Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: JSiqIo2WTo9WKNLGnhiwq+7Kns5/WRW44ZuhoM2FYhc=
Subject key identifier: 67:9E:94:18:7A:98:51:5E:76:03:40:74:00:9F:95:B6:59:37:1B:B7
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 019DA3AF4BC58B7B34D46D933A73580FFF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 03:01:07 +0000
Manifest this update: Sun 19 Apr 2026 03:01:07 +0000
Manifest next update: Mon 20 Apr 2026 03:01:07 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: N6FLBxRNSknnTqJNvVhSV8rQOy6lLCs0MKtlx7o9NNg=)
2: fONXP_fP-K2CxXzPBDLR6f-PrkU.roa (hash: iTe+/A+Cer5fpJpPxyAsGGZIQSIg8X5o4zlL2Zh7qbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:4b:c5:8b:7b:34:d4:6d:93:3a:73:58:0f:ff:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Apr 19 03:01:07 2026 GMT
Not After : Apr 20 03:01:07 2026 GMT
Subject: CN=679e94187a98515e76034074009f95b659371bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5f:a2:4a:99:14:29:67:59:27:ee:85:76:99:
38:20:6e:65:90:1d:de:92:0a:a3:93:81:d0:01:c7:
16:a5:34:75:d1:30:90:00:55:41:08:08:ea:33:bf:
15:29:3b:89:52:58:bb:da:bc:08:21:12:15:78:d7:
f3:db:26:5d:6c:ee:73:81:a2:50:a1:0d:ff:e1:be:
85:8a:f2:9c:b1:47:b4:75:25:be:47:c0:d0:73:a4:
55:1d:9c:a6:e9:ee:56:e4:98:e6:13:f6:9d:2d:a0:
c9:3d:c2:ee:4c:89:95:06:4d:9d:1e:2f:d9:6a:fd:
4d:a7:04:41:ce:91:57:2e:5e:dd:01:85:7c:c4:1f:
57:1b:35:c9:46:4f:c5:7c:ea:14:fd:db:10:29:00:
61:a6:af:5a:f1:15:08:cd:8f:d0:ff:e5:08:fd:32:
53:db:14:4f:ed:01:d3:3e:55:12:fb:84:a8:ca:1c:
44:27:07:e1:80:ed:e0:71:2d:49:55:fd:cb:e8:df:
2d:09:7b:32:c0:21:4a:53:e3:69:c5:01:ee:bf:96:
ed:3f:91:7d:5f:1f:f4:b0:f8:9a:e6:86:68:53:ad:
97:90:4c:c4:e4:de:bb:b3:bf:b5:96:df:0e:a8:09:
90:51:31:4b:40:9d:ec:8c:ba:0f:a4:1d:71:db:b9:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9E:94:18:7A:98:51:5E:76:03:40:74:00:9F:95:B6:59:37:1B:B7
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4a:24:4c:6f:51:eb:7f:07:7d:b6:f2:27:32:ef:73:f3:ff:
80:cf:fe:3a:ec:9a:5b:ea:d8:6a:89:1c:db:6f:ff:30:32:d3:
e3:36:05:21:25:2c:5a:b0:bb:6a:b2:6f:57:2c:00:5b:5a:a6:
7d:c8:50:9f:23:63:7a:e4:aa:8a:54:05:84:08:61:0c:21:62:
88:03:37:55:ab:3c:73:fc:55:e5:f4:fb:a0:ee:0f:fd:df:e5:
eb:45:1a:b1:8d:b3:72:c0:eb:12:a8:bb:bd:9d:ee:d8:dc:de:
08:5a:1f:87:65:ce:3d:a7:d0:6f:2b:ab:ab:fb:b1:c2:2c:dc:
0e:06:c7:17:69:15:0b:e5:03:2e:4b:df:67:97:dd:88:22:3c:
4b:2c:51:8b:fa:90:84:39:a7:4b:d5:02:d7:f4:4f:fa:3a:b4:
88:dc:f1:e4:72:53:b2:94:40:5f:20:8e:80:f4:a4:c5:1d:17:
4e:99:79:ad:59:78:c9:f2:c0:07:45:98:bc:7c:c1:a7:c5:32:
cd:5a:db:2e:15:23:66:6e:ef:e3:ff:9f:ba:00:57:e8:42:18:
b8:40:47:40:a6:62:37:d1:f0:8a:49:d9:bc:be:02:1d:b3:3b:
28:af:b8:32:26:00:b5:e6:3f:e1:a5:ba:6b:70:89:c0:f6:cf:
48:79:21:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:40 2026 by rpki-client