Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File: 3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier: EI5NefMpgtf3l/t1bhzw5zPnEtnsETITR38wO9LE92g=
Subject key identifier: F4:BB:B9:71:2B:33:95:EA:FF:5A:F4:EB:51:49:43:DA:38:EB:8E:5E
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 019D9962F2D911E548868CBC277463EDE314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number: 0FFD
Signing time: Fri 17 Apr 2026 03:01:31 +0000
Manifest this update: Fri 17 Apr 2026 03:01:31 +0000
Manifest next update: Sat 18 Apr 2026 03:01:31 +0000
Files and hashes: 1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: 4FVqCOn8r+f/O/dOkzdCMI2OoHbopmc/tMQ4dKGNOAg=)
2: Bt0xMHy61A7htWo3HwQx0xRHYvM.roa (hash: NFwVkcrwORwq5qtsr2xFeijRYhFUAx9h0rzS5lfRuF4=)
3: td-NlOb4bFlwywB-P4mKtEXzRI0.roa (hash: 24q0c0plzrduo92mY1zavTYuQ8C/sxm4E7FFcgXlk2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:f2:d9:11:e5:48:86:8c:bc:27:74:63:ed:e3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Apr 17 03:01:31 2026 GMT
Not After : Apr 18 03:01:31 2026 GMT
Subject: CN=f4bbb9712b3395eaff5af4eb514943da38eb8e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:f1:fc:f6:00:1a:63:9b:6e:93:20:f6:e2:
1e:33:b7:9e:a8:72:ba:b1:a6:33:73:e2:78:d9:27:
4c:f4:84:15:6d:07:4a:40:d3:12:f7:89:d4:57:56:
cd:a7:af:d5:ab:2e:bb:c7:36:cf:b1:a1:9e:a6:ce:
0d:e5:04:98:09:38:93:48:be:ad:78:f2:4a:27:cc:
cf:9a:15:07:3b:b1:de:9e:f0:df:23:66:b2:8b:f5:
8d:12:db:08:a8:cc:ff:8a:4f:61:4b:d4:fa:76:63:
7a:90:85:81:e0:b1:70:f7:12:6b:84:6e:3f:1c:b6:
02:98:02:76:31:82:05:12:cf:eb:2f:df:96:93:c9:
4f:86:81:d8:59:7b:ef:4f:11:9e:e1:c6:40:c5:98:
03:85:ac:ef:ca:72:39:24:45:89:b0:d3:12:cc:51:
66:65:14:92:20:25:2b:56:68:ae:2b:67:7a:3c:62:
df:ec:71:40:dd:24:ee:2b:85:10:f6:1f:53:47:9f:
18:92:f2:5d:39:ac:d1:66:c0:49:35:0e:85:48:68:
b1:09:62:f4:81:37:a9:48:dd:7f:a2:c6:78:59:b0:
26:fe:34:28:b8:f4:10:4e:be:3c:20:80:2c:d7:a7:
3d:7d:13:94:de:b9:1b:11:33:3d:f1:6f:c2:bd:97:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BB:B9:71:2B:33:95:EA:FF:5A:F4:EB:51:49:43:DA:38:EB:8E:5E
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:30:0e:a4:31:a6:a8:43:ba:13:5e:97:45:76:58:73:96:07:
27:60:8d:1b:d8:aa:ef:b1:44:a2:63:c4:a3:e5:5c:7a:9e:c5:
0f:ec:44:31:dc:4f:ba:a0:96:50:34:4e:e0:94:1b:ed:7c:4f:
f0:4d:a4:64:c2:fb:5c:66:7b:3b:d4:5c:c0:51:81:25:fe:2c:
9c:63:c6:29:12:34:b2:a4:7a:9f:97:da:48:ff:a8:bb:25:56:
03:5a:f5:af:20:eb:e7:9c:0b:5f:15:bc:d7:62:73:2d:7d:05:
d6:2b:e1:35:6e:e1:3d:14:75:bf:ee:ca:b5:1e:00:a8:55:9e:
f4:6e:40:3c:71:cb:a1:ab:0f:b4:a3:9a:66:f0:ad:87:3e:92:
a9:ad:12:b1:bc:a5:64:ae:8f:56:27:63:06:93:99:aa:e7:80:
53:93:18:9c:94:f1:28:b2:dc:96:ac:1d:ff:5a:1f:db:38:a9:
88:5c:8b:fd:a7:54:c8:7b:75:4a:93:8b:c3:06:91:8d:a2:df:
77:9b:0c:d3:26:d0:cb:9b:06:c1:5e:f3:2b:6f:c8:89:82:ce:
4f:d0:86:af:f4:0c:02:25:b0:96:4d:ba:67:3c:f1:0f:be:6f:
47:5a:a6:59:6d:bc:54:af:4d:7b:a7:96:92:cd:da:68:c8:30:
a5:7c:77:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:06:39 2026 by rpki-client