Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
File: 3GIdzcetC-Mx18mkR_KhZOQupP0.mft (raw, json)
Hash identifier: d9TGxpn1Y8AYnxkz5nTVekDQlkavRzcQDJRcMzsyzD8=
Subject key identifier: C4:86:2D:6E:53:B8:C0:BF:9B:C1:34:37:A7:AB:BF:A4:CA:6B:15:93
Authority key identifier: DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
Certificate issuer: /CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Certificate serial: 019D9AAC32B91E2C97EB52FB01527613528D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
Manifest number: 014B
Signing time: Fri 17 Apr 2026 09:01:09 +0000
Manifest this update: Fri 17 Apr 2026 09:01:09 +0000
Manifest next update: Sat 18 Apr 2026 09:01:09 +0000
Files and hashes: 1: 3GIdzcetC-Mx18mkR_KhZOQupP0.crl (hash: BbcWRC8xa+v+aDWZsKcQfI1pf7hVg1mrkQGbDR5yjAM=)
2: 5AOG4kUiGD70wVs_XxJDRgh1PMY.roa (hash: MRYcI9nU4eBASWsWUt6T36KO1+qAGLyatjU9/qm4WUA=)
3: op71npEadOyd07159Wej77YQILI.roa (hash: eD5sjYOJWPP4UoIDZC6vYDF6ENzBilI2Pagr2VoIOrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:32:b9:1e:2c:97:eb:52:fb:01:52:76:13:52:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Validity
Not Before: Apr 17 09:01:09 2026 GMT
Not After : Apr 18 09:01:09 2026 GMT
Subject: CN=c4862d6e53b8c0bf9bc13437a7abbfa4ca6b1593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:14:23:9f:52:56:0e:02:43:e9:53:af:c2:
6c:8e:9f:e8:7b:31:c4:e0:61:b5:c1:ac:0b:fc:9d:
7e:e8:a7:84:db:f2:2d:d1:51:80:31:9b:db:5f:5d:
5a:a6:38:dc:de:b4:59:26:c0:92:09:3e:02:d6:98:
27:72:a1:3d:3c:f7:d4:17:2e:4c:1c:e4:2a:13:78:
c5:29:57:08:85:6d:be:73:dd:dd:16:36:f1:11:c2:
f8:11:aa:d5:42:1c:58:b2:52:3c:50:9b:de:15:7e:
ce:0c:1b:20:76:39:39:5f:ae:20:7e:55:26:15:90:
a7:ec:7d:7d:c3:4d:43:6b:77:1d:e7:e5:7d:f9:f4:
da:21:b3:ac:93:10:56:47:d9:85:96:4a:69:40:4a:
25:83:58:30:3f:2e:c3:2b:73:30:2e:e3:1b:b9:59:
76:3a:5d:b3:90:17:a0:09:47:91:01:c7:f7:4b:f0:
42:0c:5f:9a:9a:3a:bf:13:16:ed:46:4a:57:9e:77:
71:16:0c:3e:f8:e8:cd:b9:85:5d:99:33:48:99:a3:
c9:b0:53:5f:00:86:c0:2a:14:3f:b5:34:dc:49:ff:
a2:29:ee:24:9e:14:df:a9:79:3a:e5:57:38:f5:ca:
8d:f8:d4:34:98:a2:e2:a9:ff:20:fe:43:fe:c9:7a:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:86:2D:6E:53:B8:C0:BF:9B:C1:34:37:A7:AB:BF:A4:CA:6B:15:93
X509v3 Authority Key Identifier:
keyid:DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:90:65:78:dd:3e:27:d4:3c:33:d1:d3:f8:d2:a4:d0:4b:be:
8f:a7:65:d2:3c:5e:9f:09:6f:42:63:f4:9e:3e:8b:06:2d:c9:
f7:1e:8f:8e:0d:c4:38:6b:cc:0d:85:07:54:91:0c:09:ce:29:
da:25:78:89:d3:8c:5d:04:44:98:0d:11:17:3a:4d:c4:80:af:
8f:56:62:17:5f:e3:58:9d:a1:8a:3b:cb:ac:4c:a1:91:c0:ca:
4d:1c:c5:7e:72:e4:c6:6c:3b:a3:85:d7:6e:9a:1d:b4:35:2a:
01:b5:ff:88:c1:2f:db:a8:ef:07:ab:f9:d3:09:56:9b:51:bd:
dc:0c:d1:3e:0f:07:f6:97:54:6c:d5:62:dc:d9:a9:bc:23:eb:
8e:71:0c:8e:3c:12:fe:b2:bb:1c:87:36:6f:a8:0c:5b:7a:da:
3d:ad:22:92:01:8f:07:05:c9:6d:78:2a:b3:a6:a7:d7:d5:99:
c1:33:84:c4:61:77:65:fa:f2:85:18:6d:68:b1:15:9d:cd:ca:
84:e7:46:9b:a7:3a:e0:9d:34:3f:32:9a:26:67:f6:b2:dc:19:
35:e1:99:d6:6d:ff:f9:f3:15:8f:44:ae:81:55:fd:44:65:03:
ec:09:2b:58:d9:9b:e5:b4:89:ac:be:8e:c4:96:5e:40:b8:f1:
01:9c:26:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:15:57 2026 by rpki-client