Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: NREdHgEfPS5KY6hqXv+1Tzp3YhjVELm6ZFJxaJu5uFM=
Subject key identifier: C3:D9:DA:DB:82:62:65:0B:4B:BE:79:CE:59:AC:94:92:96:F0:05:1D
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 019DA48B500FEACE77C93EA5F3FFB2CE89DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 185B
Signing time: Sun 19 Apr 2026 07:01:26 +0000
Manifest this update: Sun 19 Apr 2026 07:01:26 +0000
Manifest next update: Mon 20 Apr 2026 07:01:26 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: /V+sw2yJ/F2tFu8e6quUAqSois8lcIehKts18AZHDuw=)
2: gmn2k3f32tfDXu2zwYzVyGe8JSs.roa (hash: W9sjDbpYZWeZAU/ChNMb2ZUNyZYk9yxty8Xm+AfcIh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:50:0f:ea:ce:77:c9:3e:a5:f3:ff:b2:ce:89:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Apr 19 07:01:26 2026 GMT
Not After : Apr 20 07:01:26 2026 GMT
Subject: CN=c3d9dadb8262650b4bbe79ce59ac949296f0051d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:fb:98:63:4d:f0:1b:9b:e7:8e:70:6a:25:
ac:ff:b5:1c:dc:7a:ed:e0:f5:d0:0d:b1:0d:ff:9f:
e1:1b:9b:82:6d:5f:d1:04:cb:6b:3b:81:99:e5:c6:
fd:28:d0:cc:72:0a:24:88:a0:e8:a7:bb:18:2b:b4:
a6:f1:b3:38:92:f4:6a:bc:92:de:90:25:cf:5c:b3:
43:1b:2a:d8:73:24:63:52:21:ea:1f:13:61:a9:e3:
a6:20:e2:79:d9:44:ef:0b:24:84:b7:a5:46:1a:b2:
26:4c:f4:fb:16:ec:25:34:dd:1b:7c:5c:aa:d5:76:
a2:84:d8:4e:45:f1:7b:18:03:73:29:2c:27:ee:ad:
e8:f6:72:b3:5a:f7:ff:2c:aa:01:9d:7e:cf:d8:9b:
95:28:10:c9:1c:76:0c:49:e9:2a:4a:9c:83:cd:71:
e2:a9:c6:2a:18:4c:da:92:1f:56:ac:55:63:2d:ae:
12:b1:fc:74:b9:6a:15:72:a9:cb:14:0d:6b:59:c6:
89:85:6a:b8:48:f5:59:30:b9:ef:11:0f:a8:b8:7f:
2f:bd:11:83:0d:41:a3:56:fb:8c:f5:0c:b4:42:d2:
a9:a3:c1:c1:97:2e:0a:da:a8:ef:d5:c4:c3:1f:8c:
e4:26:37:c1:ba:ca:fd:57:eb:73:f9:32:ac:7d:60:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D9:DA:DB:82:62:65:0B:4B:BE:79:CE:59:AC:94:92:96:F0:05:1D
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:98:ee:ba:19:83:ff:e5:3b:7a:00:45:ba:34:9f:7b:43:a6:
c8:df:d3:1b:ab:33:04:1a:09:13:1a:7e:fe:a4:74:5b:85:de:
f0:24:1e:53:44:8e:61:1d:df:8e:13:cb:44:69:3b:5a:e4:51:
03:40:15:0c:ab:92:a0:7f:d0:fe:9a:41:76:4c:4e:bc:35:cf:
99:2c:90:32:a1:46:a2:1d:e4:7c:79:1d:f0:d8:3e:0c:2c:94:
7a:ac:66:48:ef:e4:be:01:33:27:b1:5f:6e:34:d5:78:93:3d:
a7:9b:1a:6b:8d:e2:8c:52:69:58:e1:89:b2:c5:ac:0c:16:9a:
ee:7a:0e:f6:32:ac:b4:0f:ba:b9:8a:f0:50:b7:04:20:29:7a:
d0:a1:43:df:2f:9a:e6:79:a1:f8:79:fc:e5:0f:08:af:50:e2:
b0:02:ef:c9:7b:68:0b:25:ac:e7:ff:f7:55:84:4a:72:92:0d:
c9:8f:86:e9:8a:8f:69:d3:38:69:6d:1f:11:e7:91:d4:a8:5d:
bf:b2:36:b5:e7:95:36:e3:3c:7e:10:eb:1d:f7:a2:97:33:16:
65:b4:31:b3:31:86:d0:20:4c:c6:ba:af:b6:ad:18:65:7b:7e:
3a:d3:d1:d1:a6:2c:b6:c8:0b:5a:25:75:c7:c8:84:4e:05:e7:
3c:f1:b3:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ki1AP6s53yT6l8/+yzonaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGRlYTRlYTI1NDZkN2EwMTlhNGVmODI0M2I1ZWI2MzU2
NWM4NDcwHhcNMjYwNDE5MDcwMTI2WhcNMjYwNDIwMDcwMTI2WjAzMTEwLwYDVQQD
EyhjM2Q5ZGFkYjgyNjI2NTBiNGJiZTc5Y2U1OWFjOTQ5Mjk2ZjAwNTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK/7mGNN8Bub545waiWs/7Uc3Hrt
4PXQDbEN/5/hG5uCbV/RBMtrO4GZ5cb9KNDMcgokiKDop7sYK7Sm8bM4kvRqvJLe
kCXPXLNDGyrYcyRjUiHqHxNhqeOmIOJ52UTvCySEt6VGGrImTPT7FuwlNN0bfFyq
1XaihNhORfF7GANzKSwn7q3o9nKzWvf/LKoBnX7P2JuVKBDJHHYMSekqSpyDzXHi
qcYqGEzakh9WrFVjLa4Ssfx0uWoVcqnLFA1rWcaJhWq4SPVZMLnvEQ+ouH8vvRGD
DUGjVvuM9Qy0QtKpo8HBly4K2qjv1cTDH4zkJjfBusr9V+tz+TKsfWBT3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPZ2tuCYmULS755zlmslJKW8AUdMB8GA1UdIwQY
MBaAFNwN6k6iVG16AZpO+CQ7XrY1ZchHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMt
M2Q0YjI4M2YzMjJkLzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMtM2Q0YjI4M2YzMjJk
LzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZjuuhmD
/+U7egBFujSfe0OmyN/TG6szBBoJExp+/qR0W4Xe8CQeU0SOYR3fjhPLRGk7WuRR
A0AVDKuSoH/Q/ppBdkxOvDXPmSyQMqFGoh3kfHkd8Ng+DCyUeqxmSO/kvgEzJ7Ff
bjTVeJM9p5saa43ijFJpWOGJssWsDBaa7noO9jKstA+6uYrwULcEICl60KFD3y+a
5nmh+Hn85Q8Ir1DisALvyXtoCyWs5//3VYRKcpINyY+G6YqPadM4aW0fEeeR1Khd
v7I2teeVNuM8fhDrHfeilzMWZbQxszGG0CBMxrqvtq0YZXt+OtPR0aYstsgLWiV1
x8iETgXnPPGzcQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:18:01 2026 by rpki-client