Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
File: R3QefHWNSAQTtfGwBgYRKX5EA28.mft (raw, json)
Hash identifier: 8dqGiqIB4jJkYFm1TCcYeZ7fgSb+YEmjW6OY6Z33pFI=
Subject key identifier: 0E:80:78:E0:F5:00:7C:E8:6A:6A:4A:FC:1E:7C:EC:44:C4:AA:EF:7A
Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
Certificate issuer: /CN=47741e7c758d480413b5f1b0060611297e44036f
Certificate serial: 019D28BB0E212BD7782E6514B86EDFB1F472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:00:40 +0000
Manifest this update: Thu 26 Mar 2026 06:00:40 +0000
Manifest next update: Fri 27 Mar 2026 06:00:40 +0000
Files and hashes: 1: 3IZRCOACUcLiARW2HP7kjbxOWuA.roa (hash: cLVZUJw1rLqnRks0o5eNFloDi9vUVRxfI1Y00+CjpX8=)
2: R3QefHWNSAQTtfGwBgYRKX5EA28.crl (hash: 7JavaIT4z8fn4dSv2rvhhrPpgtwhz10ExorJ8ZTvch4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:0e:21:2b:d7:78:2e:65:14:b8:6e:df:b1:f4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f
Validity
Not Before: Mar 26 06:00:40 2026 GMT
Not After : Mar 27 06:00:40 2026 GMT
Subject: CN=0e8078e0f5007ce86a6a4afc1e7cec44c4aaef7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:53:15:dc:81:14:78:e0:9e:21:e4:48:93:
28:0d:6d:0e:da:5c:82:2a:a9:1a:60:85:bd:ff:4b:
a5:c3:21:ce:bb:e6:71:d4:91:c8:15:88:47:c8:a2:
b6:fc:44:72:e0:c1:4c:a9:a6:81:7b:41:e3:d0:d6:
7b:f3:56:37:73:c9:8c:2f:d7:a3:0a:81:4d:c5:7e:
0a:b5:c0:12:13:aa:66:48:97:ef:76:8e:06:3a:6b:
e7:0f:a6:f3:58:93:b1:94:32:ee:5d:ef:ee:16:4f:
54:66:fc:ba:76:eb:95:56:0a:28:9d:ce:d3:97:d4:
28:08:83:a0:cf:b1:8f:d6:a5:fe:5d:ec:94:ea:a7:
b9:ef:67:68:b5:bb:14:82:3d:f7:63:79:66:8e:39:
b9:43:4c:e7:7a:a8:2a:e2:e8:7d:a1:f4:fc:86:4f:
28:a0:1e:df:cf:f9:17:62:13:35:43:3b:9f:ce:fb:
c8:73:d7:c8:41:47:d2:82:7b:d3:e7:ad:60:e4:5d:
62:73:8b:48:05:0b:70:52:ae:49:05:65:ef:48:53:
a7:6e:07:26:56:b1:dd:fa:3f:d8:6a:a4:d8:9f:20:
e7:3c:2f:cb:95:c8:3f:60:ba:01:be:19:84:08:4c:
d9:5c:18:3d:bc:09:e9:07:82:88:1a:7e:36:df:43:
92:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:80:78:E0:F5:00:7C:E8:6A:6A:4A:FC:1E:7C:EC:44:C4:AA:EF:7A
X509v3 Authority Key Identifier:
keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:68:81:7c:8f:fe:07:6d:f2:e4:9f:5b:9f:73:38:68:97:22:
b7:17:24:c1:31:07:01:bb:02:9d:7f:0c:14:d1:b3:66:c8:bc:
32:f7:48:9b:ca:f0:f5:7e:d1:ba:af:fb:08:d3:2c:0f:03:f0:
87:81:c1:f5:b4:51:08:62:bd:63:8b:c1:91:f7:9d:3c:68:87:
bf:40:bd:3d:d0:e9:c8:4e:21:1c:12:7b:25:47:de:13:9e:e7:
af:c2:ee:07:ef:7d:27:37:98:89:df:6e:09:20:42:d1:0a:b9:
42:ed:2e:87:5a:47:7b:7c:9b:36:af:89:5d:04:d8:5d:19:60:
0e:c3:cb:46:d4:d4:f9:d0:e7:b1:59:74:94:dc:3a:02:01:a4:
bb:f9:8f:20:17:18:e0:bb:27:b6:cd:ef:58:68:22:cf:70:a8:
bc:67:56:16:36:4c:51:d5:21:78:34:d9:df:38:79:54:bc:6b:
71:50:a0:7c:d5:11:e7:c8:a3:ca:e9:36:03:e0:b7:a5:96:17:
87:ee:c8:e0:be:a5:17:e5:fb:1a:ca:b1:17:f7:67:f6:21:15:
5d:29:6f:46:2a:c7:1c:81:5d:e9:41:3d:ef:23:bb:b9:ef:bd:
49:37:af:80:a4:10:e4:b7:87:86:b6:39:52:5f:48:6a:6e:0b:
d8:c6:d6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:34 2026 by rpki-client