Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json)
Hash identifier: l2HjYptcEWBUQ8y5coxlA0EbwvYrsFeOofTQrlSFXk8=
Subject key identifier: CD:50:88:89:02:3B:AA:AB:85:2A:12:0B:02:15:CF:E3:43:E6:D1:95
Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Certificate serial: 019DA340FEA806D621CB978EB5CB3956E9B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
Manifest number: 18C3
Signing time: Sun 19 Apr 2026 01:00:38 +0000
Manifest this update: Sun 19 Apr 2026 01:00:38 +0000
Manifest next update: Mon 20 Apr 2026 01:00:38 +0000
Files and hashes: 1: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: ER3EX+b78zTEp4jMLvAaSJhamVaLS11w8xdzpyuq68g=)
2: m0eeq8va8tOdR0d6vhTGR-m4r9c.roa (hash: IJmLN6gAClo8Re6n699DAImPd6vNHSacFHQGbqXGAqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:40:fe:a8:06:d6:21:cb:97:8e:b5:cb:39:56:e9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Validity
Not Before: Apr 19 01:00:38 2026 GMT
Not After : Apr 20 01:00:38 2026 GMT
Subject: CN=cd508889023baaab852a120b0215cfe343e6d195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:af:b7:5d:d0:56:f2:f9:1d:38:d1:44:a7:af:
29:43:92:33:8d:16:f0:a5:21:b7:1e:3d:5d:0d:a0:
19:b0:97:7e:12:17:50:63:7c:ab:16:22:9a:f1:6f:
f9:2a:3c:18:80:5d:9a:72:2c:f5:8f:fe:f7:75:a5:
65:f4:fd:37:a3:40:85:18:64:18:1b:9f:b3:35:53:
23:08:c1:03:50:38:26:c5:19:9b:43:07:89:53:c8:
bf:4b:7e:84:a4:54:13:02:5e:94:6e:bd:f8:d9:39:
5f:df:e2:1f:64:52:74:ea:0e:df:12:36:60:46:77:
63:23:30:df:28:af:9c:f7:da:38:a0:b7:94:bf:36:
df:a3:7a:78:76:1f:a2:8b:c5:cf:90:b6:26:6f:2c:
a2:a6:78:13:4e:1e:e5:41:2a:a0:d2:9f:6e:1d:64:
e7:52:78:55:d1:5b:94:2f:b2:96:93:28:21:9b:7f:
11:ed:89:52:8c:4a:5a:34:cb:c6:63:5f:08:a4:58:
d5:f2:61:24:73:c0:5b:af:94:e5:69:a6:49:b8:a9:
0b:61:9b:f3:f2:4d:86:fb:0b:96:dd:1f:1e:6e:fc:
ef:20:ff:10:d7:83:76:92:46:f1:99:a3:42:ad:44:
66:a5:e7:c2:d0:00:2d:39:4a:a4:15:78:6a:1b:85:
2e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:50:88:89:02:3B:AA:AB:85:2A:12:0B:02:15:CF:E3:43:E6:D1:95
X509v3 Authority Key Identifier:
keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cb:d9:55:e2:a2:4c:61:c5:8c:7e:17:1b:98:be:83:12:91:
e9:47:a0:e7:cd:66:35:82:23:ef:4e:15:f1:b2:95:47:ea:f7:
57:9e:54:18:ce:64:30:93:a9:7a:3b:5a:84:b5:de:b5:41:39:
23:f7:79:b7:eb:ba:46:c4:b5:2e:1d:f4:c1:e0:38:50:7b:1e:
d7:31:bb:70:2c:11:85:14:fc:a6:43:30:9f:67:47:6e:a0:a2:
0f:10:02:54:9c:c2:df:fa:24:1f:8a:fe:15:6a:1d:b5:11:dd:
60:8a:f5:0d:d8:dd:10:94:97:49:d8:1f:3b:f1:c3:b8:71:b7:
3b:49:20:72:e0:6f:de:d9:c4:f8:19:72:9a:b0:20:94:3e:fa:
00:83:0b:de:a8:8d:1f:a4:fa:40:8c:90:d8:2c:45:cb:ea:4c:
de:94:30:52:6e:21:da:09:e6:ff:eb:ee:3e:97:b6:a4:50:8a:
72:a0:76:f2:18:49:6b:cf:c0:31:73:a2:9b:98:44:72:e0:27:
19:45:b4:c5:7e:e7:79:27:dc:5c:68:4b:2e:25:d8:fe:d0:0d:
ea:32:6a:5d:e8:64:3a:e1:55:29:40:7a:6a:cf:e5:9a:e0:18:
fe:7b:87:fe:47:4a:b2:e3:1b:13:d9:e2:a4:ac:8d:20:69:38:
e5:a4:64:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:25 2026 by rpki-client