Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier: Fkd5xMx+fs8Xvy12WmmL7LqkurRMFzTi1Oyo9+o7jlw=
Subject key identifier: 8D:69:74:D5:84:DA:DA:A3:DF:FB:47:FC:4D:A8:8E:EF:C9:D6:2A:2D
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial: 019D277212A20ADE39BE148E5E378BBA6489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number: 0821
Signing time: Thu 26 Mar 2026 00:01:20 +0000
Manifest this update: Thu 26 Mar 2026 00:01:20 +0000
Manifest next update: Fri 27 Mar 2026 00:01:20 +0000
Files and hashes: 1: LwqXAM6lPGk_PmFvOULH64ObLAs.roa (hash: MrcdOxOshx/gVLtXaalP4jwQbNYdpAAfBt14JuVSsXw=)
2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: 13SMOFwIyj3L7XqBFwL0qziLpjauJeh0ANUD74FXT7A=)
3: s-1hinZK4tY9bZC4k9BOYyXjqxk.roa (hash: qbBIxBxOXTtMEXXkSI4yM3F77zIR/XL9wvzMoK2RSOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:12:a2:0a:de:39:be:14:8e:5e:37:8b:ba:64:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Validity
Not Before: Mar 26 00:01:20 2026 GMT
Not After : Mar 27 00:01:20 2026 GMT
Subject: CN=8d6974d584dadaa3dffb47fc4da88eefc9d62a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:95:64:58:ee:bf:e3:46:5e:0d:cc:3d:4d:
ae:60:38:51:f0:34:a7:91:07:94:8a:a1:f1:ea:37:
bd:72:08:48:21:69:c0:d4:bf:53:f7:ca:0d:e6:63:
8a:20:c0:2e:8d:de:f7:e2:9e:d8:48:b7:3d:7a:ef:
f5:dc:0a:64:69:78:5b:ac:ab:5c:ae:63:ec:13:be:
5a:5f:36:6d:c3:2b:b9:11:75:93:1b:e8:e7:e0:a6:
f2:af:98:3a:d8:34:62:e7:2d:5c:4c:2c:dc:a2:3b:
80:fb:11:b7:ca:ed:1c:15:e0:91:b0:3b:d5:69:48:
27:92:23:46:9a:b7:c4:da:99:bc:89:44:b1:66:8f:
0b:7c:86:6f:57:cd:67:be:50:af:ba:1b:95:6f:28:
1e:1c:31:74:5d:de:c3:5c:b2:c2:47:08:22:ed:0c:
34:d1:16:4a:e2:9e:de:23:e5:f2:e9:ae:70:2b:cb:
ee:d9:eb:2c:f6:d6:85:af:fd:f2:32:49:e0:d1:3c:
28:36:4c:ce:d9:1c:ee:ed:c6:ba:39:4c:db:ec:e4:
2a:b0:28:83:7b:43:32:d1:44:96:e3:84:ea:05:2c:
de:ba:24:d2:72:1f:e3:f3:b2:d9:96:3e:96:9e:49:
52:e8:07:96:73:72:32:d9:83:3c:dd:e6:8c:e2:63:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:69:74:D5:84:DA:DA:A3:DF:FB:47:FC:4D:A8:8E:EF:C9:D6:2A:2D
X509v3 Authority Key Identifier:
keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ec:34:07:ea:9d:10:4e:1b:1d:f0:2b:41:6e:fb:c1:19:4b:
2f:bb:36:29:5b:0e:dc:6a:ca:53:18:09:68:af:1f:66:be:81:
34:9a:b9:9d:70:39:d7:b1:2b:9a:8c:b6:16:29:ed:40:eb:00:
ae:e8:3a:7f:79:61:e6:85:7f:12:00:ce:57:d0:60:83:98:84:
f1:5d:56:c4:d6:cc:88:6c:ae:f2:56:1f:c8:8f:54:39:f0:53:
cf:ee:b4:d5:1f:e8:89:ec:85:53:b3:21:95:8b:a8:8a:03:49:
4c:1e:14:36:42:f6:68:34:c8:72:50:2a:33:59:fe:ba:54:4d:
23:c9:a1:a7:e5:a0:97:ed:a4:09:2e:da:53:14:92:86:c6:30:
f0:ab:1d:7d:0c:19:d6:34:61:9f:1a:f9:7c:b4:9b:32:ac:4d:
1c:a5:3f:ee:30:47:fa:a6:a8:7a:9b:7d:dc:4a:68:36:6a:17:
ae:8e:32:a0:ff:65:a5:b5:ce:44:1c:9d:9d:7d:91:93:4a:b6:
20:3e:51:a9:28:b3:11:ce:12:33:03:0c:ec:26:a8:df:a9:cb:
06:87:d4:40:80:a0:51:a8:a5:fc:69:b0:1f:74:fc:e2:a4:90:
e5:f2:93:21:6e:ba:df:56:df:30:2e:10:eb:f7:4f:84:03:9d:
00:74:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:30 2026 by rpki-client