Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier: QL4XcTktD5gsPr7DmaiVfJR10UVZrgyhoo2I57+sWEs=
Subject key identifier: E1:7D:4F:DD:78:45:91:85:53:23:9A:83:0B:C7:41:9F:D5:FC:06:FE
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial: 019D98BD956189578B39198514E089ACAE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number: 09D0
Signing time: Fri 17 Apr 2026 00:00:54 +0000
Manifest this update: Fri 17 Apr 2026 00:00:54 +0000
Manifest next update: Sat 18 Apr 2026 00:00:54 +0000
Files and hashes: 1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: uFtNyhbhXG+3Xbk4kJZwUHELq4k01i1TzBbk6P+alWM=)
2: E2bog414s7wIyFoCk8EPV__dfvA.roa (hash: V6Nnm/ymBZJD1OFNh62adA8C3xBKE7VTPboLYpn7i3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:95:61:89:57:8b:39:19:85:14:e0:89:ac:ae:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
Validity
Not Before: Apr 17 00:00:54 2026 GMT
Not After : Apr 18 00:00:54 2026 GMT
Subject: CN=e17d4fdd7845918553239a830bc7419fd5fc06fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:f7:3a:4a:44:dd:f2:43:90:8d:2c:53:b9:
80:85:6d:86:14:bf:28:9f:3a:21:b8:b5:c4:31:cc:
c5:c2:56:3e:93:a3:fd:82:7a:5c:e9:a3:ce:81:a5:
8e:c3:41:fd:a0:a5:ad:e4:f9:c2:0b:3f:ce:74:18:
ab:a7:68:90:59:74:52:dc:7b:bf:cd:e8:a3:e9:a0:
ca:71:05:cd:58:1a:db:44:1a:bd:9f:f7:ed:11:3d:
e2:ec:24:28:37:3c:3b:86:4d:f4:58:43:73:c1:08:
40:b0:97:cb:2c:4b:4c:a7:1c:0a:ca:d5:46:ec:38:
fe:24:9c:90:a2:ce:d2:f2:72:6c:bd:7b:d5:69:1a:
de:16:f4:2d:58:8a:6d:5c:f9:bb:3a:c5:89:d6:f5:
ae:20:2e:cd:47:99:be:43:c5:02:76:3b:f0:39:86:
45:62:f1:3f:2e:27:0e:f2:2e:74:78:da:56:9b:42:
62:db:f9:bf:38:f6:e9:b5:0f:d3:61:1b:71:1e:39:
9b:d3:cf:fd:e0:f6:69:91:ef:8d:7a:cc:83:5a:12:
bd:fc:99:59:56:16:5d:ea:be:2f:9b:f1:a3:7f:29:
a3:ca:f0:2e:07:30:30:2a:db:97:c7:44:9f:a0:bc:
a2:2b:64:69:8d:d4:b2:98:42:d3:31:d4:a3:f8:42:
29:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7D:4F:DD:78:45:91:85:53:23:9A:83:0B:C7:41:9F:D5:FC:06:FE
X509v3 Authority Key Identifier:
keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:43:c3:1c:e1:7a:16:9d:73:d4:84:1e:32:4a:b6:93:11:99:
58:ef:6f:3f:6a:e6:7d:a9:0c:23:f2:f3:ba:30:62:67:bb:71:
85:2e:b8:92:92:28:78:ba:45:fd:b6:27:c0:58:77:6e:8e:df:
84:ee:6d:f5:ca:21:11:75:65:20:ac:b1:9c:10:41:6c:af:4c:
f5:22:30:a8:f8:9d:88:5f:d1:09:3a:1e:9f:57:ea:0f:90:04:
73:44:54:86:21:6e:62:e9:c9:14:27:5c:84:c1:ea:7c:a0:cd:
ab:18:bf:e7:02:36:9a:54:c6:82:4d:73:d0:aa:c5:89:45:d4:
3f:4a:69:e4:f6:fc:8f:4a:86:a5:a9:90:23:c3:17:aa:af:aa:
2b:30:f5:39:25:da:23:05:30:90:8e:a1:c4:ec:cc:be:62:e2:
87:58:d4:9b:c9:70:e4:f7:82:3d:5b:24:3e:99:a9:5b:f8:d9:
91:31:b4:a7:1b:b9:ca:ee:e1:9c:b6:0b:64:9c:80:de:8b:f0:
a4:ce:f1:86:c8:53:6e:1d:a7:98:ee:f9:36:d2:8e:b5:b7:be:
8b:f2:90:ff:f0:5d:0e:02:20:34:34:1f:e5:41:6b:ed:3c:fd:
a4:b8:85:f0:9c:72:3f:6e:36:60:96:97:7a:e9:52:6e:41:ff:
22:09:13:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvZVhiVeLORmFFOCJrK45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNmRhZWY2NjY0YTc1MjliNjI5ZjNmZDY1MDA0OTE1MjMw
ZjFiZTkwHhcNMjYwNDE3MDAwMDU0WhcNMjYwNDE4MDAwMDU0WjAzMTEwLwYDVQQD
EyhlMTdkNGZkZDc4NDU5MTg1NTMyMzlhODMwYmM3NDE5ZmQ1ZmMwNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKX3OkpE3fJDkI0sU7mAhW2GFL8o
nzohuLXEMczFwlY+k6P9gnpc6aPOgaWOw0H9oKWt5PnCCz/OdBirp2iQWXRS3Hu/
zeij6aDKcQXNWBrbRBq9n/ftET3i7CQoNzw7hk30WENzwQhAsJfLLEtMpxwKytVG
7Dj+JJyQos7S8nJsvXvVaRreFvQtWIptXPm7OsWJ1vWuIC7NR5m+Q8UCdjvwOYZF
YvE/LicO8i50eNpWm0Ji2/m/OPbptQ/TYRtxHjmb08/94PZpke+NesyDWhK9/JlZ
VhZd6r4vm/GjfymjyvAuBzAwKtuXx0SfoLyiK2RpjdSymELTMdSj+EIpFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOF9T914RZGFUyOagwvHQZ/V/Ab+MB8GA1UdIwQY
MBaAFN1trvZmSnUptinz/WUASRUjDxvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83ZGQ0MmItNjZlZC00YzEzLWEzMzYt
Y2ZlMTMzNWYyN2ZiLzEvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi83ZGQ0MmItNjZlZC00YzEzLWEzMzYtY2ZlMTMzNWYyN2Zi
LzEvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkPDHOF6
Fp1z1IQeMkq2kxGZWO9vP2rmfakMI/LzujBiZ7txhS64kpIoeLpF/bYnwFh3bo7f
hO5t9cohEXVlIKyxnBBBbK9M9SIwqPidiF/RCToen1fqD5AEc0RUhiFuYunJFCdc
hMHqfKDNqxi/5wI2mlTGgk1z0KrFiUXUP0pp5Pb8j0qGpamQI8MXqq+qKzD1OSXa
IwUwkI6hxOzMvmLih1jUm8lw5PeCPVskPpmpW/jZkTG0pxu5yu7hnLYLZJyA3ovw
pM7xhshTbh2nmO75NtKOtbe+i/KQ//BdDgIgNDQf5UFr7Tz9pLiF8JxyP242YJaX
eulSbkH/IgkTzw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:18:30 2026 by rpki-client