Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: hIJPNup9/H5wnrX4pUAkaMDQFCYF8olAmhN4zGecPsA=
Subject key identifier: 92:72:7B:8B:6B:1D:FF:43:4D:44:E5:B7:70:86:CE:71:D8:9E:AF:6F
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 019D97AAE515058E4B21B7F058C9D7E77EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 19:00:52 +0000
Manifest this update: Thu 16 Apr 2026 19:00:52 +0000
Manifest next update: Fri 17 Apr 2026 19:00:52 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: Vda90uWMwGC9MVBheXJiLYYWusOKAngTWB1rJEFTBnM=)
2: 3ostfnsnfixfxEqrfywy9eGNnT0.roa (hash: TMH3qMKKkwZR6QRgNjTjxS5fjcdU4kA+Vz+Hy9Lz73k=)
3: d2YSIWOU5vk9kBcZoNOEBYoB5d8.roa (hash: 7IimrnEh+R6l+Oc9i2fjThrQzcZAJGrkh3OgCSJFbow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:e5:15:05:8e:4b:21:b7:f0:58:c9:d7:e7:7e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Apr 16 19:00:52 2026 GMT
Not After : Apr 17 19:00:52 2026 GMT
Subject: CN=92727b8b6b1dff434d44e5b77086ce71d89eaf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:8a:1c:7e:30:ce:e7:b4:a6:92:7c:97:bd:
53:0d:18:22:6e:08:b3:c1:d4:3c:a5:a7:90:5f:af:
ea:81:ad:76:dc:46:01:fb:73:4d:ae:fc:b0:00:27:
9d:38:8a:73:53:60:f1:85:f9:a2:23:d5:bc:2d:2e:
f9:68:72:6e:16:65:e4:9b:51:59:d1:ae:55:17:0d:
fa:ba:4c:6e:4d:a9:6c:c7:da:c6:21:36:ed:3e:ae:
69:0b:ae:97:f5:ff:ad:55:35:7f:69:a9:4e:db:0b:
fd:2b:7c:18:23:61:12:d1:2d:f7:5b:52:f8:ec:9e:
c0:19:4f:15:b5:9b:e8:bc:d0:26:fe:e8:37:26:33:
f3:b7:d5:95:62:75:c9:56:8f:b2:14:50:4d:90:7d:
aa:cd:4c:8c:71:3a:5f:b9:1b:77:2a:51:d7:18:42:
64:cc:1e:74:20:78:49:da:be:9b:f8:22:7c:f5:39:
15:d6:78:b7:7f:b9:fc:84:e3:b8:dd:3a:e9:42:3f:
d8:43:47:93:08:85:b6:17:e1:a2:5a:cd:b3:7b:f2:
69:49:30:36:d5:b1:07:6f:c4:c3:6e:c4:84:84:15:
4d:79:61:cf:ba:e1:23:eb:7d:56:5c:05:2c:5e:34:
10:d6:c6:ea:6a:12:36:fc:ed:f8:63:6a:0f:09:fc:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:72:7B:8B:6B:1D:FF:43:4D:44:E5:B7:70:86:CE:71:D8:9E:AF:6F
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:71:31:4a:51:31:45:90:3e:6b:73:47:b5:56:6c:72:d8:0d:
fb:d1:79:83:49:4d:3b:50:bf:ad:3c:94:ab:c4:f9:51:16:fa:
3e:f0:c2:d1:d1:e9:e3:0b:1a:7c:e7:b2:d3:73:02:7e:c9:e7:
95:17:42:24:d0:99:2c:08:f2:b9:f4:4d:48:aa:89:4c:4f:b2:
42:c3:3c:7a:aa:0e:93:68:9c:64:69:fa:49:d5:61:dd:bd:50:
43:f1:8a:47:fb:04:9b:74:09:20:35:52:13:d9:eb:bc:e6:fc:
66:16:c9:61:cd:9b:cf:61:5b:30:c2:a1:a5:39:f7:b8:e2:51:
69:67:77:7b:39:87:a7:44:93:2a:71:9c:d7:aa:0d:58:7a:a5:
2b:5a:35:19:0e:db:45:99:fb:d7:29:1a:76:e0:3c:36:e5:6e:
e9:5b:92:fe:64:1b:a3:d2:9c:2f:79:0b:bc:61:44:48:5d:b3:
ec:4f:e2:46:9f:35:6b:67:6f:2f:7d:d3:11:86:a4:02:3a:ac:
89:dc:a0:de:b4:d6:67:88:02:51:d6:73:30:fb:0e:4b:0b:dc:
5e:4d:1a:6c:a5:34:8a:64:db:7f:36:d6:a6:b4:cc:d2:47:e0:
bc:92:c7:f3:51:d0:f2:31:10:0c:13:4a:67:d5:8c:6a:66:66:
4e:a4:8d:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XquUVBY5LIbfwWMnX5367MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNjNlYjYzMTliYTQ1NGQzOTc2NDU5NDVjZTU0Mzk1NzZm
YWM3NDEwHhcNMjYwNDE2MTkwMDUyWhcNMjYwNDE3MTkwMDUyWjAzMTEwLwYDVQQD
Eyg5MjcyN2I4YjZiMWRmZjQzNGQ0NGU1Yjc3MDg2Y2U3MWQ4OWVhZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL+KHH4wzue0ppJ8l71TDRgibgiz
wdQ8paeQX6/qga123EYB+3NNrvywACedOIpzU2DxhfmiI9W8LS75aHJuFmXkm1FZ
0a5VFw36ukxuTalsx9rGITbtPq5pC66X9f+tVTV/aalO2wv9K3wYI2ES0S33W1L4
7J7AGU8VtZvovNAm/ug3JjPzt9WVYnXJVo+yFFBNkH2qzUyMcTpfuRt3KlHXGEJk
zB50IHhJ2r6b+CJ89TkV1ni3f7n8hOO43TrpQj/YQ0eTCIW2F+GiWs2ze/JpSTA2
1bEHb8TDbsSEhBVNeWHPuuEj631WXAUsXjQQ1sbqahI2/O34Y2oPCfw5uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJye4trHf9DTUTlt3CGznHYnq9vMB8GA1UdIwQY
MBaAFN5j62MZukVNOXZFlFzlQ5V2+sdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMt
MWUxOGY1YjQ5MDVkLzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMtMWUxOGY1YjQ5MDVk
LzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnExSlEx
RZA+a3NHtVZsctgN+9F5g0lNO1C/rTyUq8T5URb6PvDC0dHp4wsafOey03MCfsnn
lRdCJNCZLAjyufRNSKqJTE+yQsM8eqoOk2icZGn6SdVh3b1QQ/GKR/sEm3QJIDVS
E9nrvOb8ZhbJYc2bz2FbMMKhpTn3uOJRaWd3ezmHp0STKnGc16oNWHqlK1o1GQ7b
RZn71ykaduA8NuVu6VuS/mQbo9KcL3kLvGFESF2z7E/iRp81a2dvL33TEYakAjqs
idyg3rTWZ4gCUdZzMPsOSwvcXk0abKU0imTbfzbWprTM0kfgvJLH81HQ8jEQDBNK
Z9WMamZmTqSNNg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:17 2026 by rpki-client