Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json)
Hash identifier: 3TwVqPqZpnXdel6UUXcKwyMp6kz6RfKejE4D5C6FCwI=
Subject key identifier: 5C:8E:B1:9C:3E:E3:F9:21:A1:A1:39:78:56:BA:7C:53:3B:23:D0:F3
Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Certificate serial: 019D9886881254A21F1EA304DC5E621CD742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
Manifest number: 086A
Signing time: Thu 16 Apr 2026 23:00:46 +0000
Manifest this update: Thu 16 Apr 2026 23:00:46 +0000
Manifest next update: Fri 17 Apr 2026 23:00:46 +0000
Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: 1tblsL8shYV1ZW3aDFmKbkSzGYE76NAf+P+0qHNWuO8=)
2: 43ymdr3K3iMs6v29pEnuXTGVVTU.roa (hash: T6YtebG+rID15qUGedeSqtw1F5/D7XsYg2ZcZB9ldO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:88:12:54:a2:1f:1e:a3:04:dc:5e:62:1c:d7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Validity
Not Before: Apr 16 23:00:46 2026 GMT
Not After : Apr 17 23:00:46 2026 GMT
Subject: CN=5c8eb19c3ee3f921a1a1397856ba7c533b23d0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:a7:1b:76:16:6d:bc:d7:51:61:e0:a1:0b:
73:ad:a2:be:ec:ae:85:04:de:05:18:56:6e:7b:e7:
d1:46:aa:d2:b7:d5:42:67:03:07:c8:fc:83:f1:84:
99:2f:45:d5:3b:8e:45:d1:63:fc:03:f6:43:e8:d7:
65:ef:7c:a9:62:85:9a:9f:e6:2d:e5:77:6d:17:2a:
b3:36:cf:45:fc:23:50:ef:ce:02:56:af:26:1a:47:
63:a5:87:42:78:db:44:b3:3d:ac:51:3b:78:e7:71:
ed:59:46:a3:a2:0f:18:33:d6:a7:4b:d9:d6:a2:e9:
1d:6c:bf:5c:f5:0c:ac:68:3c:64:01:fa:e9:35:83:
63:7e:fe:16:8e:12:23:85:68:c5:5b:fb:e8:9e:4f:
8c:ab:45:b4:02:8e:b1:e0:cc:90:18:94:5e:26:4d:
65:3f:ec:74:6e:a5:6e:29:44:bd:33:30:b9:39:9f:
bc:0d:94:da:eb:b6:de:ac:05:ad:fa:30:2b:a8:f4:
26:22:e0:e6:54:1a:c7:68:70:a0:42:12:0f:cb:47:
9b:07:d7:b2:ea:32:2d:47:99:17:ac:b1:be:6b:c5:
5e:74:b3:77:52:e6:1f:50:1b:00:59:14:44:69:1d:
45:62:94:7c:69:50:58:ce:4c:4c:11:7a:41:ba:d2:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8E:B1:9C:3E:E3:F9:21:A1:A1:39:78:56:BA:7C:53:3B:23:D0:F3
X509v3 Authority Key Identifier:
keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c5:bf:9b:b0:26:0b:5e:2b:cd:ab:6b:d8:47:f4:43:46:6e:
20:87:79:91:81:da:6a:1c:3b:fc:1e:96:40:8e:09:75:cb:4e:
bf:f4:fa:e8:de:dc:33:be:a2:14:41:0d:e0:66:01:bf:84:d7:
b1:a4:db:20:d0:7a:9d:8e:8f:12:0a:3e:62:26:54:b1:53:97:
b2:9f:44:ae:e1:a4:d1:d5:8f:75:f3:d4:69:22:5a:70:e4:26:
6c:02:bf:91:3b:2a:b3:e9:b8:22:b3:8d:b1:50:a0:d4:0f:96:
65:f4:d8:0d:16:6a:8b:db:03:27:1a:b5:db:69:f6:84:7b:b5:
18:8d:c3:ff:b0:a2:10:b9:83:25:51:bf:a1:8c:1e:24:2b:63:
17:79:ee:3f:c5:a5:57:c6:a8:78:f8:ec:7b:72:22:52:61:fe:
fb:51:0e:b0:03:48:5b:ef:a5:a1:43:cf:d6:31:35:0e:5d:50:
a1:c5:05:0e:9f:64:ea:df:d5:1a:db:db:40:f1:84:be:bd:fe:
f7:ee:e1:84:13:3d:ca:d4:bb:20:e1:ab:2f:2b:74:f7:66:b8:
39:a0:ab:8c:a0:97:b8:3c:a4:31:f9:5b:03:e8:1d:fd:21:63:
95:64:be:fd:80:f8:f1:2d:ec:8d:de:94:51:60:84:2e:38:a2:
88:21:e8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:09 2026 by rpki-client