Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: iWD8dSSKMuvebSFYRqp91W8xujtZhKo7K0kWr+aKTxI=
Subject key identifier: 4B:00:E2:73:F6:9B:56:A3:6E:8D:1F:94:43:A7:7F:AF:79:4C:EA:5F
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 019DA3AF4CD1ADC25BA4F158527AACF6D081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 18D5
Signing time: Sun 19 Apr 2026 03:01:07 +0000
Manifest this update: Sun 19 Apr 2026 03:01:07 +0000
Manifest next update: Mon 20 Apr 2026 03:01:07 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: lL6zzAnnsbgL6Q6vqXy/0tcQMqcyCcbJ4TD6rAPArqk=)
2: VfPqQIUYDVEcRMuY0y_1WkG7tNM.roa (hash: jXhdAhn6nzRP7djqjR0wEfaKlgEOeT24wYK6k5lvQMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:4c:d1:ad:c2:5b:a4:f1:58:52:7a:ac:f6:d0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Apr 19 03:01:07 2026 GMT
Not After : Apr 20 03:01:07 2026 GMT
Subject: CN=4b00e273f69b56a36e8d1f9443a77faf794cea5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:4a:8b:29:fb:be:55:12:41:37:00:86:b3:
38:6c:7c:14:02:92:78:6a:7e:f1:92:e3:59:48:0d:
5c:1f:a3:ea:cf:01:03:ba:4b:df:c8:bc:74:45:09:
1f:a7:3b:a7:9b:9e:ea:94:f4:fc:12:66:67:12:a4:
b1:c5:e3:1b:93:be:e5:cd:e3:34:57:8b:85:1c:e3:
e2:40:ef:7a:72:d9:a1:09:00:f4:73:ca:aa:aa:52:
34:44:3e:bc:69:27:e5:d3:91:9c:87:3c:4d:c0:2b:
e5:78:4f:a7:2a:7e:44:1d:ab:da:37:b0:41:ad:4a:
2d:04:ef:09:cb:29:be:c9:23:33:66:75:f8:19:59:
5d:60:06:f3:80:8f:48:1d:7e:ee:00:29:a2:ec:72:
df:38:ca:4b:42:a4:c3:49:8f:01:b5:72:87:ea:c3:
47:ac:69:78:96:27:ca:e0:b3:0d:45:55:17:62:35:
5a:85:10:bd:de:da:dd:b7:f9:a6:e0:c8:9c:b1:22:
44:83:63:eb:e6:1e:4a:14:23:7d:1b:0a:0c:a9:62:
72:f0:b1:b9:ae:cc:1e:ad:d4:53:51:43:7f:9e:c5:
d8:58:3a:42:f1:71:9f:47:8e:a1:d2:84:89:85:64:
33:4c:0d:55:59:a8:cb:60:2e:f9:db:24:00:1c:36:
f0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:00:E2:73:F6:9B:56:A3:6E:8D:1F:94:43:A7:7F:AF:79:4C:EA:5F
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:16:c9:29:de:47:af:ab:84:29:13:bb:f0:48:8b:27:c8:5b:
2c:59:af:9f:f3:e6:fb:7d:7a:23:75:b0:7d:4f:02:69:8e:67:
16:4f:78:2f:d9:dd:f1:7d:d4:f7:7a:4c:c6:42:f0:8f:c3:39:
9b:0d:98:25:15:68:91:dd:d7:70:8f:10:b2:93:eb:fc:68:a9:
4f:41:6f:cf:1d:a0:fe:0b:0d:be:ef:6c:bb:2c:7c:fd:b0:ce:
e2:34:f5:ca:d9:db:25:39:dd:de:f0:ba:d6:bb:fc:79:cd:b2:
d7:d4:c8:e3:48:cb:0d:95:ea:fa:62:c7:db:88:05:37:7b:36:
dc:36:1f:36:a3:7d:36:f1:d0:c6:71:63:b2:bc:87:95:96:de:
0e:4f:1c:ae:ad:31:88:45:9b:c9:f6:f5:57:1d:e6:12:6f:2a:
bb:98:56:08:05:15:e5:09:eb:03:85:69:d7:87:7c:80:73:52:
7c:0a:38:13:04:95:1a:70:f3:00:83:ac:a1:16:94:a5:a6:d6:
2f:64:90:1a:77:cc:72:d6:a2:dc:6c:82:ff:ec:eb:37:ba:ff:
37:fc:7e:18:41:9d:22:c3:c9:91:9a:64:86:cc:5b:5a:50:94:
00:1f:e4:05:42:90:23:dc:f3:3e:23:9b:01:83:bb:b7:08:50:
18:8d:93:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jr0zRrcJbpPFYUnqs9tCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTQ2YjFmY2Q5MmI0N2Y0ZjU1ZmFkMDM4Yzk1ODEzNDBh
OWQzNzAwHhcNMjYwNDE5MDMwMTA3WhcNMjYwNDIwMDMwMTA3WjAzMTEwLwYDVQQD
Eyg0YjAwZTI3M2Y2OWI1NmEzNmU4ZDFmOTQ0M2E3N2ZhZjc5NGNlYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjNKiyn7vlUSQTcAhrM4bHwUApJ4
an7xkuNZSA1cH6PqzwEDukvfyLx0RQkfpzunm57qlPT8EmZnEqSxxeMbk77lzeM0
V4uFHOPiQO96ctmhCQD0c8qqqlI0RD68aSfl05GchzxNwCvleE+nKn5EHavaN7BB
rUotBO8Jyym+ySMzZnX4GVldYAbzgI9IHX7uACmi7HLfOMpLQqTDSY8BtXKH6sNH
rGl4lifK4LMNRVUXYjVahRC93trdt/mm4MicsSJEg2Pr5h5KFCN9GwoMqWJy8LG5
rswerdRTUUN/nsXYWDpC8XGfR46h0oSJhWQzTA1VWajLYC752yQAHDbwgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsA4nP2m1ajbo0flEOnf695TOpfMB8GA1UdIwQY
MBaAFNykax/NkrR/T1X60DjJWBNAqdNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmIt
YzZkMmI4ZDFmNTY2LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmItYzZkMmI4ZDFmNTY2
LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxbJKd5H
r6uEKRO78EiLJ8hbLFmvn/Pm+316I3WwfU8CaY5nFk94L9nd8X3U93pMxkLwj8M5
mw2YJRVokd3XcI8QspPr/GipT0Fvzx2g/gsNvu9suyx8/bDO4jT1ytnbJTnd3vC6
1rv8ec2y19TI40jLDZXq+mLH24gFN3s23DYfNqN9NvHQxnFjsryHlZbeDk8crq0x
iEWbyfb1Vx3mEm8qu5hWCAUV5QnrA4Vp14d8gHNSfAo4EwSVGnDzAIOsoRaUpabW
L2SQGnfMctai3GyC/+zrN7r/N/x+GEGdIsPJkZpkhsxbWlCUAB/kBUKQI9zzPiOb
AYO7twhQGI2TAw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:58 2026 by rpki-client