Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
File: V3zQhta4KSWruLuBXmWIUlIuCSE.mft (raw, json)
Hash identifier: mzviXgSugVKn87OoFl6TRvulr4P0iPN3p85fAEzPuI8=
Subject key identifier: 2A:C9:31:A3:80:06:47:AC:5E:FF:4C:D3:80:0A:FE:6B:D9:9F:47:98
Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
Certificate issuer: /CN=577cd086d6b82925abb8bb815e658852522e0921
Certificate serial: 019D98502395EE30BB3B8AC15755BF1B84A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 22:01:21 +0000
Manifest this update: Thu 16 Apr 2026 22:01:21 +0000
Manifest next update: Fri 17 Apr 2026 22:01:21 +0000
Files and hashes: 1: V3zQhta4KSWruLuBXmWIUlIuCSE.crl (hash: Yw/ukgX9AY6z5kmqLYPbpBeFVRgGs2hNpUvnyGhHt/c=)
2: pLGoFC89pNsr7Py4cTyjK2qhEfg.roa (hash: E5aXP60TZFECYX5WU/DbcrY7n3oYD2lgvk9iR+kGxes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:23:95:ee:30:bb:3b:8a:c1:57:55:bf:1b:84:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921
Validity
Not Before: Apr 16 22:01:21 2026 GMT
Not After : Apr 17 22:01:21 2026 GMT
Subject: CN=2ac931a3800647ac5eff4cd3800afe6bd99f4798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:f2:05:c8:01:5f:8c:eb:99:3b:b8:9b:7a:
06:25:73:51:70:43:18:ee:f2:0f:80:19:aa:25:1d:
c7:50:06:a1:73:bf:f3:f6:39:1e:d1:f5:ee:5f:3e:
27:1a:a0:56:12:f7:b6:c1:e2:ef:5a:5f:46:75:d7:
52:64:69:c3:ee:5f:83:cc:ad:82:35:40:54:5a:cc:
4b:68:19:5a:48:09:0a:dd:03:60:00:f2:17:96:45:
4d:eb:b1:22:61:08:3c:fe:08:ae:5f:b6:dc:03:3b:
28:3f:3b:a6:c0:f9:53:67:89:e2:af:fb:da:7c:2c:
87:bf:26:8e:ce:63:25:31:53:b5:f9:8e:eb:e8:0f:
90:57:e4:b2:81:ad:d6:42:9d:55:d1:63:59:3f:1a:
d0:51:f1:b3:66:bb:9a:87:36:98:a9:15:11:0b:dd:
3d:a6:8e:f9:65:7c:bb:c0:06:d8:f4:ca:7f:89:5f:
01:15:6e:f1:8c:23:50:fb:e3:a7:9c:81:4c:da:44:
3e:ac:02:f4:77:da:9a:25:8c:cc:6a:74:97:1c:f0:
14:60:02:e8:a3:b8:f5:e8:f2:4d:29:38:88:eb:98:
a4:e5:7e:af:7d:07:80:21:f2:18:39:2c:7a:bc:88:
d9:80:96:5d:91:bb:14:ab:5c:e4:3f:2c:82:12:51:
f5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C9:31:A3:80:06:47:AC:5E:FF:4C:D3:80:0A:FE:6B:D9:9F:47:98
X509v3 Authority Key Identifier:
keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:14:ab:3e:59:84:27:f7:b4:20:5f:d3:f8:73:cd:19:70:84:
8e:16:48:01:42:69:6d:6d:d7:fc:bc:0c:d3:02:9c:42:51:2f:
ba:a4:3d:20:00:f8:45:08:0f:8e:ba:2a:a5:15:10:62:75:16:
e6:cb:7c:fe:a6:5a:44:45:2f:97:ae:12:26:55:07:11:d8:c3:
e6:e3:43:3b:e9:08:36:89:d5:d2:8e:3c:90:47:70:7e:73:04:
84:41:6d:b0:89:39:f3:2a:d1:8d:d1:18:77:6e:84:42:49:9b:
2e:99:7b:af:c2:5a:b9:42:57:01:5f:80:ca:10:e9:8f:1b:d6:
b0:da:e6:4f:ea:24:3d:9e:f1:30:94:e8:5c:eb:94:a4:82:8b:
14:fc:84:df:dc:c6:9e:e3:91:1b:fa:89:f0:0a:23:41:5e:cd:
7b:a0:06:a4:82:b5:99:a2:9c:0c:2c:6e:4e:84:b7:8b:9d:4a:
3e:ee:dc:4a:b1:8d:ce:55:f3:60:ec:d8:49:7f:55:b4:49:83:
09:d7:9f:66:06:56:39:20:f9:41:d1:a5:9a:fc:4e:26:9f:12:
3c:5f:ec:4f:c7:e2:02:0f:51:83:0d:d5:cc:73:8e:d8:72:d8:
da:b7:8b:56:d6:f6:3d:23:b8:c7:1f:b8:bc:dd:36:51:ea:0f:
5e:10:dc:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUCOV7jC7O4rBV1W/G4SpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3N2NkMDg2ZDZiODI5MjVhYmI4YmI4MTVlNjU4ODUyNTIy
ZTA5MjEwHhcNMjYwNDE2MjIwMTIxWhcNMjYwNDE3MjIwMTIxWjAzMTEwLwYDVQQD
EygyYWM5MzFhMzgwMDY0N2FjNWVmZjRjZDM4MDBhZmU2YmQ5OWY0Nzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscHyBcgBX4zrmTu4m3oGJXNRcEMY
7vIPgBmqJR3HUAahc7/z9jke0fXuXz4nGqBWEve2weLvWl9GdddSZGnD7l+DzK2C
NUBUWsxLaBlaSAkK3QNgAPIXlkVN67EiYQg8/giuX7bcAzsoPzumwPlTZ4nir/va
fCyHvyaOzmMlMVO1+Y7r6A+QV+Syga3WQp1V0WNZPxrQUfGzZruahzaYqRURC909
po75ZXy7wAbY9Mp/iV8BFW7xjCNQ++OnnIFM2kQ+rAL0d9qaJYzManSXHPAUYALo
o7j16PJNKTiI65ik5X6vfQeAIfIYOSx6vIjZgJZdkbsUq1zkPyyCElH1TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrJMaOABkesXv9M04AK/mvZn0eYMB8GA1UdIwQY
MBaAFFd80IbWuCklq7i7gV5liFJSLgkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjkt
NzIwOGNkOThkODgxLzEvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjktNzIwOGNkOThkODgx
LzEvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxSrPlmE
J/e0IF/T+HPNGXCEjhZIAUJpbW3X/LwM0wKcQlEvuqQ9IAD4RQgPjroqpRUQYnUW
5st8/qZaREUvl64SJlUHEdjD5uNDO+kINonV0o48kEdwfnMEhEFtsIk58yrRjdEY
d26EQkmbLpl7r8JauUJXAV+AyhDpjxvWsNrmT+okPZ7xMJToXOuUpIKLFPyE39zG
nuORG/qJ8AojQV7Ne6AGpIK1maKcDCxuToS3i51KPu7cSrGNzlXzYOzYSX9VtEmD
CdefZgZWOSD5QdGlmvxOJp8SPF/sT8fiAg9Rgw3VzHOO2HLY2reLVtb2PSO4xx+4
vN02UeoPXhDceg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:49 2026 by rpki-client