Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
File: r-b4yudJLQZOAwcckUc5Lu3UW8c.mft (raw, json)
Hash identifier: YOA1fAH1ADru4UnCLcVmAKuT4bN80hLjzRRSV/xRui0=
Subject key identifier: 75:33:17:99:8E:AB:13:C9:35:DC:95:78:58:33:82:FF:24:F4:32:04
Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Certificate serial: 019D3A1CE7054F852078EFA1315C5FF5311C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
Manifest number: 1351
Signing time: Sun 29 Mar 2026 15:01:05 +0000
Manifest this update: Sun 29 Mar 2026 15:01:05 +0000
Manifest next update: Mon 30 Mar 2026 15:01:05 +0000
Files and hashes: 1: Alslx_oASGDhTgnk4VxtSFMgpMo.roa (hash: pyjVJGCY7h0uxXhNOv3Pu/XxJ3scX5SvQaxdIXBnRtg=)
2: r-b4yudJLQZOAwcckUc5Lu3UW8c.crl (hash: +f2EAT7cR7W/49Q65RX8boIN59lrw3lkepUFkzynsDU=)
3: wzvlYmTV-9nsSGFn0dstmC1HmEk.roa (hash: kl+8hGqZ5wyjtFNiWYNpl45G6d3B4Xj29eq45toQRJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:e7:05:4f:85:20:78:ef:a1:31:5c:5f:f5:31:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Validity
Not Before: Mar 29 15:01:05 2026 GMT
Not After : Mar 30 15:01:05 2026 GMT
Subject: CN=753317998eab13c935dc9578583382ff24f43204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:18:78:0c:a7:c6:2a:b7:0c:b9:63:6d:4f:
77:d2:53:ce:bd:c9:2a:20:3c:33:0b:91:26:7c:07:
da:e4:2c:9c:74:f4:8d:80:2e:ea:59:65:77:6a:0d:
48:e1:73:f8:7a:a5:17:5d:df:f5:9b:52:f2:f7:2e:
4c:76:28:06:fe:6a:0e:64:2c:df:e3:e0:71:1c:1d:
cb:bd:1a:8f:4d:1a:0d:7b:06:7f:8f:1d:ba:5f:94:
55:da:0c:1e:7e:27:30:77:e5:42:95:96:03:21:3f:
35:b7:d8:0b:46:9d:70:9a:4d:d7:5c:d5:60:4d:86:
5a:7d:4f:16:9e:96:a2:e8:a0:21:0f:bd:c6:a4:bd:
42:6d:19:e3:6e:5c:d6:e0:b2:03:7c:17:31:44:d5:
bb:ba:98:4f:97:d4:3d:ec:8d:f1:31:aa:d9:f9:89:
a1:e1:df:17:b3:e7:0c:1f:ba:32:a7:ea:26:7b:85:
89:ca:55:50:74:7e:60:c9:db:8b:3e:84:a9:0b:68:
36:5d:56:c4:8c:33:c0:41:b3:74:3b:d5:c5:11:2b:
02:22:d3:3b:df:21:03:7d:11:81:30:61:a1:7c:14:
2f:81:c8:5f:fd:78:2d:41:f2:18:31:46:04:55:9c:
73:f5:d2:df:63:04:37:9e:18:6f:d3:67:d9:1a:61:
b0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:33:17:99:8E:AB:13:C9:35:DC:95:78:58:33:82:FF:24:F4:32:04
X509v3 Authority Key Identifier:
keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ec:da:b9:6d:12:fd:99:c3:d3:f8:00:c1:65:cc:ec:a5:0e:
99:04:ee:f2:9c:36:89:10:e8:81:1e:a5:1a:78:54:1e:55:00:
82:f9:3c:af:24:27:c5:9a:69:9d:53:96:54:da:ac:22:b0:f8:
60:ff:72:4c:45:85:f5:a6:59:e1:7a:68:be:b8:b7:9c:54:ea:
cd:9d:cc:c4:cd:dd:d5:7d:10:5c:20:78:45:84:ca:8d:dd:9e:
60:f7:81:86:a8:5b:c7:95:4f:c9:dd:27:5e:5b:8a:6e:62:63:
61:15:1c:f6:3d:f8:49:8f:d8:d3:e3:27:8d:99:54:c6:cb:ba:
58:7e:25:e5:0f:13:77:b2:01:0f:ae:df:04:c3:d4:80:98:25:
1a:dc:47:3e:7f:c0:2b:97:ac:38:59:8b:ca:fd:5b:61:14:5c:
94:61:60:c3:6d:c0:f7:a2:7d:91:5b:c1:47:0a:a1:fb:d5:a4:
53:3c:03:b1:44:0c:76:e3:60:ab:d0:6c:98:d4:8d:80:32:59:
79:29:35:b5:96:1b:ab:c0:86:e3:32:1f:91:b8:4b:d4:61:29:
85:34:07:0b:1f:a0:6a:26:96:c2:e6:15:10:c3:cb:18:2f:7b:
cb:32:c7:6f:68:57:d1:30:cb:d2:34:21:f6:1e:17:dc:d6:ae:
78:8d:ef:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:46 2026 by rpki-client