Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
File: 3-KkwH5N3j8ePKw5ujshNTGsy7k.mft (raw, json)
Hash identifier: RM8X84isIPW12GLMWIdnlM42hh6owwZtpNLI2VJONQE=
Subject key identifier: D4:B4:A1:FD:8E:4F:80:C5:D4:11:FA:5E:D4:47:B5:65:83:11:1C:2B
Authority key identifier: DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
Certificate issuer: /CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Certificate serial: 019D9C2C5A0CD3131C880AEE8A929884CA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
Manifest number: 72
Signing time: Fri 17 Apr 2026 16:00:45 +0000
Manifest this update: Fri 17 Apr 2026 16:00:45 +0000
Manifest next update: Sat 18 Apr 2026 16:00:45 +0000
Files and hashes: 1: 3-KkwH5N3j8ePKw5ujshNTGsy7k.crl (hash: vyQok6pWEM574KhJYfqii4E0gBKIGGEnoUoyft64VIg=)
2: Bq6stHEFxMFxnWEoWkNnr2q_nfU.roa (hash: FRvotk1GU1c0bgTGRLjQpv9XYU8csQF9vIzVahVu7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:5a:0c:d3:13:1c:88:0a:ee:8a:92:98:84:ca:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Validity
Not Before: Apr 17 16:00:45 2026 GMT
Not After : Apr 18 16:00:45 2026 GMT
Subject: CN=d4b4a1fd8e4f80c5d411fa5ed447b56583111c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:9f:1d:27:f3:fd:bb:07:43:06:a2:54:77:
bc:4b:33:95:90:f9:ce:e7:55:78:a7:41:82:90:17:
e4:6a:4e:e7:c0:3c:cc:d7:d2:ec:ac:33:db:b0:f0:
a1:a8:65:e7:a3:fd:5a:38:c7:85:fb:7e:ad:c0:33:
fd:9c:28:a2:49:7d:28:97:d3:f3:76:2e:0a:dc:04:
73:99:0c:0d:a7:07:f6:8d:ef:f9:c1:de:25:d0:21:
8d:40:e7:e2:aa:88:b0:38:c8:bd:59:da:bc:4a:e9:
a1:d5:1e:55:2c:1e:5f:f2:e1:f0:2b:af:08:8f:4b:
b0:45:13:6f:32:86:76:70:de:ac:f6:8b:2b:a6:fe:
ec:a3:b8:be:69:d6:65:12:e4:0c:58:35:10:66:5a:
d3:95:81:3f:2b:15:98:7d:ba:e9:3b:17:29:c1:23:
e5:2c:42:32:10:77:4c:9a:17:bf:68:38:a3:2a:8a:
f6:95:ed:74:d4:a7:2a:74:12:e7:8d:fc:52:eb:af:
4f:10:16:af:31:65:02:a7:e8:6b:59:68:4b:4e:64:
49:3c:4e:6a:ad:63:f9:00:57:87:95:91:b2:c0:73:
05:29:fc:11:7d:53:03:26:44:56:ea:a5:df:7b:21:
53:e2:91:07:6a:17:fe:e8:fd:76:23:87:35:e3:34:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B4:A1:FD:8E:4F:80:C5:D4:11:FA:5E:D4:47:B5:65:83:11:1C:2B
X509v3 Authority Key Identifier:
keyid:DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ed:73:63:63:40:3f:f3:e8:b9:f5:72:25:f0:eb:d9:43:15:
0a:c4:e7:05:bd:ab:fb:d5:87:b7:a6:f1:9c:13:40:7f:96:5d:
70:27:68:a8:40:be:88:f4:25:23:36:19:35:1c:75:4c:06:b3:
72:e6:9d:e0:4c:19:37:89:52:45:58:f5:0c:e3:45:f6:a6:0b:
45:b6:19:14:ca:a6:dc:80:19:5a:01:aa:39:26:92:64:74:f3:
0e:a9:9f:e9:75:82:5a:a7:c6:6e:76:fc:57:94:52:9c:67:9b:
30:53:a9:b3:21:12:2a:bd:bb:06:84:1a:3b:5a:dd:cd:a1:af:
26:7a:27:e2:4a:13:27:29:9a:90:4e:9d:c0:91:84:7c:56:87:
50:ff:75:c0:8f:b4:b6:40:ee:fd:ff:9e:6a:90:6d:ef:2d:c9:
81:09:a8:ee:63:00:62:d9:b7:ad:47:a8:2d:a2:57:48:66:94:
70:90:f2:75:6c:6e:f3:5f:45:57:85:70:44:81:40:fc:9f:f6:
5f:79:6a:38:0f:7b:c6:ab:8b:f2:91:1e:5e:52:b0:bc:f3:41:
22:02:bb:cf:6b:b1:47:45:eb:75:28:20:57:2a:14:08:b8:38:
53:6d:29:3d:bf:ba:18:ed:5a:40:df:47:d2:75:99:82:6c:99:
6b:29:5a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:52:12 2026 by rpki-client