Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier: ykZdDFi2oUUgddvm1zKvR1GeVLPMGosj5WlFI3RVmVA=
Subject key identifier: 29:F0:AD:61:9F:1C:7E:10:B5:08:A0:6F:CA:0A:75:93:C2:AC:56:63
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 019D265EE935F80B2B1806BA45D9FE89F5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number: 0F6D
Signing time: Wed 25 Mar 2026 19:00:47 +0000
Manifest this update: Wed 25 Mar 2026 19:00:47 +0000
Manifest next update: Thu 26 Mar 2026 19:00:47 +0000
Files and hashes: 1: 2XECgtpjsen86VkC8yydIYPOl1c.roa (hash: BPZBQJjMYkB0nrNJVAIozX1sKQI4gxMXxsPOFyAaAE0=)
2: _2RVkv-dG4-YIAymCk1yOs7NK58.roa (hash: o6HUJs0cl57DuL7YAIkgRklqKfSqkx4WuloF1lwdZUE=)
3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: mSZAnwn/eHrv6BM0QQOk/81wwYl6zzWhome3HWrhzlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e9:35:f8:0b:2b:18:06:ba:45:d9:fe:89:f5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Mar 25 19:00:47 2026 GMT
Not After : Mar 26 19:00:47 2026 GMT
Subject: CN=29f0ad619f1c7e10b508a06fca0a7593c2ac5663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:e9:72:b8:fb:e9:2a:5e:23:88:d4:b8:6d:
a0:66:38:c8:5a:13:99:89:d0:ea:dd:b0:47:b8:36:
ac:2d:96:2b:0c:d2:45:32:fb:a3:d5:49:bf:08:70:
51:1f:99:4b:ce:82:ea:7b:03:6e:fb:49:a2:ba:d9:
dd:45:20:bd:b4:ca:e2:ba:b9:b9:ad:f4:c6:9e:31:
40:8c:30:f5:d7:75:01:2c:f7:77:07:ca:51:6f:2b:
6b:cf:5c:55:53:50:92:c4:30:65:e8:3b:43:37:99:
ae:f1:94:4a:35:af:a4:ae:26:cc:a7:9f:ce:03:46:
81:c1:cd:08:a6:0f:91:75:ce:4b:8a:ae:27:11:2b:
0d:c7:58:46:bd:c9:c9:fc:ed:f9:9b:0f:a9:88:c1:
71:f8:f0:82:88:21:b0:2b:af:e4:44:c3:07:e7:d0:
dd:ee:57:c2:e5:db:96:31:5d:16:a0:b9:4f:10:d9:
ef:91:1a:36:b3:b4:cd:41:70:81:06:c5:b3:ab:c0:
ab:85:11:6b:28:82:7e:46:3f:61:5b:a5:0f:c8:47:
fd:c1:c8:a0:2b:4a:ac:0c:46:5a:50:37:95:06:be:
58:93:9d:d1:84:e3:6e:46:fe:7e:ac:83:fa:c1:81:
5b:19:b9:b3:c5:d1:d0:e0:38:c9:af:44:9c:62:3a:
78:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F0:AD:61:9F:1C:7E:10:B5:08:A0:6F:CA:0A:75:93:C2:AC:56:63
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ed:6a:88:ed:23:54:a8:7c:7a:91:ac:8f:68:0a:c1:90:45:
2b:63:de:47:66:42:ca:d0:b9:65:cd:5d:bf:5a:34:db:de:34:
dc:b2:00:64:07:38:d7:75:45:8d:ff:99:04:77:6d:27:ee:ec:
3c:2c:aa:fd:04:17:1a:5d:20:e5:1b:57:49:fa:ed:52:86:1b:
f7:80:36:85:8f:5b:33:68:c5:71:45:bd:d7:5b:91:38:7e:7b:
8d:91:aa:e3:cc:30:62:8a:42:77:42:5e:a1:9a:20:19:10:fe:
eb:90:45:30:c1:be:70:05:5d:4b:31:9d:40:81:49:25:48:78:
26:70:4c:d7:2d:c2:89:04:96:dc:89:bb:2c:26:0f:2a:51:20:
bf:a2:47:22:ac:0a:ff:d8:0e:82:77:6d:88:f0:0f:99:9e:6a:
21:24:60:95:83:ca:0c:44:39:02:b6:5c:05:89:7b:2b:0d:11:
b6:95:de:97:dc:0f:56:15:75:d6:c1:17:a2:ab:11:1e:b7:41:
f0:79:7b:c9:71:5e:23:8c:b6:69:a6:f8:0e:4e:bf:7b:07:62:
c1:79:06:ee:69:d3:3c:0c:83:b5:51:be:0a:43:cd:1e:2a:97:
3c:57:78:84:f6:05:3d:d8:90:fb:2c:36:98:99:d6:6c:3a:d3:
93:df:b8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:03:27 2026 by rpki-client