Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier: EsWR7j8BhVRe+5+DhljIsY4vWu8kICdBMVNEGlyh2+U=
Subject key identifier: 58:50:71:FD:3D:0E:65:21:3C:12:5D:4B:81:33:5E:59:06:87:A5:2A
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial: 019D9B50CFBABCC763B327671941D40084C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 12:00:57 +0000
Manifest this update: Fri 17 Apr 2026 12:00:57 +0000
Manifest next update: Sat 18 Apr 2026 12:00:57 +0000
Files and hashes: 1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: 4bAYEYRZLV6V6+6yAZAGwpnWMJSL+uHzWcDkOufB/yk=)
2: LmwyPllgT27iDmcYfX7agNvw4rA.roa (hash: kpm3XdXtMEMrfdjcWSVw0huoNKfPlGFqAs8H1ASM9Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:cf:ba:bc:c7:63:b3:27:67:19:41:d4:00:84:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
Validity
Not Before: Apr 17 12:00:57 2026 GMT
Not After : Apr 18 12:00:57 2026 GMT
Subject: CN=585071fd3d0e65213c125d4b81335e590687a52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:66:a4:fc:a1:89:3c:43:77:32:b8:04:da:
99:34:4c:50:85:77:0b:d3:2d:89:7e:c3:cf:11:04:
7b:c7:e0:b7:4e:78:2d:0e:3e:09:78:b3:ef:a7:78:
22:4c:c6:e2:a4:9f:6e:36:23:41:0a:37:b8:04:80:
a8:11:6c:c2:3f:49:14:8e:ac:57:60:26:cc:77:12:
8e:77:db:e1:f7:4d:1a:56:fa:65:9d:77:b9:f7:bd:
e8:dc:d5:3f:53:15:47:ae:d9:ae:a0:ad:94:0e:16:
dc:1f:b2:99:b3:4a:52:f0:f9:23:8d:5d:32:b2:1b:
ee:70:6b:16:f1:54:62:83:42:83:d9:e5:e5:e1:a7:
e9:95:bf:fb:9c:ee:77:5b:4a:5f:14:9e:68:f6:48:
32:f2:77:84:80:7a:28:78:9f:ed:b1:74:8c:df:86:
29:63:ca:c5:07:38:25:63:74:1e:9b:d6:25:51:cd:
81:3f:9b:18:4c:0c:1e:ad:60:d8:89:d2:a8:80:f9:
74:f3:98:be:09:3a:67:82:99:f1:b5:a9:b7:bd:b2:
d5:d6:b3:1a:fb:74:24:4e:07:ee:18:ee:57:8a:98:
09:a1:ae:7f:4a:5c:45:25:32:b5:a4:26:9d:2b:63:
b1:d7:eb:be:aa:2f:78:d1:c0:b4:2e:84:86:7b:89:
94:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:50:71:FD:3D:0E:65:21:3C:12:5D:4B:81:33:5E:59:06:87:A5:2A
X509v3 Authority Key Identifier:
keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:32:e4:b6:fb:4d:14:52:4e:3c:aa:11:dc:8b:ab:6f:81:8b:
87:df:e7:fe:83:61:e8:fd:46:23:f1:26:c3:f4:dc:c4:14:5b:
9a:55:34:43:80:10:10:e8:7b:ea:61:b5:bf:ba:9b:e5:27:83:
a0:89:ce:97:6c:ff:8c:80:43:a7:83:ef:d8:88:73:2f:62:d9:
99:53:01:d8:72:01:fc:d2:c6:4c:39:ea:19:2a:3b:be:0e:c4:
b6:ad:33:5e:2a:77:48:f3:52:0f:44:e8:f8:8a:88:8c:9d:97:
97:63:0a:0c:73:57:d9:14:60:88:62:9b:aa:a6:c5:fe:f6:d0:
d5:03:af:3e:26:38:8d:69:c9:7a:6c:3b:d2:5a:28:7c:50:eb:
8d:04:27:36:76:94:31:be:5c:fa:5d:7d:c0:b6:b8:61:40:8d:
ea:1d:6d:15:9c:09:61:b3:42:73:16:6d:ec:2f:da:29:b1:24:
14:df:f6:fe:a2:8d:23:ff:2b:1c:6e:75:1c:a3:af:df:4a:ed:
df:f2:e2:80:d4:1d:07:9c:ca:e3:a7:f5:06:8a:83:21:37:11:
6e:eb:af:d7:ba:bc:51:50:62:47:98:4e:61:06:b4:00:2d:5f:
ea:a5:4d:09:c8:7a:ef:ba:80:19:6e:d7:db:91:ec:1a:1d:9e:
ce:99:4c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:01 2026 by rpki-client