Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
File: r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json)
Hash identifier: nsuItfYIhwLOLmPhXI5Wrmlq+ePGPWxQ2/qoRTl1LWI=
Subject key identifier: 30:AE:2D:FB:71:09:AB:F3:42:38:32:AC:FF:23:38:C4:10:3D:02:BE
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial: 019D28BB72479EC6C5F559E1CF864BC7B7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 06:01:06 +0000
Manifest this update: Thu 26 Mar 2026 06:01:06 +0000
Manifest next update: Fri 27 Mar 2026 06:01:06 +0000
Files and hashes: 1: pGuiUPTzNVEj8gsY0UXNUUTe-I8.roa (hash: 7a5tYZBHMUkgDW6nc9qBaBj8IfMsbXMdhTCvRcADwqk=)
2: p__Ljf9fbtB14fFLA3bn-BJKRV0.roa (hash: 5UgXfWB96o5m7QwdXIFEVhhiyZqKscYo5S/m82Eg2zo=)
3: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: RvI4PVzEF0sfHy7OcGRcSFshiUNjBaSyoHROv2Q5gUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:72:47:9e:c6:c5:f5:59:e1:cf:86:4b:c7:b7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Validity
Not Before: Mar 26 06:01:06 2026 GMT
Not After : Mar 27 06:01:06 2026 GMT
Subject: CN=30ae2dfb7109abf3423832acff2338c4103d02be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:1c:05:3a:39:73:bc:97:0e:74:c1:f1:db:
5e:17:33:b3:69:e6:85:98:67:18:be:02:9c:9f:3a:
fd:c9:dd:03:bf:fe:11:6f:6a:0c:25:64:86:8b:fc:
83:33:5a:a0:95:a3:cf:e5:27:16:95:d6:d6:8d:dd:
d6:07:5b:43:27:39:59:e6:4c:ca:23:64:03:46:b0:
d1:c1:d3:c8:f5:e2:4e:fa:04:13:95:a0:09:43:46:
78:e2:57:12:98:e0:9d:db:93:9a:49:5c:72:d1:eb:
82:90:5c:35:c2:97:c7:21:9d:45:c0:20:49:46:ec:
da:20:8c:b1:d5:ec:1c:a3:ae:e5:73:77:5c:13:8f:
42:30:7e:e0:ec:e1:17:b0:5b:b1:13:1b:3f:7e:e6:
d9:3b:5b:5b:a6:69:1b:21:69:e6:bf:86:65:a1:b8:
82:a7:66:cf:c3:d5:2c:5e:5a:5c:a3:19:d0:ef:9d:
1e:48:d7:42:a2:05:8a:0b:2e:72:4d:e7:86:34:3f:
35:63:c1:9e:a4:f6:e5:f7:d4:86:b6:1e:0d:4a:27:
84:0c:f9:7d:7d:4a:3b:29:e9:5e:1f:b8:c7:48:49:
34:2e:72:c8:3d:8e:ac:f7:c2:13:e8:c5:0d:5e:5a:
a5:c8:7a:3b:c2:13:66:78:f1:90:2c:93:d0:8b:ed:
d7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AE:2D:FB:71:09:AB:F3:42:38:32:AC:FF:23:38:C4:10:3D:02:BE
X509v3 Authority Key Identifier:
keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3f:b8:94:3d:3c:ec:b5:01:ba:92:bf:05:f6:d4:ee:de:b8:
6c:21:87:01:14:21:99:2b:a4:f2:1a:56:ee:c6:11:a1:05:2a:
e2:68:92:f6:b6:49:2c:84:df:fc:20:3d:10:82:80:15:1f:c6:
f6:e7:b9:a3:b7:d6:32:61:79:85:f7:75:ce:f2:c7:e5:ad:68:
76:a0:ad:cc:21:60:80:61:2c:b8:83:ca:30:72:a8:36:ca:15:
2e:d8:e4:2a:79:fc:3e:3e:aa:cf:f4:b2:4c:a1:02:44:54:34:
b7:1e:18:b4:8d:35:9a:6b:26:e9:93:1f:b5:6c:8a:c0:d8:9c:
86:cf:ed:b4:7a:b8:cf:07:e5:72:64:86:81:37:73:78:59:a4:
25:fa:9a:72:41:62:85:e2:98:58:0a:65:a7:eb:c6:9c:29:52:
97:cf:75:d2:56:d4:74:25:83:2f:7c:f7:8e:d8:0c:7a:ff:35:
bc:09:33:58:e2:7e:70:ae:6a:71:9d:d1:fd:20:4f:ba:61:28:
36:9d:f2:0a:a9:d3:98:53:f3:06:39:2d:fb:6e:13:6b:2b:3c:
33:33:06:78:fc:87:43:61:92:49:65:80:93:d3:24:9e:0a:c4:
44:b0:6b:b2:12:85:b3:2a:88:55:5b:f7:9b:62:e2:b5:37:91:
1b:71:1f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:53 2026 by rpki-client