Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: FjM/0GR+2jxQpcOLYAnBIGLz2lX1YTHNxD00ueIuK2o=
Subject key identifier: 90:64:08:87:38:47:7F:5E:D2:50:67:CD:44:AA:E6:FE:ED:17:FF:42
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 019D9DE3BAAA253F877F63A28AA0B224DCAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 18D3
Signing time: Sat 18 Apr 2026 00:00:40 +0000
Manifest this update: Sat 18 Apr 2026 00:00:40 +0000
Manifest next update: Sun 19 Apr 2026 00:00:40 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: /MvXyaKcgnTUdUq9CMFCj+fFH0sGFdJbH2L8tXzrNzs=)
2: 9zaCEl1SgGOc-A7zIR9SmhOUbCA.roa (hash: eFtzjl4+/9tlA7bC6sKrJsHMLsAxLeLlfmditC5aZTs=)
3: _QaXkGOzguH_3SYFNe1d3y7B2Tw.roa (hash: KztSdz5ODte8K6guWxzrXZlYDG1F2rVO/Vqml3J+Q0o=)
4: fsnKswSMyeM4OK2o8J_ZzwwYiiI.roa (hash: tWk+nFmUcDykdNhoUyVPw1UFkRx/3AJQMBQrLxH1g5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:ba:aa:25:3f:87:7f:63:a2:8a:a0:b2:24:dc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Apr 18 00:00:40 2026 GMT
Not After : Apr 19 00:00:40 2026 GMT
Subject: CN=9064088738477f5ed25067cd44aae6feed17ff42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:c8:5e:4d:32:32:38:0a:96:eb:8d:8e:8a:
12:ae:ab:5b:30:19:1e:3d:0b:31:7b:ad:9f:d7:2d:
fd:90:51:fc:32:36:04:c2:12:ce:2a:dc:9a:9e:57:
af:09:98:09:b3:3a:f6:39:81:4e:5f:40:83:b2:1e:
ef:58:4f:48:03:77:57:46:34:db:df:28:25:8b:6c:
77:60:bd:8c:0f:f8:d7:cc:76:75:06:3c:e8:48:e8:
4f:2c:c3:4f:74:0c:e4:c8:77:9f:0d:53:74:03:69:
5d:8e:06:dc:fa:3c:66:26:70:96:26:5d:35:7e:a7:
cc:d1:83:4f:cd:0f:91:4b:cb:0b:ee:cb:8b:9c:30:
ea:45:ba:03:17:90:2c:b8:52:29:1e:30:87:c9:95:
3d:23:33:41:9b:bb:00:2a:30:4c:86:77:32:ba:ff:
a5:fe:3b:0f:47:ba:ba:ed:55:b4:04:4f:d7:79:1d:
43:fa:d1:76:c6:cc:5e:19:92:3e:97:9a:a8:97:a9:
e1:16:f8:2c:6d:30:36:93:8e:11:b1:04:14:ae:76:
01:10:81:c9:05:3e:f2:dc:10:af:83:0f:64:4f:00:
51:8b:1d:49:d9:75:44:f5:a5:bc:77:ed:48:bb:eb:
c5:7d:bd:4d:a9:c1:fb:6b:99:c9:b5:90:10:5c:54:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:64:08:87:38:47:7F:5E:D2:50:67:CD:44:AA:E6:FE:ED:17:FF:42
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:55:ce:91:68:61:3b:fd:e1:42:35:e0:da:f1:a9:b8:96:53:
1e:1d:75:33:1f:b9:77:91:27:58:a2:90:fa:c8:ab:28:3b:c7:
aa:97:dc:e4:95:d2:3b:9b:d6:fa:9a:db:e1:8c:e6:d3:c0:fc:
04:c2:e2:74:7d:c9:37:6e:ea:77:49:7d:08:44:43:b7:d4:64:
d9:88:8b:c1:05:6e:49:2b:fe:25:17:60:43:72:f9:bc:85:5c:
65:a0:aa:7f:ac:db:12:df:38:31:1a:a9:7b:eb:cd:45:83:93:
b8:58:e1:45:34:9d:42:a3:4b:34:5d:2f:3c:b1:c8:f8:17:d8:
04:10:df:b9:16:a4:94:00:c0:3d:16:33:d1:7a:92:c9:3e:c7:
e7:4d:f6:13:b3:9e:13:ce:69:c7:53:2b:2d:a3:a9:a1:17:e3:
e2:c8:63:b2:0b:01:80:5a:aa:7e:5f:04:df:62:60:1b:98:c9:
21:26:c7:a8:7f:54:8d:71:9d:8d:bb:f4:cb:0e:63:76:be:2b:
49:e5:f3:b1:86:da:43:0b:36:81:e0:e9:31:88:b7:da:22:b4:
2b:10:d2:08:bd:bd:47:2f:7d:da:d8:3b:32:42:16:ec:d4:fd:
83:4b:ec:f3:74:ef:07:fa:7f:3a:6f:b7:ea:01:df:e4:d1:04:
2b:36:9f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:08 2026 by rpki-client