Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: Do9x4CE9kj/wxm4fAEnntFZMK+v9rlxmSSpTesG4/Zo=
Subject key identifier: 1B:CA:8D:97:A7:B6:92:71:5A:9B:F9:FE:E0:C4:E5:76:30:AA:2D:B0
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 019D9886C7D46B012275C8C01A651D1D57C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 1802
Signing time: Thu 16 Apr 2026 23:01:02 +0000
Manifest this update: Thu 16 Apr 2026 23:01:02 +0000
Manifest next update: Fri 17 Apr 2026 23:01:02 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: jhm82zdCq4YrsGhGpOGAjhaNdYwofIXVkZK0Sp63Ci4=)
2: 6xKBRhcPGOW0-ef_87nk8nPvflA.roa (hash: ljMD+xiZ4YQ7UeRE1RQr2u8g+4zja/CKtgOQ244SoZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:c7:d4:6b:01:22:75:c8:c0:1a:65:1d:1d:57:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Apr 16 23:01:02 2026 GMT
Not After : Apr 17 23:01:02 2026 GMT
Subject: CN=1bca8d97a7b692715a9bf9fee0c4e57630aa2db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:9d:52:83:81:9a:8a:86:32:f1:c7:2e:6d:
93:c9:93:2a:3e:64:d9:41:c5:43:18:9f:05:53:91:
e4:d5:b8:d6:10:39:22:a6:2f:ec:b7:67:c5:6d:eb:
8f:83:78:8f:60:d3:3e:1a:de:62:37:f6:ee:af:aa:
0a:95:75:50:6f:50:e7:ef:3c:10:e6:46:4c:8f:90:
55:ab:79:b3:c0:06:4e:46:a8:be:97:cf:b1:ad:cc:
e2:e7:e1:3f:d1:2a:2e:29:ad:b8:25:91:22:78:d4:
b8:7d:da:74:d8:df:d1:bf:da:f0:7f:02:12:0f:b7:
89:36:90:af:a2:b9:39:b4:7b:d6:c6:cc:d9:4c:11:
1a:65:c3:3c:e9:5d:7a:bd:51:c3:0d:f6:4f:3a:42:
01:af:b0:65:e8:ac:3d:18:ff:03:40:d0:e4:52:ab:
f6:5c:ef:9a:84:35:85:ac:d2:20:f9:74:d9:ac:c0:
e4:28:38:bf:bc:72:ab:d7:45:0f:1c:cc:a4:7a:54:
bc:8d:13:48:eb:a2:fd:dd:c1:3f:0d:1e:20:58:ee:
48:40:74:ce:17:f8:17:69:69:68:06:44:e6:0c:77:
c9:3d:fb:41:9e:d7:26:40:5d:ec:30:f6:38:35:32:
3e:5a:ab:13:b1:d5:cf:57:d7:91:d5:d9:d8:33:ac:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CA:8D:97:A7:B6:92:71:5A:9B:F9:FE:E0:C4:E5:76:30:AA:2D:B0
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:fe:55:ef:da:28:dd:0b:c1:1c:fb:24:91:31:18:44:a4:54:
96:f6:02:7e:25:4d:24:9b:65:f3:0a:36:b9:9d:40:cf:64:a9:
69:00:8f:cc:c3:e3:ad:3f:06:56:28:33:ee:b3:bf:b4:c3:38:
39:ed:07:60:a5:fc:81:3c:7e:d6:15:ac:8c:d4:ee:4c:c3:2c:
c7:32:97:8d:e6:d8:ef:9a:fc:f0:ca:1a:ce:34:9d:e6:08:ee:
3a:b1:51:18:4a:40:38:31:5e:b8:1a:c0:33:3a:de:e5:3a:75:
53:32:86:2e:96:ee:be:d0:b3:37:90:17:75:e1:4a:82:aa:45:
aa:67:27:6a:8e:30:d2:00:b9:8f:cb:f3:2f:85:c7:bc:15:04:
64:cf:c8:45:25:9d:56:9f:c4:1a:4c:92:fb:32:a6:e6:88:3a:
a4:77:a0:e9:59:08:c4:3b:32:99:8f:bc:4d:a0:13:69:39:6a:
43:e1:d6:68:bb:eb:75:ec:1e:d6:46:dd:99:f8:86:74:42:8a:
85:e9:9b:dc:b0:0d:40:ae:30:38:c3:33:66:6b:3d:02:ec:bf:
88:f0:a0:e0:d4:b0:cf:de:12:dc:5d:41:3c:2f:d3:60:89:3d:
bc:59:4f:b7:84:36:4f:28:2f:21:f6:45:b1:08:84:e5:ca:3e:
a8:08:4f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:28 2026 by rpki-client