v3 Authority Key Identifier:
keyid:79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3c:63:ed:b1:c7:96:de:b1:8d:7f:bb:e7:f6:93:13:a0:d4:
c9:ac:74:d1:ec:13:4d:89:18:bc:90:94:bc:1e:25:79:96:f1:
01:c5:d6:69:a1:80:3e:65:63:0e:34:98:08:60:4a:73:11:5d:
0d:ba:ee:f8:cc:23:99:05:01:00:2c:ae:79:45:4e:88:6b:e5:
84:b3:e3:d8:82:bc:8d:2b:0d:3d:22:f9:4d:c1:e9:07:65:8f:
2e:90:81:b3:c2:e2:ea:64:2e:04:f2:44:df:de:e5:3f:47:a0:
71:ca:8d:37:5c:e9:b3:77:14:b9:72:c1:07:24:ca:f0:d1:c5:
a1:82:1b:52:08:a6:56:4b:35:30:44:96:29:06:6d:62:03:a1:
a2:cf:63:98:80:f9:59:4f:5f:c8:f0:fb:66:21:b6:58:6c:35:
6f:16:06:5a:05:93:d0:ea:09:63:ac:f2:ff:59:c4:ce:05:d9:
46:7a:a5:79:53:2e:c2:54:81:f8:e7:48:4b:01:ef:cf:44:c6:
d6:af:97:fb:9d:97:df:9d:5f:86:62:bd:81:1f:b5:12:7a:02:
7d:ec:96:3d:59:58:df:cc:41:f5:46:5a:8c:fd:ef:6a:45:73:
eb:d2:47:b8:28:40:d3:30:53:e8:26:75:16:65:d9:53:ad:fc:
bc:3f:03:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:10:40 2026 by rpki-client