Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
File: 3itcv5Z6A0nYiXBLtNYfpSajHW8.mft (raw, json)
Hash identifier: XNrRFSHnM8r04bMDatR8/SslaSnal//7U/Ja730mAhw=
Subject key identifier: C7:37:C2:02:D5:D0:6A:92:66:D3:60:88:B4:71:F7:4D:55:F0:E5:C5
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial: 019DA30AF8A85DED5B70AAFF5F1DFAB5E387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
Manifest number: 1806
Signing time: Sun 19 Apr 2026 00:01:38 +0000
Manifest this update: Sun 19 Apr 2026 00:01:38 +0000
Manifest next update: Mon 20 Apr 2026 00:01:38 +0000
Files and hashes: 1: 3itcv5Z6A0nYiXBLtNYfpSajHW8.crl (hash: 4204z7woI50SLFHmcUdyAOia75lJ46/ow4xzvutiMUY=)
2: xU2EDS3A1kqxHB5fmWawALQua5w.roa (hash: gy/kCjpuCiDHyb5854bh+q6WsJ4/S+45FLFM/o6soug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:f8:a8:5d:ed:5b:70:aa:ff:5f:1d:fa:b5:e3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Validity
Not Before: Apr 19 00:01:38 2026 GMT
Not After : Apr 20 00:01:38 2026 GMT
Subject: CN=c737c202d5d06a9266d36088b471f74d55f0e5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0b:2a:a7:db:c9:35:c0:7e:a5:51:8d:73:a4:
fe:7c:b0:40:4a:05:27:fe:87:00:45:80:5e:29:34:
0c:87:32:ee:56:ad:dd:cf:84:c0:a1:15:24:59:01:
bd:fb:d3:c2:b6:e4:37:18:2e:25:db:ae:c6:c0:6c:
8d:b2:12:28:d5:70:39:12:c9:cc:c1:a4:d7:e9:b3:
15:49:f3:5b:8f:63:e5:1a:7d:4f:cb:75:d1:ef:0a:
89:ee:e6:9a:37:db:c9:2d:6b:a0:bc:c6:19:16:73:
2d:01:c3:d8:26:5c:39:2c:6d:39:6d:95:e2:02:fb:
32:be:bc:32:40:4a:83:21:99:17:f5:84:a8:56:0d:
79:ee:74:4a:4c:39:d4:e7:97:95:12:24:5d:d4:aa:
fa:ca:b7:57:77:d2:0f:fe:a8:a1:6d:f0:1f:4e:0d:
62:4a:ad:45:d4:89:57:5a:a6:db:96:b7:ce:7a:db:
ce:46:79:42:b2:aa:7c:c9:99:c8:61:6e:38:2e:38:
ef:de:9b:23:78:4c:4b:92:0d:19:44:ee:e2:b5:a0:
3e:49:63:e9:62:f9:5b:00:25:c6:78:6a:0c:a4:2d:
37:3a:84:26:54:bc:16:a2:7f:39:e6:b8:10:6b:2f:
cc:dc:31:bd:0b:b3:82:2d:1d:01:4a:34:c6:77:16:
af:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:37:C2:02:D5:D0:6A:92:66:D3:60:88:B4:71:F7:4D:55:F0:E5:C5
X509v3 Authority Key Identifier:
keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9a:b2:72:48:bf:98:e5:03:5a:b1:48:d9:09:72:59:75:20:
d4:8e:08:d5:31:b5:1f:7a:64:5f:b6:02:bb:d7:3f:e2:48:c5:
78:31:45:66:81:fb:27:b6:1f:63:50:d9:d4:e7:25:0c:cb:f0:
08:98:e8:1c:de:b0:24:35:07:92:08:73:9b:1f:a3:eb:88:47:
7c:95:38:ce:a1:4f:fd:5c:71:8e:cb:85:d0:c0:a5:db:8e:4b:
71:c8:b4:4a:3c:05:e4:d2:73:a0:73:14:a3:b2:b8:23:34:73:
45:d8:da:b8:ce:26:b5:1d:9b:c3:5d:7b:32:59:d5:dd:93:54:
28:ab:0f:3f:82:da:63:de:c8:f5:cb:8f:16:08:31:73:ba:9f:
f0:d0:e1:8b:b5:60:9c:1b:19:8f:00:a2:9b:22:1c:2e:09:fb:
7a:27:1f:89:d8:f7:93:33:19:8d:4f:f6:69:d6:26:e4:39:ef:
04:2f:84:95:55:cb:6e:27:5d:b0:c6:6e:77:94:e8:39:84:29:
f2:18:1b:bb:99:a8:e4:f8:c5:5c:55:d0:00:72:ad:b2:55:bd:
dd:13:a0:9a:6d:8f:a3:a5:8a:5f:27:66:e9:58:5b:d8:b2:df:
c1:d0:51:f2:4f:fd:f3:6f:3d:dc:da:d2:0f:50:39:f9:3a:0c:
56:0d:d5:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCvioXe1bcKr/Xx36teOHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMmI1Y2JmOTY3YTAzNDlkODg5NzA0YmI0ZDYxZmE1MjZh
MzFkNmYwHhcNMjYwNDE5MDAwMTM4WhcNMjYwNDIwMDAwMTM4WjAzMTEwLwYDVQQD
EyhjNzM3YzIwMmQ1ZDA2YTkyNjZkMzYwODhiNDcxZjc0ZDU1ZjBlNWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Asqp9vJNcB+pVGNc6T+fLBASgUn
/ocARYBeKTQMhzLuVq3dz4TAoRUkWQG9+9PCtuQ3GC4l267GwGyNshIo1XA5EsnM
waTX6bMVSfNbj2PlGn1Py3XR7wqJ7uaaN9vJLWugvMYZFnMtAcPYJlw5LG05bZXi
AvsyvrwyQEqDIZkX9YSoVg157nRKTDnU55eVEiRd1Kr6yrdXd9IP/qihbfAfTg1i
Sq1F1IlXWqbblrfOetvORnlCsqp8yZnIYW44Ljjv3psjeExLkg0ZRO7itaA+SWPp
YvlbACXGeGoMpC03OoQmVLwWon855rgQay/M3DG9C7OCLR0BSjTGdxavHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMc3wgLV0GqSZtNgiLRx901V8OXFMB8GA1UdIwQY
MBaAFN4rXL+WegNJ2IlwS7TWH6Umox1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2l0Y3Y1WjZBMG5ZaVhCTHROWWZwU2FqSFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82NDZlN2QtNGY0Ni00MDdjLWJkZDAt
ZmQ3MmQ5NjJkZjI3LzEvM2l0Y3Y1WjZBMG5ZaVhCTHROWWZwU2FqSFc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi82NDZlN2QtNGY0Ni00MDdjLWJkZDAtZmQ3MmQ5NjJkZjI3
LzEvM2l0Y3Y1WjZBMG5ZaVhCTHROWWZwU2FqSFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZqycki/
mOUDWrFI2QlyWXUg1I4I1TG1H3pkX7YCu9c/4kjFeDFFZoH7J7YfY1DZ1OclDMvw
CJjoHN6wJDUHkghzmx+j64hHfJU4zqFP/VxxjsuF0MCl245Lcci0SjwF5NJzoHMU
o7K4IzRzRdjauM4mtR2bw117MlnV3ZNUKKsPP4LaY97I9cuPFggxc7qf8NDhi7Vg
nBsZjwCimyIcLgn7eicfidj3kzMZjU/2adYm5DnvBC+ElVXLbiddsMZud5ToOYQp
8hgbu5mo5PjFXFXQAHKtslW93ROgmm2Po6WKXydm6Vhb2LLfwdBR8k/982893NrS
D1A5+ToMVg3Vmg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:09 2026 by rpki-client