
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier: lLmdNe2o9E2kx/hYZfj0cs2HFSKeSRPH55RB5QnfBLk=
Subject key identifier: CF:92:DC:68:49:5B:65:97:28:6A:24:FB:4D:86:3B:2F:6F:81:BC:7B
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial: 019E2091180B23990BC7BFE872F69F2AC55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number: 08A2
Signing time: Wed 13 May 2026 09:00:40 +0000
Manifest this update: Wed 13 May 2026 09:00:40 +0000
Manifest next update: Thu 14 May 2026 09:00:40 +0000
Files and hashes: 1: LwqXAM6lPGk_PmFvOULH64ObLAs.roa (hash: MrcdOxOshx/gVLtXaalP4jwQbNYdpAAfBt14JuVSsXw=)
2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: 9yLkiOmv6lxHFeC6KGintBZsZEp63HoVW4xeek6MPS8=)
3: s-1hinZK4tY9bZC4k9BOYyXjqxk.roa (hash: qbBIxBxOXTtMEXXkSI4yM3F77zIR/XL9wvzMoK2RSOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:18:0b:23:99:0b:c7:bf:e8:72:f6:9f:2a:c5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Validity
Not Before: May 13 09:00:40 2026 GMT
Not After : May 14 09:00:40 2026 GMT
Subject: CN=cf92dc68495b6597286a24fb4d863b2f6f81bc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:e5:8c:d5:5f:b4:80:c8:b4:50:a3:fb:68:
c2:e6:72:54:9a:8d:b9:14:d8:3c:f5:7e:4e:d6:f4:
90:7d:b3:17:06:3c:95:69:b0:5d:bc:10:a4:1a:86:
88:03:99:27:6f:fc:78:7e:94:68:f0:48:aa:8e:ad:
1a:dc:a6:d5:5e:11:32:b5:fd:0b:b1:86:fa:3d:51:
fd:32:48:c7:88:d6:fa:a6:5c:ef:0b:d6:91:94:b2:
2f:73:13:af:95:a4:a6:ad:ff:4c:74:2d:c3:ca:ba:
f6:d3:13:6b:ad:b4:e2:ff:52:31:7a:70:37:b2:c2:
6d:82:7c:58:d2:94:12:d3:e6:5f:4f:d3:ff:51:5a:
ac:0a:86:46:63:bc:ec:15:91:da:04:4e:f0:14:59:
19:bf:20:e1:49:72:db:e1:a5:d8:38:96:18:3c:47:
56:99:b6:df:f9:8c:b5:46:9d:54:b7:fc:5e:30:e0:
54:af:d7:9f:c3:a7:b6:10:92:b3:50:a0:d6:f1:82:
04:dc:bc:d9:8b:8f:f8:43:16:b0:bd:e0:c9:81:6d:
62:9d:80:b8:f6:cc:0b:cc:75:65:ab:3c:4f:88:4b:
e8:ca:2e:1a:93:7f:a9:fa:55:74:7f:e7:49:d4:e2:
ac:18:fc:59:bd:57:65:fb:e2:7d:e6:51:ed:d0:48:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:92:DC:68:49:5B:65:97:28:6A:24:FB:4D:86:3B:2F:6F:81:BC:7B
X509v3 Authority Key Identifier:
keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f5:fc:22:02:4b:b4:39:8f:8e:a7:c1:e0:dd:d5:d3:bf:c3:
9f:41:7d:09:6b:c7:c8:16:42:64:d3:dc:f3:37:d5:a9:20:1f:
8e:59:35:87:53:fe:59:b2:20:83:3e:18:94:e6:c0:76:dc:4b:
08:50:ca:3c:e3:60:fb:e9:bc:53:c2:85:d9:8c:9b:bb:be:b7:
d6:0a:94:e4:67:36:80:a8:4b:1f:d2:e4:ea:8c:d7:4a:17:fa:
50:53:89:d6:bd:fe:b9:ab:cf:6e:01:64:de:96:1c:9e:d3:ab:
cb:b3:6d:67:0d:13:9d:d1:07:00:09:53:bb:bf:7e:31:3c:69:
21:4a:f6:7d:f5:23:9e:21:c1:fb:57:c1:2d:0e:aa:af:0f:8f:
53:b8:c6:37:bd:f4:02:78:0c:ee:c2:84:f5:1d:cf:63:b7:18:
4f:41:55:b1:9b:98:c9:64:0f:69:77:ac:41:c5:62:8a:85:cb:
d0:45:54:f5:66:41:ec:1f:6d:72:88:7b:11:32:0a:de:63:e7:
80:cb:dd:0c:a5:31:ad:6a:b1:4e:74:e9:f6:ac:65:be:0f:e0:
56:0b:6f:7e:37:9e:49:86:b5:d2:72:35:36:73:8a:3b:30:29:
b8:85:f5:9e:11:93:c6:d1:f3:1d:7c:e9:97:51:2e:58:51:0a:
ec:d0:99:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:40 2026 by rpki-client