Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: Wl8NoM/oHD9iutNebi2cDM6yk9JHOxS9NLOtuSy1GO0=
Subject key identifier: 35:DD:48:B5:71:71:60:47:DA:39:88:FD:09:CB:93:EF:8B:91:62:1C
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 019D999935F388BF7736158863FAF5D846D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:00:48 +0000
Manifest this update: Fri 17 Apr 2026 04:00:48 +0000
Manifest next update: Sat 18 Apr 2026 04:00:48 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: NptQznxBeOAI6lrE2qdAhuuCc92iDWxZ8I38c4OF7d4=)
2: 4nH4XfhimtA2VpYePD6iIqgS8jg.roa (hash: WzWjp5sYk3618sDtkEiRYCtG2GQQ5fgZA4Df9TxbCmE=)
3: Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa (hash: t8YcGZN/KfNS1zoLXEsPr4LvXKVj1kisjNpdPg7jWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:35:f3:88:bf:77:36:15:88:63:fa:f5:d8:46:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Apr 17 04:00:48 2026 GMT
Not After : Apr 18 04:00:48 2026 GMT
Subject: CN=35dd48b571716047da3988fd09cb93ef8b91621c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:a5:bf:da:b8:66:1d:1b:16:b2:35:24:8a:
5a:57:e8:eb:b9:41:6f:dd:1e:38:be:d7:16:42:3e:
fa:fe:14:43:62:c3:79:c1:0c:40:57:ec:f2:16:4c:
79:68:b3:3a:53:70:0d:c9:fa:df:cb:db:f2:57:74:
18:65:65:7f:52:a6:7d:7c:fc:af:9e:23:16:ff:86:
f8:3a:ac:44:9a:b2:16:c1:df:85:50:0a:56:ef:85:
57:2a:ff:b0:c6:49:df:d7:e2:49:70:61:19:1f:8b:
74:ab:f8:6d:aa:c0:27:f3:03:04:dd:12:a5:48:d9:
9f:e0:dd:4a:da:62:77:86:1f:6a:c3:9f:4e:0a:74:
54:b3:eb:ce:8d:cd:d2:c2:96:7e:4c:55:01:e0:9e:
61:25:22:6c:99:01:10:5f:27:2b:63:13:dc:db:82:
5a:83:29:37:77:98:6a:77:57:de:26:3b:da:6d:c3:
03:48:60:64:be:5d:c9:de:1c:c5:54:79:7f:67:21:
32:9b:b2:ca:a5:ec:a8:c8:9a:fc:a5:83:77:b0:18:
2e:81:d1:a7:83:11:37:41:2a:ac:e0:21:2e:d6:d4:
3e:e8:5a:77:3d:18:9e:4a:fe:60:5b:14:c9:34:d6:
bd:50:95:c9:f6:d5:50:73:ef:d4:f9:d2:ae:45:c1:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DD:48:B5:71:71:60:47:DA:39:88:FD:09:CB:93:EF:8B:91:62:1C
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fd:5b:b4:57:7a:e2:90:1f:46:bc:54:aa:e9:ab:a1:01:6a:
da:39:82:ce:de:12:da:a1:7a:ed:eb:34:6e:bb:78:59:9e:0c:
ef:56:1b:f7:2b:54:7f:c7:b4:2d:39:14:5c:2d:1d:fc:ee:a8:
9f:7b:32:79:eb:64:85:e9:26:bd:16:8c:8a:56:87:59:93:19:
34:6e:87:4f:76:11:49:15:a3:01:56:11:47:b1:20:9b:c6:96:
47:8d:60:8b:aa:f5:09:fe:22:6c:36:f1:c7:4f:55:d5:47:c3:
11:86:26:3b:be:c9:d7:34:e2:70:a7:9b:d6:15:83:16:96:52:
0f:0f:7b:56:79:c2:5a:90:28:0a:04:c4:1a:81:53:a6:07:45:
7f:22:a4:9b:8e:fc:f9:97:05:58:5b:a3:ae:39:65:67:01:fa:
95:42:e3:61:75:c2:87:62:fb:90:e0:df:ea:24:ec:f3:02:d5:
84:63:f9:98:02:05:97:9d:80:89:bc:0b:02:ac:ac:6a:64:51:
05:de:4e:76:53:1e:f7:8c:01:ff:a6:fa:49:69:dc:21:6e:1e:
66:3d:23:3d:07:23:e2:9b:df:b9:7e:9b:09:19:55:32:23:45:
d6:b9:9d:2d:2c:3b:23:a9:4f:dc:89:84:10:9f:9d:7c:99:6a:
b4:d0:00:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:16 2026 by rpki-client