Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: IRxpuBHFT8wA5nr4wLU+z6COrXq1QFlIePyS76I3WU4=
Subject key identifier: 14:10:7B:06:70:F2:FA:87:A3:72:55:59:B4:B1:56:FE:40:6E:A6:3C
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 019D97AA96697C0A204B817E0F79ACFC0B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 19:00:32 +0000
Manifest this update: Thu 16 Apr 2026 19:00:32 +0000
Manifest next update: Fri 17 Apr 2026 19:00:32 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: cVuofxbY4HW7suVXm4I2/kw4b6B2VRmg+4H+N4U8kjE=)
2: 4Qc85N4EwfShTiGhUnkvPvcjOEs.roa (hash: 5gcG+cc/9htcQzQfIk5Lbs8J3j2mNNeVz49M8qI81nA=)
3: glnm8xkFmkyDnAUiwsatA2Kodgs.roa (hash: fWL/LJ3IYMAlKiuesh/wJUaIRPkKyGpbzqDlFGh6EOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:96:69:7c:0a:20:4b:81:7e:0f:79:ac:fc:0b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Apr 16 19:00:32 2026 GMT
Not After : Apr 17 19:00:32 2026 GMT
Subject: CN=14107b0670f2fa87a3725559b4b156fe406ea63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:25:c8:d6:ed:70:18:e8:c3:95:20:49:a6:c6:
ce:b4:5c:6a:3f:f1:ee:08:4c:7b:ff:47:68:3d:d6:
e2:ed:fc:81:e3:49:09:a4:ed:ce:2b:86:8a:77:c0:
85:a2:d0:91:e4:98:8f:aa:05:c9:0c:8b:a5:dc:bd:
75:ef:16:02:0c:33:47:6d:ab:69:4c:e8:9f:b8:5d:
13:76:4a:cb:c7:5f:67:64:3c:cf:d3:a6:b4:ac:08:
18:fe:b9:1e:c0:e0:26:3b:a9:d1:a7:35:63:aa:c1:
e6:0d:dd:8e:66:65:32:0b:31:f8:c7:4a:8c:df:f3:
4f:76:8f:61:87:3b:ff:bd:b0:01:2c:45:87:95:e7:
6f:8c:d9:91:07:db:e7:9d:ff:e2:dd:ad:68:ae:bc:
d0:e4:f5:c0:18:ff:11:4e:25:e3:ab:66:fd:c5:26:
d7:97:4a:38:6e:86:03:ba:0f:4c:b6:40:96:56:eb:
05:e4:6a:5b:11:eb:d3:93:91:71:38:fd:2f:ef:92:
c6:f0:5e:f0:21:b0:c3:28:83:54:58:55:ef:0b:6d:
82:21:f5:d1:47:8a:22:bd:80:6c:1f:c0:08:52:53:
89:63:9e:b8:b8:70:8c:79:a9:2d:d9:be:bb:44:12:
e2:c7:df:df:3d:9e:cc:6e:25:37:68:10:ed:b2:02:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:10:7B:06:70:F2:FA:87:A3:72:55:59:B4:B1:56:FE:40:6E:A6:3C
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:84:69:d2:4c:9a:a6:45:f5:05:8f:b3:a9:26:22:01:c3:aa:
c4:f9:02:d5:00:c6:e6:7f:52:c0:13:bd:17:ae:40:1d:f4:22:
b8:3a:3e:76:7e:ce:f9:61:a0:8f:a9:7c:2b:ce:55:a3:84:59:
80:7f:65:22:63:4a:85:a2:5b:1e:42:43:f9:38:f9:a5:8d:d8:
cf:02:dd:91:dc:10:dc:66:c7:cb:b2:42:58:70:c4:eb:f4:76:
52:41:1a:25:87:86:7f:2d:16:b3:60:97:b7:bb:cb:b1:7e:98:
0b:de:f8:4e:5c:76:5d:ec:5c:e8:e0:d3:6f:bc:ab:d8:7e:6b:
0f:d0:d6:80:c5:77:a6:34:53:76:c7:6f:d5:fc:af:a3:5c:c8:
43:00:78:e6:6a:70:da:2e:e7:a9:bb:06:e7:7d:fe:4e:33:f8:
1e:99:87:c6:a3:55:e2:78:54:29:5d:37:7e:51:91:84:8c:28:
df:a9:c3:02:1c:b7:3e:a8:98:46:57:7b:b0:db:42:76:f3:3c:
91:74:53:af:56:39:62:c8:5c:51:39:c8:31:f3:89:8a:08:76:
27:1e:26:82:9f:fc:81:0a:b6:50:74:8d:ba:a5:9b:e3:ab:44:
57:cd:00:62:90:1d:d3:ea:e3:dd:5f:10:49:51:ca:88:80:0e:
c0:d2:6e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:10 2026 by rpki-client