Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: 3JHB+0bWpoI961b9RIZOKJWdfCdyhWNldgWywmjFn6k=
Subject key identifier: BE:A0:9C:CE:99:08:CE:54:20:4D:90:F2:E9:65:D1:72:7E:C0:C4:D4
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 019DA453C352FA20C7C94227408FA630AEDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 06:00:46 +0000
Manifest this update: Sun 19 Apr 2026 06:00:46 +0000
Manifest next update: Mon 20 Apr 2026 06:00:46 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: XJh3PzJfWcy2YjqF/ardmP04rp/aOeqhfyB2Ki1f6dk=)
2: 9yUNTQu4D8dEJY0vZu2yaAiRefU.roa (hash: lrso5MYVylYk+QUiDaPruFaOoSE7UzGRAVXufFOfA74=)
3: jnbS6eM3y8l2eIAi24P02_6sYnE.roa (hash: oehLYvqq0N9O64TqK28Nu+Air9RUEnLzPzRmB5KAv7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:c3:52:fa:20:c7:c9:42:27:40:8f:a6:30:ae:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Apr 19 06:00:46 2026 GMT
Not After : Apr 20 06:00:46 2026 GMT
Subject: CN=bea09cce9908ce54204d90f2e965d1727ec0c4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:7c:0c:1b:98:bd:1e:1e:64:58:b4:b1:25:
e5:4a:e1:32:5f:32:f7:fc:74:8e:66:ee:38:35:8f:
06:91:b0:a1:48:c3:8a:11:ef:66:33:6c:8b:16:1a:
57:a8:e2:b2:fc:76:b5:17:de:d1:1a:da:b3:c4:33:
4a:bf:30:f4:fd:88:06:ad:ac:cf:a2:37:8a:6e:f6:
7e:95:94:dd:76:91:54:ad:e2:37:e4:c5:f5:c9:0c:
3a:9a:9f:53:eb:8f:92:44:92:95:8f:35:35:b0:a3:
cc:f0:86:d6:80:ef:72:69:1a:5d:39:21:db:3e:b2:
b5:85:2c:25:02:0c:e4:e3:91:d5:1e:bb:4b:93:cb:
7c:97:2b:e7:ef:ee:59:d1:e6:3f:08:b3:97:7d:91:
68:63:c0:de:b9:51:3f:62:52:2a:81:66:f7:da:93:
da:3e:d4:64:87:f4:fa:15:d3:5c:84:20:e0:eb:62:
2e:91:bc:94:c0:11:f5:cc:b1:36:b5:54:b7:87:59:
e7:a7:7a:52:89:cb:e5:67:6b:19:93:f1:9e:21:24:
e8:e4:7c:76:cd:75:22:4f:7f:73:12:b3:91:03:1f:
d4:8d:ae:2f:00:7c:91:fb:b9:5c:68:90:77:45:24:
79:43:ad:62:45:97:a3:5c:18:d2:3e:eb:46:3a:76:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A0:9C:CE:99:08:CE:54:20:4D:90:F2:E9:65:D1:72:7E:C0:C4:D4
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d3:e6:19:95:b0:b7:a3:15:84:a7:9c:0d:24:28:b8:1a:9a:
a0:85:c5:9e:1b:69:d6:48:8f:12:e9:b6:73:41:f0:05:a2:12:
d6:0c:3a:3e:46:c2:4c:30:a5:07:84:4b:87:4d:f6:32:b4:29:
23:3a:78:74:71:78:f3:58:ff:b9:31:e3:95:f3:5d:c0:a6:1a:
3e:26:c6:8d:e6:28:c8:6f:a8:f7:12:ec:cb:fd:d5:3a:02:b8:
26:cb:bd:27:82:f3:89:d4:1a:4f:52:ce:3b:6b:39:7e:c2:03:
e7:24:bf:73:87:01:97:12:d2:04:b6:aa:ff:cd:79:46:f4:9a:
fb:38:3f:1f:fd:a5:bc:cd:27:ed:d2:d8:59:3f:8a:79:62:1c:
d3:63:eb:17:78:b8:a5:ec:23:d3:7e:f6:80:d6:8e:c7:d3:50:
22:3c:53:a3:9d:c2:58:92:3c:41:22:d8:ba:81:ec:30:1d:59:
d6:0a:e1:38:37:5a:41:83:67:e4:c1:8f:f7:00:fe:be:21:ca:
0b:c5:5b:5d:40:fb:54:71:ca:87:34:6f:94:95:24:e9:e7:ac:
b0:a0:7c:fe:11:cc:78:49:ba:67:0a:19:b6:cb:98:bd:50:34:
37:1f:81:01:b3:15:c9:49:a9:ca:33:1b:8d:d2:e0:70:31:13:
f4:5b:85:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU8NS+iDHyUInQI+mMK7dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzAwYjk2ZTlhN2EwZjlkYjg5YmY1ZTE4MTE1YjEyYTNl
ZjE2OTIwHhcNMjYwNDE5MDYwMDQ2WhcNMjYwNDIwMDYwMDQ2WjAzMTEwLwYDVQQD
EyhiZWEwOWNjZTk5MDhjZTU0MjA0ZDkwZjJlOTY1ZDE3MjdlYzBjNGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgx8DBuYvR4eZFi0sSXlSuEyXzL3
/HSOZu44NY8GkbChSMOKEe9mM2yLFhpXqOKy/Ha1F97RGtqzxDNKvzD0/YgGrazP
ojeKbvZ+lZTddpFUreI35MX1yQw6mp9T64+SRJKVjzU1sKPM8IbWgO9yaRpdOSHb
PrK1hSwlAgzk45HVHrtLk8t8lyvn7+5Z0eY/CLOXfZFoY8DeuVE/YlIqgWb32pPa
PtRkh/T6FdNchCDg62IukbyUwBH1zLE2tVS3h1nnp3pSicvlZ2sZk/GeISTo5Hx2
zXUiT39zErORAx/Uja4vAHyR+7lcaJB3RSR5Q61iRZejXBjSPutGOnYE6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6gnM6ZCM5UIE2Q8ull0XJ+wMTUMB8GA1UdIwQY
MBaAFNxwC5bpp6D524m/XhgRWxKj7xaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zY2VkZmUtMDI2Yy00ZDc4LWI4Yzgt
NTI1MjMwZTIwNjgxLzEvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8zY2VkZmUtMDI2Yy00ZDc4LWI4YzgtNTI1MjMwZTIwNjgx
LzEvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNPmGZWw
t6MVhKecDSQouBqaoIXFnhtp1kiPEum2c0HwBaIS1gw6PkbCTDClB4RLh032MrQp
Izp4dHF481j/uTHjlfNdwKYaPibGjeYoyG+o9xLsy/3VOgK4Jsu9J4LzidQaT1LO
O2s5fsID5yS/c4cBlxLSBLaq/815RvSa+zg/H/2lvM0n7dLYWT+KeWIc02PrF3i4
pewj0372gNaOx9NQIjxTo53CWJI8QSLYuoHsMB1Z1grhODdaQYNn5MGP9wD+viHK
C8VbXUD7VHHKhzRvlJUk6eessKB8/hHMeEm6ZwoZtsuYvVA0Nx+BAbMVyUmpyjMb
jdLgcDET9FuFlw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:14 2026 by rpki-client