Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
File: 3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json)
Hash identifier: PPBm1Oob+Os/PLMDJGQj53+wTswrZ+D0bGdHuKpT4Lc=
Subject key identifier: 24:14:08:6C:20:C7:73:82:7B:43:09:03:2B:7A:A1:41:57:39:72:8F
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019D98BD547946F152D51E903496DFA1F278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 00:00:37 +0000
Manifest this update: Fri 17 Apr 2026 00:00:37 +0000
Manifest next update: Sat 18 Apr 2026 00:00:37 +0000
Files and hashes: 1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: EMkz0i21YspLZtQ9F3wqehF8ZvFJaY7stcMfAwWMQNg=)
2: E_7lG7f5ZU0hPBZXeO9KiDguzXQ.roa (hash: uU7vlve0LCQA4yv+Ab2N5h2lLHcGh/mEnZNylo4rqpM=)
3: FHmWYGqSdJ5-CsqGnoJKGcWPx4o.roa (hash: S6HSVK6CcsFHebtvgQR42wkTCiX4LDp+Y8NKZpU+vms=)
4: XKNodyTpVE_edu5x6d6F6Y2O2tk.roa (hash: bwj5H0svZvvLnoA8x9sKQziSKp08OjMhTh7PRO1SLcQ=)
5: ZDpRY_KWNL6AZ9OnIDN7BtGPipc.roa (hash: 1DrZ+2ptHaqoBHGtimSHqvMKa2JLNNgAJEEeUlCf64I=)
6: hneKOL6xKV3cr3gP56n-PmBtpXI.roa (hash: GxqGClH9UHGqcmyTREy95vx88t5aKLbmXG/YE4t9Tqg=)
7: xTqndtOYNNxGOKliN2NcyMFkix8.roa (hash: 7wOPiKD57FwmTf2UKEcrkMSUmvstWjxFYMSq5+S7Psw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:54:79:46:f1:52:d5:1e:90:34:96:df:a1:f2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Apr 17 00:00:37 2026 GMT
Not After : Apr 18 00:00:37 2026 GMT
Subject: CN=2414086c20c773827b4309032b7aa1415739728f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:11:62:ce:d0:b0:5f:8a:5a:c3:77:48:f3:
df:d1:57:75:46:76:de:82:f9:6c:10:2a:f6:cc:64:
31:39:68:40:3a:a9:c0:78:e6:94:50:ee:6a:fe:fd:
31:4f:e6:4a:ce:02:a9:aa:8f:f3:cf:74:8b:1b:15:
43:eb:65:39:e7:3e:f5:d5:18:8c:ed:e6:d7:ac:ff:
64:b7:56:01:00:3c:6b:a8:39:13:e0:72:cf:2e:62:
df:0d:5f:50:92:56:21:88:a7:4e:b7:90:b4:1d:ff:
af:c5:ec:b3:e5:e4:cc:f7:a9:3d:fe:7f:c7:a9:9f:
b5:9a:08:0b:20:06:4f:25:e3:64:6e:95:43:f7:13:
dd:c1:99:b7:54:4c:83:ad:6c:b7:4a:9c:fc:21:0e:
f4:42:10:26:c8:f1:80:bc:7d:f4:b2:23:1a:0a:2a:
89:be:74:d6:ad:18:7b:a2:f8:4e:39:75:ca:5f:f5:
d5:95:70:63:4d:9d:d8:b9:8a:01:c1:d9:38:55:75:
3a:fd:8f:83:be:13:af:dc:54:19:2d:66:b4:c1:84:
31:c6:43:ab:b8:7f:ce:1e:36:29:94:11:94:e7:9d:
1f:f9:1e:70:57:9f:56:b1:30:e7:3c:a1:46:74:02:
18:a4:e7:96:92:54:de:42:0d:f6:da:ba:8a:1c:0e:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:14:08:6C:20:C7:73:82:7B:43:09:03:2B:7A:A1:41:57:39:72:8F
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:42:5f:de:ea:5d:7f:79:95:d3:83:40:87:48:17:44:86:25:
d7:f8:03:5b:37:ae:dd:c3:0e:61:e0:a3:11:11:c5:8b:f3:0b:
70:7b:0c:21:f8:1d:6f:c8:a7:e0:2c:e8:a2:bf:04:59:62:1e:
8d:6d:80:4f:c1:04:5f:cc:85:83:29:25:01:ab:06:25:9c:1c:
03:00:1b:17:00:b1:43:31:d6:6a:f7:16:82:21:4e:be:0b:f9:
00:1c:26:52:41:d8:8e:1d:68:a2:8b:6c:ae:fd:87:40:d3:2e:
4b:7c:d5:9e:85:b9:7a:29:e1:a7:9d:af:8a:79:80:a1:da:1a:
6d:e5:ea:6b:e9:2c:f2:b7:75:99:a8:dd:8d:b4:f0:a3:53:2f:
43:7c:9f:bb:43:db:75:0f:31:08:c1:05:0d:72:29:d5:29:77:
02:90:b1:b6:d7:69:dc:66:01:d7:58:a1:28:42:4c:00:0f:e0:
a5:c1:f8:76:da:ad:04:74:1f:a9:0c:0c:d5:f0:4b:23:b3:81:
9b:ec:6a:c2:a0:33:86:0b:cf:17:4b:35:b5:1d:8e:9d:4e:a4:
05:dc:8c:d4:af:e9:10:48:fb:e4:03:b2:fd:ae:30:64:c4:a7:
eb:af:d6:80:7a:a1:de:49:17:e0:0b:a6:e8:fa:14:f5:c8:58:
c5:14:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:23 2026 by rpki-client