Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
File: 3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json)
Hash identifier: VKjW60UGbPMTTAsBbSjVF221YNF2Un0mNgeBphyVedc=
Subject key identifier: 0F:34:6A:B1:F5:5D:B5:1F:AF:A3:D5:5C:2F:E0:5E:4F:23:B8:17:57
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 019D9A073C42F89752B5A4B84923AE04734C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
Manifest number: 18D2
Signing time: Fri 17 Apr 2026 06:00:58 +0000
Manifest this update: Fri 17 Apr 2026 06:00:58 +0000
Manifest next update: Sat 18 Apr 2026 06:00:58 +0000
Files and hashes: 1: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: pvRUFhS6M5WGbmKXTxagpOAxrgtkYJFmnhxZu7rb30E=)
2: SoAG3iUKCx9oRAeYG_teBanQxXs.roa (hash: w85rzFr5B5GUPxdRU3WO5gUeqvR6XhqYU+ewTKlbARQ=)
3: Z0Ol55vmano2z06uUQknUo3QoTc.roa (hash: GkLsLJIYqmg4q6xamUbvEEG9iujsWjsYcEaYmXK7cLE=)
4: _0EsaxZOC_EidYm5nqVbMGv-gwk.roa (hash: iTzRHJQiIkKsfX5vIK1gvYNgM5gQ+IPUGEhDEQTXUs8=)
5: mOZvAMLraqykK52-jzGD-yHlcnw.roa (hash: HgyR01q3fui7+YF0vuXYroeZjeOmGgCJNhWLmBZNBqI=)
6: r_0py4YALAEcOOi0tvRe1NDcIA4.roa (hash: acy4ZAe5LvQuy/j1nyMxhW+v2g0V51OQVWm9ef7WTLI=)
7: u02qpN14w4yhn2ctE44FwFlaayw.roa (hash: Y86Ae8inVsAjiKn8VpEwH1tTqB45gvur7i/GdDAq5IM=)
8: u5cJRJ9wBpMrZ8hhLyY9W8QCvMY.roa (hash: iB97I/PNWHuFo231JJX1gPfe7U6KqJLM6Q8cz9KMcfM=)
9: xJmLpZQSUqn2p0sl4yH-zTjLxSU.roa (hash: 3C0CJjezLxbHBKLVQeKBHPmtT1qFFsnDxafe76+pogU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:3c:42:f8:97:52:b5:a4:b8:49:23:ae:04:73:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Apr 17 06:00:58 2026 GMT
Not After : Apr 18 06:00:58 2026 GMT
Subject: CN=0f346ab1f55db51fafa3d55c2fe05e4f23b81757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:af:6e:ac:56:6e:25:c4:61:c7:71:74:c6:
c4:96:4f:a0:ad:a1:a1:bb:e4:f5:e5:97:e6:0a:87:
86:b0:18:d2:8a:0a:c3:48:b0:7a:2a:b0:7e:d2:73:
bb:13:3a:35:be:68:fc:0b:07:a1:5d:60:20:6c:06:
ed:81:32:b4:1c:f9:c4:8d:f5:70:a9:3e:1b:6b:16:
c3:f0:a1:9c:b6:57:e8:24:50:e1:67:3d:f0:50:d5:
ff:15:af:02:d4:d1:ff:0a:77:c3:9c:2d:fb:4a:79:
68:6c:03:ca:41:9b:e6:cc:ef:d5:fa:f9:d2:f0:c1:
3f:8e:ea:b0:01:31:23:98:cd:dc:e2:12:61:6e:73:
51:9a:37:d3:0e:16:51:c3:c6:74:9b:ee:6f:ac:af:
1a:be:6d:57:2a:1a:ba:04:ec:3d:81:6e:63:9b:9b:
1a:9b:ed:d3:13:28:49:71:f6:ed:09:73:31:67:5f:
3b:01:48:2f:e0:a4:26:c0:79:19:63:53:01:3a:06:
e9:9d:d2:62:bd:43:17:8b:2d:17:88:ec:31:d2:8f:
fd:94:f3:c8:37:f8:c1:a3:49:d7:9a:b3:6f:2f:85:
5f:6d:db:ef:e5:0a:aa:be:d9:80:c8:95:6b:a4:b8:
01:27:af:41:3d:b0:e3:24:e7:1f:c2:a9:d0:56:73:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:34:6A:B1:F5:5D:B5:1F:AF:A3:D5:5C:2F:E0:5E:4F:23:B8:17:57
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:21:68:55:22:83:f1:5e:8e:51:59:bf:52:ba:af:d1:03:3a:
cf:eb:55:d5:01:15:d4:98:71:ed:84:4e:ac:a2:bd:cf:1a:62:
85:44:c1:2a:a9:2a:e7:7d:63:61:ce:8a:aa:da:5a:0a:07:e5:
cd:81:a1:5d:24:14:1f:01:4d:35:62:7d:c1:1d:a5:b9:84:36:
d0:35:1f:ac:fd:87:55:be:46:58:40:fd:6a:38:03:cd:09:ba:
86:1d:90:c5:f8:c0:17:e8:26:de:27:b6:60:e8:25:c7:aa:74:
37:e8:7e:0c:8a:5c:3d:ef:26:5e:8c:12:b4:bb:10:40:86:1b:
df:aa:f0:a2:3f:23:32:0c:c7:51:e3:f6:a2:68:a0:29:19:2d:
05:d4:e4:a6:3e:b0:fd:01:db:c6:da:89:16:4d:67:cc:d3:eb:
df:eb:10:b5:27:49:41:c6:37:2a:7e:ee:ee:b1:7e:73:43:d4:
7f:4b:dd:4f:2c:c3:70:45:40:3a:e1:98:27:2e:81:1b:6d:d5:
be:d0:ff:53:8a:9d:40:32:c9:7e:61:c2:67:38:a3:b0:be:17:
f4:14:ae:d8:38:1c:4c:2f:44:78:e8:bb:29:2f:f4:4c:62:c5:
03:fa:37:ed:dd:89:81:40:16:f0:01:82:44:b0:2c:e3:15:5e:
cc:d9:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:07 2026 by rpki-client