Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier: gYqfihEbLhoszsc4Mpo/p2cUzQHOMV0Lf+s8BEX71Ac=
Subject key identifier: 04:72:44:C4:4B:36:F0:9B:ED:9D:1B:A5:82:06:BF:83:EE:60:B6:E3
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial: 019D9A06C5C88F35FBDAF125E8F314522662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 06:00:28 +0000
Manifest this update: Fri 17 Apr 2026 06:00:28 +0000
Manifest next update: Sat 18 Apr 2026 06:00:28 +0000
Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: qooGyU569Hnqe5aci5YgzcwQ8s2Mi6ysiZ8M4AQHpAs=)
2: WGji20uEwm-qc16TI-95pZHam9M.roa (hash: bsiH0UDqVUjwGYGg21cqoyVxVRYxf5QKf4uTXeiNmjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:c5:c8:8f:35:fb:da:f1:25:e8:f3:14:52:26:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Validity
Not Before: Apr 17 06:00:28 2026 GMT
Not After : Apr 18 06:00:28 2026 GMT
Subject: CN=047244c44b36f09bed9d1ba58206bf83ee60b6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c7:a3:e2:97:de:ee:ab:a9:5c:d4:eb:df:04:
a7:d5:87:f2:29:6d:86:a8:54:ef:85:2e:1c:53:74:
79:5d:0d:37:e9:67:53:80:83:57:b9:b4:6f:de:c7:
e1:1c:d5:4a:1d:6e:0d:cb:64:58:9d:86:67:8d:f8:
3c:f8:e4:3c:73:8f:31:85:f2:6a:ec:8f:ba:4d:69:
f0:0a:29:b5:ce:a3:be:91:5e:a2:1a:d8:50:51:68:
61:dd:1a:4d:58:0d:dd:8e:0b:7a:bb:32:64:10:a1:
7b:f5:9a:9d:09:13:0f:df:3d:cd:ae:47:86:ef:ad:
9b:5c:50:db:4b:f0:9c:12:15:64:0b:ef:b4:e3:d1:
14:26:50:24:80:e8:cc:64:7b:59:44:55:82:1e:28:
55:02:f1:fb:b0:f0:db:f1:39:27:81:a1:97:b7:9e:
32:79:0e:e0:d4:de:c1:dd:d5:e8:18:dd:57:0c:05:
a1:a6:0a:f8:64:1b:33:7f:d9:b5:f0:ad:fb:8e:0b:
2f:a9:39:6b:b8:59:5f:09:e6:ec:85:92:0b:84:c0:
25:d9:95:07:5d:e8:5d:bf:f3:c0:69:15:8d:2d:72:
ed:9c:ed:fb:d0:46:56:ef:be:a8:e7:64:2f:65:6a:
be:26:6d:1c:55:a3:09:e6:1b:26:b4:6b:e9:c2:33:
06:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:72:44:C4:4B:36:F0:9B:ED:9D:1B:A5:82:06:BF:83:EE:60:B6:E3
X509v3 Authority Key Identifier:
keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:15:8f:73:9d:07:ff:aa:fc:d6:ee:54:9e:c9:8a:07:d2:53:
4b:4b:df:a9:e8:58:9c:38:55:29:5e:fd:54:90:24:7a:99:dc:
30:93:48:4f:fb:3b:d2:b9:5a:53:0e:dd:f4:ab:cc:23:8e:6c:
3d:da:b3:0e:b0:59:86:39:28:07:f4:30:98:da:03:a8:fb:7d:
b7:a8:29:21:ab:62:d9:e4:37:73:52:04:b7:50:9b:67:f2:b2:
99:a8:69:bb:8a:af:c5:e6:09:f6:22:45:8a:8a:2c:4b:17:bf:
55:e5:8c:3d:34:a0:01:cc:93:86:a2:f8:25:72:6a:48:ee:de:
70:a6:17:fb:9e:e5:ac:4d:74:60:78:e4:2b:9b:df:e2:3a:5c:
84:92:d0:45:6d:4e:02:e8:c2:56:71:fc:38:e6:65:1a:c2:70:
cb:81:b7:3e:83:82:39:4d:ce:a4:6c:3d:a5:a4:fa:5f:7b:7b:
b3:73:0a:b2:46:e0:bc:ae:4f:77:04:fc:1e:32:cb:4d:ab:1f:
ad:f7:b8:7c:a7:4a:d0:89:ef:c4:f7:79:57:33:ca:c4:2b:99:
e6:84:5c:55:dc:72:87:c9:f9:67:ee:97:0e:11:75:71:94:2b:
14:df:81:0b:78:92:f2:21:86:f6:1f:3a:47:f7:ec:41:88:9d:
60:4f:cd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:05 2026 by rpki-client