Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: wTgk99jCWaFGPqSgVZB/RxKa4WhJ5O6wDIEE/Hg8To8=
Subject key identifier: 3A:95:87:E2:E9:DE:C3:25:AC:19:86:49:71:76:5D:E8:93:08:A1:10
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 019D98BDFD2A22984EDFE8200CDC725A4F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:01:20 +0000
Manifest this update: Fri 17 Apr 2026 00:01:20 +0000
Manifest next update: Sat 18 Apr 2026 00:01:20 +0000
Files and hashes: 1: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: JKV1Dp4ME+N+0s2sCFz4rrSya8R/kYPXJYU9FfPt7Fs=)
2: 7DFhLxfNsNdBG7misMM2Gd6pq98.roa (hash: 91BxkeL//UY4lGamLg4LH3uIYXXl6dNvyu0iOuqwroo=)
3: kOLGFIQ68N0t89GXfLW_l-tuaZs.roa (hash: JEbR7GHzj1yo7N6pB32D4eZu3GhxlqvfkdXGhcPXMmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:fd:2a:22:98:4e:df:e8:20:0c:dc:72:5a:4f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Apr 17 00:01:20 2026 GMT
Not After : Apr 18 00:01:20 2026 GMT
Subject: CN=3a9587e2e9dec325ac19864971765de89308a110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:cb:85:79:e3:e5:7b:b3:85:1d:bb:4b:db:
5d:ac:ff:94:0b:39:2a:14:ea:de:5b:5a:67:fc:7c:
fc:e3:1a:df:c1:a4:3a:e2:9e:31:5e:04:d1:97:79:
22:4b:4c:bc:bb:af:c0:2c:ef:e1:f5:b6:6a:59:35:
5e:46:1c:3d:35:67:b0:f5:63:65:9f:ea:a8:59:80:
f2:29:ae:38:df:89:57:84:db:1f:a6:27:aa:3b:f2:
db:8a:16:cc:ea:14:95:36:49:a7:3b:59:8d:8b:78:
25:9c:90:ce:ae:d9:35:ae:23:9c:42:00:90:d6:1a:
09:d5:b8:67:8e:17:13:0e:44:5a:27:cc:b8:c0:e3:
88:32:5e:47:27:69:0f:fa:fd:c4:ed:35:ac:26:74:
59:e9:46:0d:82:d6:b7:fc:8c:81:9f:91:6e:a0:07:
d7:ff:ec:6c:ee:4e:eb:20:1a:10:bb:8d:7b:94:20:
9d:fe:82:ed:4d:67:9a:49:c4:f0:a7:c3:10:8b:32:
4c:26:ff:e4:15:a3:ab:e0:b8:62:11:5d:e6:a9:44:
3f:1a:7d:21:1f:62:09:22:f9:ca:63:15:1d:e5:14:
6f:eb:a3:59:ab:71:4d:60:6f:a1:90:87:5f:fe:26:
81:9d:32:a4:55:49:8f:0f:e6:97:8f:71:07:10:e4:
d9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:95:87:E2:E9:DE:C3:25:AC:19:86:49:71:76:5D:E8:93:08:A1:10
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4a:e1:15:3e:c0:00:c0:26:83:e8:1a:cc:16:5f:0f:f7:90:
5c:96:64:6c:6e:27:cc:81:e8:fe:a0:53:5c:6a:8e:0a:f5:8b:
56:4f:32:7a:7f:f7:20:11:62:00:13:11:40:22:b8:d5:2b:46:
b8:5d:58:ed:60:ad:e8:b4:e4:c5:85:7a:a0:01:2f:6a:fa:9d:
c8:85:53:49:c8:4a:f9:89:59:bd:60:ee:2d:41:ac:32:9e:60:
85:fd:d2:ed:13:1f:89:45:f8:50:83:4b:92:10:3f:ec:7d:38:
8e:6a:d9:71:7b:76:4f:82:fd:0d:75:28:1a:d6:bf:35:d7:59:
83:62:65:14:6a:a1:55:df:40:b3:95:30:eb:3c:fc:0b:3b:44:
80:6a:65:bc:72:a8:b2:38:1a:dc:5a:65:09:89:23:b0:dd:a6:
f8:76:e5:94:79:dc:5b:c4:4e:0d:8c:35:a7:ac:84:26:06:8c:
3b:53:8e:08:ea:17:f3:0a:e2:b3:33:08:80:1a:92:ec:14:94:
40:23:c5:37:92:4d:57:c8:a6:68:32:69:3e:ee:9d:65:84:68:
3f:5a:73:bc:cc:3b:c2:f7:3e:65:91:eb:de:98:a6:fa:b3:4e:
76:43:23:d0:fd:5d:67:07:2d:ad:c7:81:21:ed:77:87:35:17:
ca:1c:90:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yvf0qIphO3+ggDNxyWk+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjUxNjY5MmM2MzgyYjNmODNkYWU5OTFmZDg5ZGQxYjBj
ZWY1NzkwHhcNMjYwNDE3MDAwMTIwWhcNMjYwNDE4MDAwMTIwWjAzMTEwLwYDVQQD
EygzYTk1ODdlMmU5ZGVjMzI1YWMxOTg2NDk3MTc2NWRlODkzMDhhMTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWnLhXnj5XuzhR27S9tdrP+UCzkq
FOreW1pn/Hz84xrfwaQ64p4xXgTRl3kiS0y8u6/ALO/h9bZqWTVeRhw9NWew9WNl
n+qoWYDyKa4434lXhNsfpieqO/LbihbM6hSVNkmnO1mNi3glnJDOrtk1riOcQgCQ
1hoJ1bhnjhcTDkRaJ8y4wOOIMl5HJ2kP+v3E7TWsJnRZ6UYNgta3/IyBn5FuoAfX
/+xs7k7rIBoQu417lCCd/oLtTWeaScTwp8MQizJMJv/kFaOr4LhiEV3mqUQ/Gn0h
H2IJIvnKYxUd5RRv66NZq3FNYG+hkIdf/iaBnTKkVUmPD+aXj3EHEOTZZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqVh+Lp3sMlrBmGSXF2XeiTCKEQMB8GA1UdIwQY
MBaAFNxlFmksY4Kz+D2umR/YndGwzvV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jZDlmZDMtYTNlZS00ZWM1LThjNTQt
MmYzODNlODVlYmMwLzEvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9jZDlmZDMtYTNlZS00ZWM1LThjNTQtMmYzODNlODVlYmMw
LzEvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApkrhFT7A
AMAmg+gazBZfD/eQXJZkbG4nzIHo/qBTXGqOCvWLVk8yen/3IBFiABMRQCK41StG
uF1Y7WCt6LTkxYV6oAEvavqdyIVTSchK+YlZvWDuLUGsMp5ghf3S7RMfiUX4UINL
khA/7H04jmrZcXt2T4L9DXUoGta/NddZg2JlFGqhVd9As5Uw6zz8CztEgGplvHKo
sjga3FplCYkjsN2m+HbllHncW8RODYw1p6yEJgaMO1OOCOoX8wriszMIgBqS7BSU
QCPFN5JNV8imaDJpPu6dZYRoP1pzvMw7wvc+ZZHr3pim+rNOdkMj0P1dZwctrceB
Ie13hzUXyhyQyQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:29 2026 by rpki-client