Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
File: 3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json)
Hash identifier: aUIWki6ShykjDbiieoGwp7TAv4hf6xGdZpfNOyWWqHU=
Subject key identifier: A8:2A:50:94:A7:4A:E2:39:0D:A4:D3:99:0F:1A:75:03:D5:88:A1:E0
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019D9AAB79E49F55C9781DB130FBACE41B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
Manifest number: 18CD
Signing time: Fri 17 Apr 2026 09:00:22 +0000
Manifest this update: Fri 17 Apr 2026 09:00:22 +0000
Manifest next update: Sat 18 Apr 2026 09:00:22 +0000
Files and hashes: 1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: /IYKLK0kZwrmQD/p0vLCXf/3/LliMB0IZ71phmFXe8k=)
2: E_7lG7f5ZU0hPBZXeO9KiDguzXQ.roa (hash: uU7vlve0LCQA4yv+Ab2N5h2lLHcGh/mEnZNylo4rqpM=)
3: FHmWYGqSdJ5-CsqGnoJKGcWPx4o.roa (hash: S6HSVK6CcsFHebtvgQR42wkTCiX4LDp+Y8NKZpU+vms=)
4: XKNodyTpVE_edu5x6d6F6Y2O2tk.roa (hash: bwj5H0svZvvLnoA8x9sKQziSKp08OjMhTh7PRO1SLcQ=)
5: ZDpRY_KWNL6AZ9OnIDN7BtGPipc.roa (hash: 1DrZ+2ptHaqoBHGtimSHqvMKa2JLNNgAJEEeUlCf64I=)
6: hneKOL6xKV3cr3gP56n-PmBtpXI.roa (hash: GxqGClH9UHGqcmyTREy95vx88t5aKLbmXG/YE4t9Tqg=)
7: xTqndtOYNNxGOKliN2NcyMFkix8.roa (hash: 7wOPiKD57FwmTf2UKEcrkMSUmvstWjxFYMSq5+S7Psw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:79:e4:9f:55:c9:78:1d:b1:30:fb:ac:e4:1b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Apr 17 09:00:22 2026 GMT
Not After : Apr 18 09:00:22 2026 GMT
Subject: CN=a82a5094a74ae2390da4d3990f1a7503d588a1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:7f:1b:e7:3b:03:98:ea:bd:18:58:c6:c4:
ff:62:ba:97:e7:bf:f4:93:c0:d1:23:6a:fb:ee:5e:
6f:f9:89:a7:35:67:b0:36:64:01:8b:bc:70:58:ba:
d6:c8:32:7a:22:81:77:aa:6e:5a:60:3b:11:41:81:
a2:c0:e4:88:76:dc:49:93:8e:a7:a0:b8:c0:48:96:
e6:00:e2:25:a1:7d:1e:b6:ba:46:25:93:53:a5:bb:
cd:a5:a6:fb:63:67:bb:25:15:e4:a6:09:c0:25:c4:
52:91:0d:00:eb:1b:93:c2:11:7e:86:08:f2:d9:97:
b0:43:03:e0:eb:24:6f:96:da:41:01:60:1b:c4:ea:
14:9d:95:a6:92:ec:55:df:0a:d0:38:73:14:6a:8c:
eb:ac:44:79:fe:dd:61:b9:0b:f4:76:06:4d:b5:5d:
d7:73:cc:0f:71:ba:69:50:14:1a:1f:e3:1c:08:4b:
a1:e8:1f:48:98:0a:a0:df:c8:75:78:21:e1:fe:ab:
80:ff:6e:eb:f3:a9:0f:4c:fa:10:87:cb:af:7f:d5:
4c:93:a5:90:6b:c4:f7:6f:21:29:d8:f0:e5:54:c0:
59:68:61:b9:9c:3d:33:96:54:18:3e:c4:24:8e:46:
46:52:12:69:15:6e:35:54:3b:c1:9e:31:04:f7:6f:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2A:50:94:A7:4A:E2:39:0D:A4:D3:99:0F:1A:75:03:D5:88:A1:E0
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d3:60:e4:97:00:68:2f:b3:df:63:1c:2f:dd:eb:5d:a8:c8:
6d:0d:f6:74:bd:03:92:6d:94:70:e2:bb:60:28:09:96:ce:b7:
0e:f0:18:35:88:a1:48:6b:18:0f:51:c0:26:3e:e6:62:43:46:
78:af:79:e7:51:85:95:da:26:9a:fd:65:37:10:da:7c:77:87:
be:19:a4:9b:80:16:4d:ac:7c:01:3b:4b:d1:ab:3e:b3:6f:4a:
43:3c:73:1c:d3:1a:c4:4a:f8:ce:22:9d:77:f6:03:26:12:07:
02:eb:e5:e4:b5:8a:9f:4b:ec:95:77:1c:90:08:e4:82:24:b0:
8c:ae:e4:80:ad:ef:d8:31:d2:92:b2:bd:b2:14:ce:8c:80:cc:
48:ea:41:53:f2:97:62:fd:8c:8b:a0:94:a9:85:2d:66:2d:8d:
5a:48:36:38:a4:6a:3f:bd:14:b3:63:a4:0c:6e:42:39:9c:9d:
60:5b:18:3b:ec:ef:2c:e5:ae:2d:be:1f:5c:18:0d:73:aa:d8:
48:1a:83:0a:31:4f:32:0c:02:56:e3:61:90:17:da:70:ca:d1:
82:46:3f:7e:40:97:68:13:81:0d:e8:24:a8:5b:e0:a5:96:0d:
ad:86:65:d1:28:3c:a5:c8:d7:db:5f:28:6c:cf:67:24:9f:90:
92:32:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:15:56 2026 by rpki-client