Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File: RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier: 90JIUdAgnd57kRfSaAtEN4tq4FDjlda17EXlREQQGG0=
Subject key identifier: 10:BD:BC:26:A6:07:20:AE:6D:38:C7:52:97:70:D4:52:13:FD:36:04
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer: /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial: 019D25F1A5422A3F79F35BB2A8E7967A027C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:01:26 +0000
Manifest this update: Wed 25 Mar 2026 17:01:26 +0000
Manifest next update: Thu 26 Mar 2026 17:01:26 +0000
Files and hashes: 1: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: Fk890c3k0BMoLKOwQ/Bk6RPO2CMJlLNF1RK8zZ/rNQo=)
2: cQbewkFEZ4acO97jlQJ5WKuKd7A.roa (hash: nw0VsiavZiymn/xF8CuU14khn+rz47RFDCWUotkUcgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a5:42:2a:3f:79:f3:5b:b2:a8:e7:96:7a:02:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Validity
Not Before: Mar 25 17:01:26 2026 GMT
Not After : Mar 26 17:01:26 2026 GMT
Subject: CN=10bdbc26a60720ae6d38c7529770d45213fd3604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:0a:da:57:d7:70:c4:c2:94:44:28:3e:0e:
e6:cb:ce:af:ad:15:f8:fb:3f:05:ff:6e:6f:91:6e:
a6:64:40:39:3c:87:b6:94:97:58:03:c6:18:d1:b8:
75:f7:84:2b:49:e3:10:fc:a7:36:e1:00:d3:48:91:
9f:21:7f:fb:50:a7:96:e6:f3:28:24:4b:33:3a:ef:
1d:e2:24:4e:dd:78:3e:3c:59:7c:ec:0e:6b:78:e5:
6c:a2:24:5b:4d:b9:37:12:ef:15:c8:b1:38:a5:41:
42:c7:6b:52:a6:24:06:c9:14:12:b1:ee:0f:cf:e3:
f5:16:41:1d:e6:37:07:a1:56:de:fb:43:6f:6c:4d:
c0:92:6f:3d:fc:fc:16:4c:6c:05:a1:40:39:b9:79:
4a:61:aa:3e:02:31:f0:dc:28:24:15:39:29:a1:7d:
c3:aa:17:21:39:eb:ee:35:36:0f:db:6b:f9:fb:fd:
cd:e9:b8:4f:a4:b8:df:f3:eb:4c:8f:be:f2:20:05:
cf:fa:9a:54:6f:b4:14:e0:e1:b5:fd:79:1f:39:d8:
fc:e3:96:a1:cd:f9:9d:5e:3f:21:50:d6:c7:e5:cd:
d1:28:fe:f7:c4:01:a6:81:09:e9:80:64:7d:a2:60:
d3:09:c2:d1:16:e2:08:2f:ed:c4:9e:c7:22:60:15:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BD:BC:26:A6:07:20:AE:6D:38:C7:52:97:70:D4:52:13:FD:36:04
X509v3 Authority Key Identifier:
keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:93:1b:cf:31:7b:1c:37:35:b0:91:88:05:97:58:d0:f0:82:
11:87:8d:1c:01:c7:1d:73:00:02:c2:90:06:c0:fb:13:d5:8f:
ca:75:e0:e3:f0:c1:61:8a:97:23:77:4e:cc:73:a6:c9:fe:99:
b1:65:ac:29:69:a4:aa:53:47:39:71:c9:dd:ca:62:ca:7d:2b:
34:a9:22:a1:5e:7d:45:09:b0:f5:fe:e5:f8:eb:d6:d1:90:9a:
50:44:d7:24:8e:69:cf:06:9d:40:02:2b:97:8a:9b:fb:98:17:
c7:d3:d3:43:ac:c4:78:21:73:cd:4d:8f:c6:0d:d5:01:41:e9:
c5:50:15:40:e0:b0:71:89:8d:1e:0f:e2:97:be:39:57:e0:3d:
44:71:a6:e5:80:f5:0d:94:82:30:3d:ef:dd:14:47:81:8d:09:
c0:cc:21:3b:46:7d:17:5d:56:44:e5:fc:55:15:23:bc:1c:7f:
fa:08:4b:57:bc:36:36:9f:e6:18:bb:36:ed:38:20:97:17:e2:
f8:e5:4b:c5:60:cc:c3:60:9d:71:33:5f:ba:3f:5f:cd:3e:8a:
e7:6f:48:95:4a:ee:30:4b:9f:8a:a0:56:01:9b:4d:c5:13:65:
a5:7c:a0:ab:5c:61:7d:c5:c5:07:b3:63:16:6d:ba:df:3f:77:
26:7d:58:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:59 2026 by rpki-client