Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: F3a+aJquOShNHSWxwJysFuFUrEKWzYXZ8fzYp9EG2ro=
Subject key identifier: 6A:A2:2D:C8:D9:B3:C8:70:2C:DD:FF:7F:0A:68:67:8A:90:5B:D3:03
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 019D9AAC08F526900BF04B333B5A385A4316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:00:58 +0000
Manifest this update: Fri 17 Apr 2026 09:00:58 +0000
Manifest next update: Sat 18 Apr 2026 09:00:58 +0000
Files and hashes: 1: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: HxtyFandf13m9+9/kpqMLM6VFMjnsAJAlkx8oXnPCXg=)
2: q2os6H-xLvk9UkRKuFy2kFXrSyk.roa (hash: PRxebSo24ZxSHOEyZVv7K175GUR0r91e11qM7IDM3bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:08:f5:26:90:0b:f0:4b:33:3b:5a:38:5a:43:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Apr 17 09:00:58 2026 GMT
Not After : Apr 18 09:00:58 2026 GMT
Subject: CN=6aa22dc8d9b3c8702cddff7f0a68678a905bd303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:9a:be:01:91:b5:57:02:66:69:56:f9:f5:
6b:55:62:0d:88:4c:69:f5:e4:de:c9:f0:cf:c2:95:
e4:c0:4c:99:d2:3f:cc:a4:cc:2f:11:7d:60:b7:af:
16:78:78:70:a2:fb:fc:ba:3b:91:8f:7e:32:b8:64:
1a:ef:35:9f:80:db:2c:05:0a:ce:15:50:69:6d:ec:
85:63:ad:5d:26:c9:d2:20:fa:9b:21:44:e1:a3:78:
69:69:95:ff:38:90:72:27:2b:07:8b:d5:52:86:60:
d7:bc:ef:35:b3:5d:14:a9:35:b9:00:8f:5d:e7:e8:
4b:44:c7:ff:ad:ff:1c:dd:d7:c0:47:11:6c:61:0b:
5e:69:2a:4b:3f:7b:49:97:c5:b1:2e:a4:ba:fc:b2:
9c:22:c8:10:10:eb:a1:80:60:b0:27:c0:c4:f5:cd:
34:08:1d:6c:5e:05:9a:9a:02:f8:fc:fb:34:b4:bd:
e7:a9:dc:35:0e:04:a4:0e:d7:b1:30:ce:02:15:3f:
e9:8f:3e:12:e6:5a:b6:ce:37:71:ef:10:d9:b8:1e:
dd:9d:25:04:e7:56:e8:57:ad:1b:68:41:a2:ca:aa:
40:52:21:12:a6:58:d6:32:99:66:be:7b:44:28:18:
24:72:19:d1:0a:86:90:d9:55:2c:26:02:de:0e:91:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A2:2D:C8:D9:B3:C8:70:2C:DD:FF:7F:0A:68:67:8A:90:5B:D3:03
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c4:33:9e:24:52:73:d6:c4:bf:07:27:78:9a:2b:f6:67:b4:
cf:ab:9f:14:6c:b8:19:6d:aa:a3:91:fc:9a:8f:9c:7d:71:5a:
a6:9b:5e:46:e1:5c:28:e7:52:8f:bc:50:53:ed:40:41:cd:82:
cf:31:e6:02:9f:6d:e0:10:3a:6f:90:b0:03:26:7e:6b:31:34:
3d:a1:5b:6d:70:7b:a3:94:4a:c3:06:84:f1:4f:10:ac:13:66:
3a:fb:29:57:aa:0c:7c:48:02:1a:da:85:af:8b:b8:6e:15:c8:
01:d0:b7:5c:cf:be:f5:cc:97:34:75:23:33:1d:96:5c:90:a3:
d6:08:21:1f:22:cd:2a:50:c0:cc:5f:d7:96:0b:fe:ed:b7:bd:
53:3a:59:a9:c0:6e:ae:10:16:94:ed:ee:4f:c1:a4:d3:28:da:
99:6d:8f:1e:9a:69:75:42:f9:9c:cb:df:52:8a:ba:42:29:5a:
d7:14:e1:26:e1:2d:2f:89:1a:b3:99:8b:92:43:1b:f3:57:aa:
c3:5a:a7:e7:dd:c2:cb:45:c4:99:aa:d5:ac:bb:71:6d:08:40:
af:08:12:c9:43:ea:02:5f:3d:fe:a3:67:bb:51:28:ce:cb:8f:
d1:28:4d:7b:d4:cb:52:9f:3e:33:4b:17:08:71:b1:6a:ea:6d:
df:2c:30:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:43 2026 by rpki-client