Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: PBXdURYUus06ulvf0/PWa7weg5KkLE+VXClqz0Ry4Qk=
Subject key identifier: CE:44:BE:54:1F:A3:E8:7D:61:BD:33:03:47:EB:9A:95:AC:3C:8F:CC
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 019D9AE2E8BD80E61EEBA2D19EA2A60C4DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 10:00:54 +0000
Manifest this update: Fri 17 Apr 2026 10:00:54 +0000
Manifest next update: Sat 18 Apr 2026 10:00:54 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: 1Fxojp2OnLXlyQ+U5zHRPEgOcawSTV998g7szHA6LgU=)
2: BkDRLAa3B4lViMgjpTtfQSFV14I.roa (hash: FjVWnkZKxfwmWvnmDOyzpHJdLPGSitKsvtBzxG3wncA=)
3: nFz68vxexIG1S-RusF1_qXkv1Yc.roa (hash: CL/0BWaI5R4mYNyzheF3UgRNXWDP8rh4d3WLBBru+lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:e8:bd:80:e6:1e:eb:a2:d1:9e:a2:a6:0c:4d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Apr 17 10:00:54 2026 GMT
Not After : Apr 18 10:00:54 2026 GMT
Subject: CN=ce44be541fa3e87d61bd330347eb9a95ac3c8fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:fd:5b:1b:50:1e:04:68:4d:d1:d1:fb:a1:
4b:3a:4d:58:3b:cf:84:f3:6f:f4:61:ff:1c:ab:d3:
00:75:de:0f:73:cc:55:ea:1c:26:65:81:93:de:ac:
de:00:b9:dc:e9:2a:12:b8:11:21:79:7c:00:4c:dd:
5e:08:b4:3c:fe:d3:1f:83:8b:1d:03:1f:5c:63:63:
00:f6:8d:5c:e2:58:82:49:d3:da:fc:01:8c:50:19:
86:76:d4:6d:12:d3:cf:3c:c2:d3:e9:fa:b1:42:e4:
8b:d1:b4:69:33:31:eb:03:ec:29:8a:3a:b7:f5:fc:
f1:20:3b:3e:3f:14:1e:47:ab:49:79:8e:8c:79:05:
8b:ba:8f:50:07:a2:7b:33:8b:92:54:7b:84:a6:2b:
f7:a0:60:ce:c5:6a:f8:01:a1:98:35:02:b2:1b:85:
b2:c0:8c:7b:8e:0d:5c:8b:09:b2:77:64:75:fd:d0:
62:1c:ce:d2:61:7b:1f:89:b2:b1:61:bd:29:b7:a8:
0e:99:8f:76:23:79:ee:18:71:b3:48:dd:8f:c1:e7:
16:64:96:f2:cc:63:3b:8a:31:5a:49:88:da:4e:ed:
0c:84:97:4e:1f:ec:77:a9:2e:92:7d:92:0f:c5:2d:
a8:e2:37:9c:e8:96:cc:17:52:f8:35:ae:82:d9:40:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:44:BE:54:1F:A3:E8:7D:61:BD:33:03:47:EB:9A:95:AC:3C:8F:CC
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9c:b7:c2:4b:6f:53:c0:df:32:2c:5b:e8:13:61:97:8f:81:
bb:96:ec:5d:d5:fa:73:b4:49:9d:0c:b7:03:d2:3a:a9:bb:86:
ab:bc:ae:61:c3:87:38:ad:59:09:88:3e:c5:87:95:dc:98:2b:
c3:91:b1:b1:e3:8a:6a:c3:f4:c9:f8:49:cc:a6:79:44:24:a0:
d4:85:ff:5c:17:87:dc:b4:55:c9:20:6c:a1:d2:23:c0:b3:5b:
d6:34:80:34:40:01:3b:57:4e:1e:e3:55:84:fb:d8:d2:9d:b0:
d0:ef:00:41:e2:9e:06:0c:8c:94:51:b7:1a:30:9e:82:75:df:
ba:a7:67:28:6f:67:e6:19:80:58:d8:3e:6f:7f:64:34:c7:a8:
dc:d0:40:3b:07:92:dd:3f:32:85:2b:c7:53:15:fd:dd:09:de:
ba:91:64:2e:72:32:06:1a:58:d3:33:da:24:ea:24:62:5c:91:
35:ef:8d:18:f1:69:df:5d:8b:22:78:b9:79:fb:92:0a:d5:b7:
b1:92:06:4d:9b:17:98:f1:bb:7f:b8:02:3e:c7:d6:45:77:9b:
c9:30:f4:dd:08:c9:eb:2a:cb:bf:b4:b3:71:c2:5b:86:24:d1:
0b:58:93:de:10:31:de:da:08:e2:40:a0:0c:06:e0:53:f1:e9:
00:0f:f7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:48:02 2026 by rpki-client